The Federal Trade Commission's new proposal to add some accountability to the data broker industry is merely a first step toward giving consumers some control over the handling of their personal information, privacy experts say.
FTC Commissioner Julie Brill proposed on Wednesday an industry-wide initiative, called "Reclaim Your Name," which would give consumers access to data collected on them, and the ability to correct errors. They could also opt-out having their information used for marketing.
Participation in the initiative, recommended during Brill's keynote at the 23rd Computers, Freedom and Privacy Conference in Washington, D.C., would be voluntary, so it's unclear whether it will get much support from the unregulated industry.
Data brokers are companies that collect personal information on consumers from a wide variety of sources, including the Internet, and then resell it to businesses.
In general, privacy experts welcomed the attention Brill gave to unbridled collection of consumer data, some of which is used to determine whether someone is too risky to do business with, is engaged in fraud or is ineligible to enroll in certain clubs, dating services, schools or other programs. However, whether a voluntary program is enough remains to be seen.
"I welcome the attention to the many problems consumers are having locating and managing their records at various data brokers," Pam Dixon, executive director of the World Privacy Forum, said on Thursday. "I am interested to see how many data brokers step up to the effort -- there will need to be a majority of them participating for any meaningful effort to occur."
Brill would support legislation that would require data brokers to provide "notice, access and correction rights to consumers scaled to the sensitivity and use of the data at issue." For example, people should have the opportunity to correct information used in eligibility determinations.
Beth Givens, director of the Privacy Rights Clearinghouse, said data brokers should be regulated like credit bureaus under the Fair Credit Reporting Act. The FCRA gives consumers notice, access and correction rights for all data used in making employment, credit, insurance and housing decisions.
"The data broker industry must be regulated," she said.
Congress has investigated data brokers' use of consumer information, but has yet to make a serious effort at regulating the industry, leaving it up the FTC to do what it can.
Marc Rotenberg, president and executive director of the Electronic Privacy Information Center, would like to see the FTC do more with the authority it already has.
"The FTC has statutory authority to investigate and prosecute unfair and deceptive trade practices," Rotenberg said. "The president has already made clear in the Consumer Privacy Bill of Rights that consumers should have the right to inspect and correct their personal information held by others."
Sign up for Computerworld eNewsletters.