NebuAd suspends Web-monitoring plans

Silicon Valley start-up NebuAd has suspended plans to deploy a controversial program that displays ads based on the monitoring of Web activity while Congress reviews privacy concerns, according to a report in The Washington Post.

The secretive company, which intercepts and performs deep-packet inspection of what's flowing through a company's network in hopes of delivering relevant ads, announced earlier this week that co-founder and CEO Bob Dykes was resigning. His departure comes as several Internet companies canceled or suspended trials of the tracking technique.

"Our platform was architected to be a multi-channel ad system," spokeswoman Janet McGraw wrote in an e-mail to the newspaper. "With the Internet service provider channel currently on hold with the events of the summer, we have broadened the focus of our business but continue to enhance our technologies for that ISP channel."

NebuAd supports the companies "who have put their trial deployments on hold so that Congress can spend additional time addressing the privacy issues and policies associated with online behavioral advertising," McGraw said.

In July, a trio of politicians in the U.S. House of Representatives opened an investigation into the concept of Web monitoring to display advertisements. Reps. John Dingell, Joe Barton, and Ed Markey focused their probe on a test of NebuAd performed by broadband provider Embarq.

The test involved 26,000 broadband subscribers and was based in Gardner, Kansas. Embarq subscribers were not given a written notice in the mail permitting them to opt out; instead, the only notification they received was a modification to the privacy policy saying "the Web sites that you visit or online searches that you conduct" may be used to "deliver or facilitate the delivery of targeted advertisements." Only 15 subscribers opted out of the test.

Embarq said it believed its "brief" test was consistent with current online advertising business models, and the Federal Trade Commission's voluntary best practices framework.

Markey convened a hearing in which politicians assailed NebuAd for alleged privacy violations, calling its opt-out practices "contemptible" and in violation of "everything the country's been founded on." Around the same time, he and the others had asked Embarq to answer a series of questions. Another NebuAd-testing company that had been pressured by Markey, cable operator Charter Communications, announced in June that it was suspending use of the technology.

Making matters complicated is that the legality of the type of monitoring that NebuAd does is not entirely clear; intercepting customers' communications as they flow through the network begins to look a lot like wiretapping.

The Electronic Communications Privacy Act of 1986 (ECPA); the Communications Act of 1934; and the Cable TV Privacy Act of 1984 all may apply. Cable providers may need to obtain affirmative opt-in consent from customers, putting them at a competitive disadvantage to, say, AT&T and Verizon. State wiretapping laws also may apply.

For its part, NebuAd had posted a legal memo (PDF) designed to defuse those criticisms. It argues that the 1986 changes to wiretap law have not been clarified by courts, and that the Cable Act may not apply to "any record of aggregate data which does not identify particular persons."

CNET News' Declan McCullagh contributed to this report.

[Travis742]

Good to see that the politicians can bring about some positive changes rather quickly. Let's just hope they can keep this from reappearing in a few years.

[umbrae]

Now if only NebuAd (aka Gator) will go out of business so we can be done with them once and for all...

[oceanbeachike]

Last I checked, it wasn't the job of Congress to grandstand against Silicon Valley startups without actually raising any valid legal issues. We may not like NebuAd, but they had just as much right to launch as any other startup, yet Congress scared away all of their clients due to bad PR--nothing more. This sets a really bad precedent for the tech industry, and we should be ashamed that the tech community (including Cnet) has done nothing to defend it.

[Travis742]

It's Congress' job to *make* our laws. Raising an inquiry into a legally gray area is perfectly reasonable - it's their job. On the other hand, if the Judicial branch / DOJ were raising concerns, then they would need to have the valid legal issues you describe in your post because they are responsible for interpreting existing laws. Congress raising concerns about this practice and having inquiries is an indication that perhaps in the future our laws may change to prevent NebuAd from engaging in certain practices. Any reasonable company would stay away from these 'gray' areas when determining their long term strategy. Additionally, this concept that Congress is bullying NebuAd is not true - certain Congresspeople have raised concerns. Before any laws could be created to address this issue, or before any Congressional action could be taken, the entire Congress would need to be on board (subject to the percentage requirements, etc). As YOUR elected officials, Congress represents the collective desires and perspectives of all Americans. If you don't like how they do their job, vote for someone else next time.

[Dalkorian]

Did you really mean to imply that you approve of private for-profit companies wiretapping you?

NebuAd needs to be forcibly closed down forever and the company executives should be charged with federal wiretapping violations. If convicted, it's prison time.

THIS NEEDS TO STOP!!!

[umbrae]

Wiretapping is illegal. Communication Privacy laws restrict what information can be collected/snooped without consent. These activities are all things that make it wise for Congress to get involved. Especially since NebuAds main defense was the laws they are breaking "have not been challenged in courts". NebuAd, as Gator, was involved in illegal activities before, and all they did was change their name and make something worse.

If IT and the tech community really want to avoid problems then they need to really start applying some ethics to their business models, or at least respect existing laws.