ECF Nebuad SA

Total Page:16

File Type:pdf, Size:1020Kb

ECF Nebuad SA Case3:08-cv-05113-TEH Document233-1 Filed08/16/11 Page1 of 23 1 SCOTT A. KAMBER (pro hac vice) ROBERT A. WEIKERT (State Bar No. 121146) [email protected] [email protected] 2 DAVID A. STAMPLEY(pro hac vice) TALLEY MCINTYRE HENRY (State Bar No. 3 [email protected] 203131) KAMBERLAW, LLC [email protected] 4 11 Broadway, 22nd Floor NIXON PEABODY LLP New York, New York 10004 One Embarcadero Center, 18th Floor 5 Telephone: (212) 920-3072 San Francisco, California 94111-3600 Facsimile: (212) 202-6364 Telephone: (415) 984-8200 6 Fax: (415) 984-8300 7 JOSEPH H. MALLEY (pro hac vice) LAW OFFICE OF JOSEPH H. MALLEY, P.C. JASON C. KRAVITZ (pro hac vice) 8 1045 North Zang Boulevard [email protected] Dallas, Texas 75208 NIXON PEABODY LLP 9 Telephone: (214) 943-6100 100 Summer Street Facsimile: (214) 943-6170 Boston, MA 02110-2131 10 Telephone: (617) 345-1000 11 BRIAN J. PANISH (SBN 116060) Fax: (617) 345-1300 [email protected] 12 RAHUL RAVIPUDI (SBN 204519) [email protected] 13 PANISH, SHEA & BOYLE, LLP 11111 Santa Monica Boulevard, Suite 700 14 Los Angeles, California 90025 15 Telephone: (310) 477-1700 Facsimile: (310) 477-1699 16 Additional Attorneys for Plaintiffs 17 Attorneys for Plaintiffs Attorneys for Defendant, 18 NEBUAD, INC. 19 UNITED STATES DISTRICT COURT 20 NORTHERN DISTRICT OF CALIFORNIA 21 22 DAN VALENTINE, et al., No. 3:08-cv-05113 (TEH) (EMC) 23 Plaintiffs, STIPULATION OF SETTLEMENT AND RELEASE 24 vs. Hon. Thelton E. Henderson. 25 NEBUAD, INC., et al., 26 Complaint Filed: November 10, 2008 Defendants. Trial Date: None Set 27 28 -1- STIPULATION OF SETTLEMENT AND RELEASE NO. 3:08-CV-5113 (TEH) (EMC) Case3:08-cv-05113-TEH Document233-1 Filed08/16/11 Page2 of 23 1 STIPULATION OF SETTLEMENT AND RELEASE 2 This Stipulation of Settlement and Release (the “Agreement”) is entered into by and 3 between Defendant NebuAd, Inc., a Delaware corporation, and Plaintiffs Dan Valentine, Neil 4 Deering, Saul Dermer, Kathleen Kirch, Terry Kirch, Dale Mortenson, and Andrew Paul Manard, 5 on behalf of themselves and the class they purport to represent (hereinafter collectively 6 “Plaintiffs”). 7 A. This Agreement is submitted pursuant to Rule 23 of the Federal Rules of Civil Procedure. Subject to the approval of the Settlement Court (as 8 defined herein), this Agreement is entered into between and among: (1) the Settlement Class Representative (as defined herein) on behalf of 9 himself and the Settlement Class; and (2) Defendant (as defined herein), 10 by and through their respective counsel. 11 WHEREAS, on or about November 10, 2008, Dan Valentine and other individuals filed a 12 class action complaint in this action asserting various claims on behalf of a nationwide class (the 13 “Action”); 14 WHEREAS, Plaintiffs alleged that Defendant was liable for damages based on violations 15 of the Electronic Communications Privacy Act, the Computer Fraud and Abuse Act, California’s 16 Invasion of Privacy Act, California’s Computer Crime Law, and Unjust Enrichment, and for 17 attorneys’ fees, costs of suit, and pre- and post-judgment interest; 18 WHEREAS, Defendant asserts a number of legal and factual defenses to the claims made 19 in the Action and denies any wrongdoing or liability whatsoever; 20 WHEREAS, after the conduct alleged in the Action occurred and after the Action was 21 commenced, on May 13, 2009, NebuAd (assignment for the benefit of creditors), LLC was 22 appointed as the Assignee by NebuAd, Inc., pursuant to California law for the purpose of 23 liquidating NebuAd, Inc.’s assets, winding down NebuAd, Inc., and distributing the net 24 liquidation proceeds to creditors of NebuAd, Inc. NebuAd (assignment for the benefit of 25 creditors), LLC is not a party to the Action, and it is not alleged that NebuAd (assignment for the 26 benefit of creditors), LLC is involved or in any way responsible for any of the claims or damages 27 alleged in the Action. 28 WHEREAS, on or about October 6, 2009, the Court dismissed Bresnan Communications, -2- STIPULATION OF SETTLEMENT AND RELEASE NO. 3:08-CV-5113 (TEH) (EMC) Case3:08-cv-05113-TEH Document233-1 Filed08/16/11 Page3 of 23 1 Cable One, CenturyTel, Embarq, Knology, and Wow! as defendants in the Action based on lack 2 of personal jurisdiction; 3 WHEREAS, since the dismissal of Bresnan Communications, Cable One, CenturyTel, 4 Embarq, Knology, and Wow!, each of those cases have been refiled in each defendant’s home 5 federal forum; 6 WHEREAS, Class Counsel (as defined herein) have concluded, after discovery and 7 investigation of the facts and after carefully considering the circumstances of the Action, 8 including the claims asserted in the complaint and the possible legal and factual defenses thereto 9 and the defunct status of company and the opportunity for recovery, that it would be in the best 10 interests of the Plaintiffs (as defined herein) to enter into this Agreement, which interests include 11 the substantial value to be derived by this settlement and the interest in avoiding the uncertainties 12 of litigation and assuring that the benefits reflected herein are obtained for the Plaintiffs; and, 13 further, that Class Counsel consider the settlement set forth herein to be fair, reasonable and 14 adequate and in the best interests of the Plaintiffs; 15 WHEREAS, the Parties were able to reach this Agreement only after arms-length 16 negotiations with each other conducted telephonically over several months; meeting in person in 17 Boston, Massachusetts; negotiations and discussions with former NebuAd, Inc. officers and 18 directors; mediation in person in San Francisco before U.S. Magistrate Judge Joseph Spero, as 19 well as telephonically; Plaintiffs’ evaluation of discovery from NebuAd, Inc., its former officers 20 and directors, and its assignee; evaluation of the allegations and defenses of Internet service 21 providers in this and other litigation; and Plaintiffs’ consultation with technical experts;and 22 WHEREAS, Defendant no longer actively operates a business; and 23 WHEREAS, given Defendant’s current status, Defendant represents that it no longer 24 engages in any conduct in connection with its previous business including the conduct alleged in 25 the complaint herein, if any there was, such that there is no continued possibility that Defendant 26 may engage in conduct which Plaintiffs allege (and Defendant denies) constitutes a violation of 27 law; and 28 WHEREAS, Defendant, through its counsel, after arms-length negotiations, has -3- STIPULATION OF SETTLEMENT AND RELEASE NO. 3:08-CV-5113 (TEH) (EMC) Case3:08-cv-05113-TEH Document233-1 Filed08/16/11 Page4 of 23 1 conditionally agreed to cause its insurers to pay certain sums in settlement for the benefit of the 2 Settlement Class, as provided in this Agreement; 3 WHEREAS, Defendant, despite its belief that it has valid and complete defenses to the 4 claims asserted against it in the Action, has nevertheless agreed to enter into this Agreement to 5 reduce and avoid further expense, inconvenience, and the distraction of burdensome and 6 protracted litigation, and thereby to resolve this controversy; 7 WHEREAS, Defendant represents that it no longer exists as a legal entity, NebuAd 8 (assignment for the benefit of creditors), LLC, has been requested to and has agreed to execute 9 this Agreement as a facilitator of the settlement process only, but is not a party to or in any way 10 responsible as an obligor hereunder or in any way responsible for any of the obligations incurred 11 by or on behalf of Defendant through this Agreement; 12 NOW, THEREFORE, it is agreed by and between the undersigned on behalf of NebuAd, 13 Inc. and the Settlement Class Representative that any and all claims made or that could have 14 been made against NebuAd by the Settlement Class Representative or the Settlement Class in the 15 Action be settled, compromised and dismissed on the merits and with prejudice and, except as 16 hereafter provided, without costs as to the Settlement Class Representative or NebuAd, subject to 17 the approval of the Settlement Court, on the following terms and conditions. 18 I. DEFINITIONS 19 1. Settlement Class. Subject to the Settlement Court’s approval, and the conditions 20 of Section III.1., the undersigned agree and consent to the certification pursuant to Fed. R. Civ. 21 P. 23(b)(1) of the following settlement class (the “Settlement Class”): 22 The class shall consist of all persons in the United States who, from January 1, 2007 to July 1, 2008, were consumers subscribing to the services of 23 certain Internet Service Providers identified in Exhibit A hereto (there shall be confirmatory discovery to determine and/or confirm the identities of these 24 Internet Service Providers, and Exhibit A shall be kept under seal until after Preliminary Approval). Excluded from the Settlement Class are the 25 following: Defendant, and any of aforementioned respective parent, 26 subsidiary, affiliate or control person of Defendant, as well as the officers, directors, agents, servants, or employees of Defendant, any judge presiding 27 over this case over any of the cases which comprise the Action, and the immediate family members of any such person(s). 28 -4- STIPULATION OF SETTLEMENT AND RELEASE NO. 3:08-CV-5113 (TEH) (EMC) Case3:08-cv-05113-TEH Document233-1 Filed08/16/11 Page5 of 23 1 2. General Definitions. As used in this Agreement, the following terms shall have 2 the indicated meanings: 3 A. “Complaint” means the complaint in this Action filed on November 10, 4 2008. 5 B. “Action” means the action associated with the Complaint. 6 C. “Court” or “Settlement Court” means the Honorable Thelton E.
Recommended publications
  • Valentine, Et Al. V. Nebuad, Inc., No
    IMPORTANT COURT-ORDERED NOTICE—PLEASE READ THIS NOTICE SUMMARIZES THE TERMS OF A PROPOSED CLASS ACTION SETTLEMENT UNDER WHICH YOU MAY HAVE CERTAIN LEGAL RIGHTS. SUBJECT: Notice of Pendency of Class Action and Proposed Settlement in the U.S. District Court, Northern District Of California — Valentine, et al. v. NebuAd, Inc., No. 3:08-cv-05113 (TEH)(EMC). DATE: September 20, 2011 Introduction .................................................................................................................................................................................. 1 The Lawsuit ................................................................................................................................................................................... 1 A. What Is a Class Action? ..................................................................................................................................................... 1 B. What Lawsuit and Parties Are Related to This Settlement? ............................................................................................... 1 C. What Is the Lawsuit About? ............................................................................................................................................... 2 Class Membership ........................................................................................................................................................................ 2 A. Who Is in the Class? ..........................................................................................................................................................
    [Show full text]
  • Testimony of Gigi B. Sohn President, Public Knowledge Before the U.S
    ! ! ! Testimony of Gigi B. Sohn President, Public Knowledge Before the U.S. Senate Committee on Commerce, Science & Transportation Hearing On: Broadband Providers and Consumer Privacy Washington, DC. September 25, 2008 Testimony of Gigi B. Sohn President, Public Knowledge Before the U.S. Senate Committee on Commerce, Science, and Transportation Hearing on: Broadband Providers and Consumer Privacy September 25, 2008 Chairman Inouye, Ranking Member Hutchison and Members of the Committee, thank you for giving me the opportunity to testify about broadband providers and consumer privacy. I’d like to focus today on the growing use of the collection of technologies known as “Deep Packet Inspection,” or DPI, which has immense implications for the privacy rights of the American public. Over the past several months, Public Knowledge, in partnership with Free Press, has been analyzing these technologies and their impact on privacy and an open Internet. In June, our organizations published a white paper entitled NebuAd and Partner ISPs: Wiretapping, Forgery and Browser Hijacking, which examined the technical and policy aspects of DPI. I applaud the Committee for its continued scrutiny of the use of these technologies.1 I. Introduction Today's hearing on consumer privacy comes in the wake of two high-profile online consumer privacy violations, both of which involved the use of Deep Packet Inspection (DPI) technology on an Internet Service Provider's (ISP) network. The first instance came to light in October 2007, when an Associated Press report revealed that Comcast was interfering with its customers' BitTorrent traffic.2 The report confirmed earlier tests conducted by independent network researcher Robb Topolski, who found that Comcast was analyzing its users' web traffic in order to determine the types of applications and protocols being used.
    [Show full text]
  • Tenth Circuit Decision Limits ECPA Liability of Isps for Privacy Violations by Third Party Partner by Mary Ellen Callahan, David A
    Privacy and Information Governance January 8, 2013 Privacy and Information Governance Client Alert Tenth Circuit Decision Limits ECPA Liability of ISPs for Privacy Violations by Third Party Partner by Mary Ellen Callahan, David A. Handzo and Matthew E. Price The U.S. court of Appeals for the Tenth Circuit data collected by NebuAd, other than the access it has held that an internet service provider (ISP) had in the ordinary course of its business as an ISP. did not violate privacy laws when it allegedly Thus, regardless of whether NebuAd had engaged allowed a third-party advertising company to gather in prohibited interception, Embarq could not be held information concerning the websites visited by the liable for any such interception under an aiding and ISP’s customers – information that the advertising abetting liability theory. company used to deliver targeted advertisements In reaching that conclusion, the court rejected the The decision has important implications for online plaintiffs’ argument that Embarq could be held advertising and e-commerce. directly liable for interception merely because it had The case, Kirch v. Embarq Management Company, custody and control over the hardware that NebuAd was a putative class action against Embarq, had installed on the network. The court held that, in an ISP, brought by two of its customers. The order to hold Embarq liable, the plaintiffs would need plaintiffs alleged that Embarq had “intercepted” to prove that Embarq had acquired the information their communications in violation of the Electronic collected by that hardware, and the summary Communications Privacy Act (“ECPA”) by allowing judgment record showed that Embarq did not.
    [Show full text]
  • Privacy Implications of Online Advertising Hearing
    S. HRG. 110–1179 PRIVACY IMPLICATIONS OF ONLINE ADVERTISING HEARING BEFORE THE COMMITTEE ON COMMERCE, SCIENCE, AND TRANSPORTATION UNITED STATES SENATE ONE HUNDRED TENTH CONGRESS SECOND SESSION JULY 9, 2008 Printed for the use of the Committee on Commerce, Science, and Transportation ( U.S. GOVERNMENT PRINTING OFFICE 76–329 PDF WASHINGTON : 2012 For sale by the Superintendent of Documents, U.S. Government Printing Office Internet: bookstore.gpo.gov Phone: toll free (866) 512–1800; DC area (202) 512–1800 Fax: (202) 512–2104 Mail: Stop IDCC, Washington, DC 20402–0001 VerDate Nov 24 2008 14:12 Oct 23, 2012 Jkt 075679 PO 00000 Frm 00001 Fmt 5011 Sfmt 5011 S:\GPO\DOCS\76329.TXT JACKIE SENATE COMMITTEE ON COMMERCE, SCIENCE, AND TRANSPORTATION ONE HUNDRED TENTH CONGRESS SECOND SESSION DANIEL K. INOUYE, Hawaii, Chairman JOHN D. ROCKEFELLER IV, West Virginia TED STEVENS, Alaska, Vice Chairman JOHN F. KERRY, Massachusetts JOHN MCCAIN, Arizona BYRON L. DORGAN, North Dakota KAY BAILEY HUTCHISON, Texas BARBARA BOXER, California OLYMPIA J. SNOWE, Maine BILL NELSON, Florida GORDON H. SMITH, Oregon MARIA CANTWELL, Washington JOHN ENSIGN, Nevada FRANK R. LAUTENBERG, New Jersey JOHN E. SUNUNU, New Hampshire MARK PRYOR, Arkansas JIM DEMINT, South Carolina THOMAS R. CARPER, Delaware DAVID VITTER, Louisiana CLAIRE MCCASKILL, Missouri JOHN THUNE, South Dakota AMY KLOBUCHAR, Minnesota ROGER F. WICKER, Mississippi MARGARET L. CUMMISKY, Democratic Staff Director and Chief Counsel LILA HARPER HELMS, Democratic Deputy Staff Director and Policy Director CHRISTINE D. KURTH, Republican Staff Director and General Counsel PAUL NAGLE, Republican Chief Counsel (II) VerDate Nov 24 2008 14:12 Oct 23, 2012 Jkt 075679 PO 00000 Frm 00002 Fmt 5904 Sfmt 5904 S:\GPO\DOCS\76329.TXT JACKIE C O N T E N T S Page Hearing held on July 9, 2008 ................................................................................
    [Show full text]
  • ISP-Enabled Behavioral Ad Targeting Without Deep Packet Inspection
    ISP-Enabled Behavioral Ad Targeting without Deep Packet Inspection GabrielMaci´a-Fern´andez YongWang RafaelRodr´ıguez Aleksandar Kuzmanovic University of Granada University of Electronic Science University of Granada Northwestern University Granada, Spain and Technology of China, China Granada, Spain Evanston,IL,USA [email protected] [email protected] [email protected] [email protected] Abstract—Online advertising is a rapidly growing industry collection systems is a legal one:1 unlike Google (not a currently dominated by the search engine ’giant’ Google. In an broadband provider), ISPs that provide broadband services are attempt to tap into this huge market, Internet Service Providers not exempt from the Federal Wiretap Act, originally enacted (ISPs) started deploying deep packet inspection techniques to track and collect user browsing behavior. However, such tech- in 1968 to protect against phone wiretapping and amended niques violate wiretap laws that explicitly prevent intercepting in 1986 to cover computer network communications. It states the contents of communication without gaining consent from a simple prohibition: thou shalt not intercept the contents of consumers. In this paper, we show that it is possible for ISPs communications (see 18 U.S.C §2411(1)) [11]. Violations can to extract user browsing patterns without inspecting contents of result in civil and criminal penalties. Indeed, this prohibition communication. Our contributions are threefold. First, we develop a metho- has clearly been violated by deep packet inspection techniques dology and implement a system that is capable of extracting [12]. The law predicts several exceptions, e.g., security reasons web browsing features from stored non-content based records of (see 18 U.S.C.
    [Show full text]
  • Nebuad Report Final
    NebuAd and Partner ISPs: Wiretapping, Forgery and Browser Hijacking Robert M. Topolski Chief Technology Consultant Free Press and Public Knowledge June 18, 2008 Executive Summary This report addresses the technical aspects of NebuAd, a targeted behavioral advertising company with offices located in the United States and United Kingdom that recently began seeking deals with Internet Service Providers (ISPs). NebuAd recently made headlines when the cable operator Charter announced that it had struck a deal with the company. Charter’s announcement prompted public and congressional inquiries into NebuAd’s practices, including a letter from Rep. Ed Markey (D-Mass.) and Rep. Joe Barton (R-Texas). NebuAd has also been deployed by WOW!, Embarq, Broadstripe, CenturyTel, Metro Provider and others. To determine NebuAd’s practices, this investigation used sound and reproducible network testing methods. The investigation concludes that NebuAd’s advertising hardware monitors, intercepts and modifies the contents of Internet packets using Transmission Control Protocol on Internet Protocol (TCP/IP). In doing so, NebuAd commandeers users’ Web browsers and collects uniquely identifying tracking cookies to facilitate its advertising model. Apparently, neither the consumers nor the affected Web sites have actual knowledge of NebuAd’s interceptions and modifications. NebuAd exploits several forms of “attack” on users’ and applications’ security, the use of which has always generated considerable controversy and user condemnation, including browser hijacking, cross-site scripting and man-in-the-middle attacks. These practices -- committed upon users with the paid-for cooperation of ISPs -- violate several fundamental expectations of Internet privacy, security and standards-based interoperability. Moreover, NebuAd violates the Internet Engineering Task Force (IETF) standards that created today’s Internet where the network operators transmit packets between end users without inspecting or interfering with them.
    [Show full text]
  • Deep Packet Inspection and Communications Laws and Policies"
    CENTER FOR DEMOCRACY & TECHNOLOGY Statement of Alissa Cooper Chief Computer Scientist, Center for Democracy & Technology Before the House Committee on Energy and Commerce, Subcommittee on Telecommunications and the Internet " What Your Broadband Provider Knows About Your Web Use: Deep Packet Inspection and Communications Laws and Policies" July 17, 2008 ! I. Summary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
    [Show full text]
  • Deep Packet Inspection, Public Pressure and Regulatory Actions
    Deep Packet Inspection, Public Pressure and Regulatory Actions Comparative Cases on Online Copyright Enforcement and Behavioral Targeted Advertising Andreas Kuehn, Milton Mueller School of Information Studies, Syracuse University www.deeppacket.info Talk @ HIIG, Berlin, Oct 24, 2012 Flyer der Digitale Gesellschaft e.V. zum Thema DPI, Oktober 2012. Source: https://digitalegesellschaft.de/wp-content/uploads/2012/10/dg_dpi_FINAL1.pdf Stellen Sie sich vor, die Post öffnet alle Ihre Briefe und liest den Inhalt. Manche schreibt sie um – und andere schmeißt sie einfach weg. Das klingt absurd? Genau das passiert mit Ihren Daten im Internet Flyer der Digitale Gesellschaft e.V. zum Thema DPI, Oktober 2012. Overview • Introduction – What is DPI? – DPI Capabilities and Applications • Cases: Online Copyright Enforcement • Cases: Online Behavioral Advertising – Proposed 4-Stage Disclosure Pattern • Conclusion • Q&A Deep Packet Inspection SPI Header DPI Payload Deep Packet Inspection Key Features • DPI pertains to information in motion, not information at rest. Technical Capabilities • Recognition • Manipulation • Notification Applications and Deployments • Using these three basic capabilities, vendors and network operators build DPI applications. • The list of DPI use cases is long and the lines between them are blurry. DPI as “Disruptive Technology” • Tension or conflict with three fundamental principles of Internet governance: – The end to end argument (a.k.a. net neutrality) – Intermediary immunity – Expectations of privacy General Research Question
    [Show full text]
  • Intellectual Property & Technology Law Journal Eric C. Bosset Simon J
    PRIVATE ACTIONS CHALLENGING ONLINE DATA COLLECTION PRACTICES ARE INCREASING: ASSESSING THE LEGAL LANDSCAPE Intellectual Property & Technology Law Journal Eric C. Bosset Simon J. Frankel Mali B. Friedman Stephen P. Satterfield February 2011 The advent of the browser (or HTTP) cookie in the mid-1990s provided Web publishers and online advertisers with a new means of collecting information about consumer interests and for serving targeted advertisements on the basis of that information. This innovative technology also drew criticism from some circles and ultimately prompted several lawsuits against publishers, advertisers, and the ad networks that facilitate the relationship between them.1 Although these suits largely were unsuccessful, the controversy over HTTP cookies led to modifications in browser privacy controls that gave users an increased ability to limit and delete cookies on their computers. In the past decade, the number and quality of online data collection technologies have increased. At first, these technologies were subject to scrutiny principally by regulators, and industry responded by developing more robust privacy disclosures concerning their use. More recently, these next-generation technologies also have been a topic of heightened interest from the press—for example, an ongoing series in the Wall Street Journal2—and have inspired a spate of putative class action lawsuits relating to online data collection, alleging violations of various federal and state laws. Indeed, the past few years have witnessed the rise of a privacy
    [Show full text]
  • Canadian Internet Policy and Public Interest Clinic Clinique D'intérêt Public Et De Politique D'internet Du Canada 25 July
    Canadian Internet Policy and Public Interest Clinic Clinique d’intérêt public et de politique d’internet du Canada 25 July 2008 BY COURIER AND EMAIL Privacy Commissioner of Canada 112 Kent Street Ottawa, Ontario K1A 1H3 Dear Commissioner Stoddart: Re: Request for an investigation and development of guidelines re: ISP use of Deep Packet Inspection technology for behavioural targeted marketing purposes 1. This is a request that your office investigate the current and potential use of deep packet inspection (DPI) technology by internet service providers (ISPs) for the purpose of behavioural targeted advertising, with a view to developing industry guidelines consistent with legal requirements under the Personal Information Protection and Electronic Documents Act (PIPEDA). 2. This request is separate from and in addition to our complaints made under s.11 of PIPEDA against Bell Canada (complaint #6100-02744), and by way of separate letters today, against Rogers Communications Inc., Shaw Communications Inc. and Eastlink. Those complaints focus on the use by those ISPs of DPI for the purpose of traffic management. 3. Given the speed with which DPI technology is being deployed, the variety of purposes for which it is being marketed, and the obvious privacy concerns that it raises, we submit that the time is ripe for your office to investigate these matters on an industry-wide basis and to develop guidelines for PIPEDA-compliant use of DPI by ISPs, in the context of behavioural targeting as well as traffic-shaping. 4. Our research suggests that some Canadian ISPs may be engaging or preparing to engage in the collection of subscriber data via DPI in order to target advertising at individual users.
    [Show full text]
  • Every Click You Make
    Every Click You Make http://www.washingtonpost.com/wp-dyn/content/article/2008/04/03/AR... Every Click You Make Internet Providers Quietly Test Expanded Tracking of Web Use to Target Advertising By Peter Whoriskey Washington Post Staff Writer Friday, April 4, 2008; D01 The online behavior of a small but growing number of computer users in the United States is monitored by their Internet service providers, who have access to every click and keystroke that comes down the line. The companies harvest the stream of data for clues to a person's interests, making money from advertisers who use the information to target their online pitches. The practice represents a significant expansion in the ability to track a household's Web use because it taps into Internet connections, and critics liken it to a phone company listening in on conversations. But the companies involved say customers' privacy is protected because no personally identifying details are released. The extent of the practice is difficult to gauge because some service providers involved have declined to discuss their practices. Many Web surfers, moreover, probably have little idea they are being monitored. But at least 100,000 U.S. customers are tracked this way, and service providers have been testing it with as many as 10 percent of U.S. customers, according to tech companies involved in the data collection. Although common tracking systems, known as cookies, have counted a consumer's visits to a network of sites, the new monitoring, known as "deep-packet inspection," enables a far wider view -- every Web page visited, every e-mail sent and every search entered.
    [Show full text]
  • Nebuad Closing Doors After Internet Privacy Woes 20 May 2009, by DEBORAH YAO , AP Business Writer
    NebuAd closing doors after Internet privacy woes 20 May 2009, By DEBORAH YAO , AP Business Writer (AP) -- NebuAd Inc., a company that sought to and expects to deploy it this year. target ads to consumers based on their online behavior, is going out of business after facing Griffiths said Phorm asks consumers upfront after scrutiny over whether its technology infringed on they log on whether they want to receive targeted the privacy of Internet surfers. ads. Griffiths added that the company has received assurances from the British government that its In court filings this week, NebuAd said it has been technology "can be operated in a lawful manner." winding down its business since last year. It laid off virtually all its employees in July and August, Even so, Richard Clayton from Internet think tank closing its office in Redwood City, Calif., in Foundation for Information Policy Research in September. NebuAd once employed over 60 Cambridge, England, believes Phorm is getting people. some snubs from potential partners. NebuAd has "essentially ceased to exist," "I haven't seen any other ISPs queuing up to according to documents filed with the U.S. District associate themselves with Phorm at all," he said. Court for the Northern District of California. "A number of smaller ones have said they won't go anywhere near it." NebuAd's clients - Internet service providers who wanted to share the ad revenue with NebuAd - ©2009 The Associated Press. All rights reserved. started dropping out after Congress held hearings This material may not be published, broadcast, last July on the technology, which examined rewritten or redistributed.
    [Show full text]