June 15, 2001 6:30 AM PDT
IE 6 beta pushes ad networks on privacy
Internet Explorer 6, scheduled to be released in August, will be the first browser to support a new privacy standard called Platform Privacy Preferences, or P3P.
With P3P, Web surfers can configure their browsers to automatically determine whether a Web site collects personally identifiable information, uses that information to create user profiles, or allows visitors to opt out of the data collection.
Ad networks also must post privacy policies that can be read by the browser. Sites and ads that are not compliant with the standards being included in IE 6 may not be able to place cookies on PC users' hard drives.
The issue recently came to light when some of the 500,000 beta testers of Windows XP noticed that some ads were not being displayed while surfing the Web. Windows XP, an upgrade to the Windows operating system that will be released in October, includes IE 6.
Engage, which serves ads for about 3,400 Web sites, is installing headers so that the browser will be able to read Engage cookies. Complying with P3P is a "fairly significant expenditure of a couple of people's time but it's not overly burdensome," said Engage spokesman Mark Horan.
"Our site will be P3P-compliant within the next three weeks," he added. "Much more important, our cookies will be P3P-compliant before IE 6 launches this fall."
Meanwhile, the default privacy controls for IE 6 could spell trouble for some companies that are late in meeting P3P compliance.
The default setting in IE 6 allows a "first-party" cookie to be set, meaning that if a person visits Yahoo the browser will accept a cookie from Yahoo.
However, "third-party" cookies--most often set by marketers or ad networks to track consumer response to promotions--will be allowed through IE 6 default settings only if the third party allows consumers to opt out of data-collection practices. If the company doesn't give consumers an option, the cookie will be blocked.
DoubleClick's Polonetsky noted the company does not collect personally identifiable information with its cookies and does offer consumers an opt out, so its cookies will be accepted under IE 6 default settings.
"This is a great step for protecting consumers' privacy on the Web," said Rick Miller, a Microsoft spokesman. "Consumers will be able to control what personal information they give out to marketers."
DoubleClick's Polonetsky, who helped to develop the P3P standard, said that although his company will be prepared for the new settings, many online companies may run into trouble come August.
"Here's the surprise: Many Web sites, especially complicated ones with third-party content provided by their affiliates, may discover that they are third parties on their own sites," Polonetsky said. This would create a situation where their cookies would not be accepted on their own properties.
However, Smith said that this will not likely be a problem for many sites because they work fine without cookies, which makes targeting ads more difficult but not impossible.
News.com's Lisa M. Bowman contributed to this report.