ONLINE INTEREST-BASED ADVERTISING ACCOUNTABILITY PROGRAM
Case Number: 03-2011
Advertising Accountability Program )
November 8, 2011
Under the Consumer Control Principle, a company is required to set an opt-out cookie
with a minimum expiration date of five years from the date on which a consumer
Reedge, Inc. (Reedge or the company) is engaged in online behavioral advertising
(OBA)¹ as defined in the cross-industry Self-Regulatory Principles for Online Behavioral
Online Behavioral Advertising means the collection of data from a
particular computer or device regarding Web viewing behaviors over time
and across non-Affiliate Web sites for the purpose of using such data to
predict user preferences or interests to deliver advertising to that computer
or device based on the preferences or interests inferred from such Web
viewing behaviors. (Principles at 9-10, Definition G.).
OBA PRACTICE AT ISSUE
One of the cornerstones of the Principles is “consumer control.” (Principles at 14,
Principle III.). A third party must provide the consumer with an easy-to-use mechanism
that allows the consumer to exercise choice regarding the collection and use of data from
his or her device for OBA purposes. The practice at issue is whether the company was
providing consumers with choice as required under the Consumer Control Principle.
The obligation of a third party to enable a consumer to exercise choice is explained in the
Principles as follows:
A Third Party should provide consumers with the ability to exercise choice with
respect to the collection and use of data for Online Behavioral Advertising
purposes or the transfer of such data to a non-Affiliate for such purpose. Such
choice should be available from the notice described in II.A.(2)(a); from the
industry-developed Web page(s) as set forth in II.A.2.(b)(i); or from the Third
Party’s disclosure linked to from the page where the Third Party is individually
listed as set forth in II.A.2.(b)(ii). (Principles at 14, III.A.).
BASIS OF INQUIRY
On August 22, 2011, the Online Interest-Based Advertising Accountability Program
(Accountability Program) tested the functionality of the consumer choice mechanism
using five Internet browsers: Chrome, Firefox, Internet Explorer, Opera and Safari.
While the opt-out request was successfully processed in each test, the opt-out cookie
delivered to each browser was set to expire one year from the date of the test. The one
year expiration date falls short of industry standards.
The Principles are built on consensus standards: “The cross-industry Self-Regulatory
Program for Online Behavioral Advertising was developed by leading industry
associations to apply consumer-friendly standards to online behavioral advertising across
the Internet.” (Principles at 1). The industry standard for the duration of an opt-out 3
cookie is five years from the date of the request².
Repeated tests of the choice mechanism continued to find the short expiration date,
demonstrating that the problem was persistent and was not corrected by the company
during the month that testing was repeated.
In response to the Accountability Program’s inquiry, the company acknowledged that the
opt-out cookie delivered to the consumer’s browser contained an expiration date of one
year from the date of the opt-out request. The company stated that upon receipt of the
notice of inquiry, it immediately changed the opt-out cookie’s expiration date to the fiveyear time frame that is the industry standard.
All companies have the obligation to monitor their data collection and advertising
practices to ensure compliance with the Principles, including ensuring that their notice
and choice mechanisms are fully compliant with the Principles at all times. The
Accountability Program finds that Reedge was not compliant with the Consumer Control
Principle because it failed to ensure that its consumer choice mechanism contained an
expiration date consistent with the industry standard minimum of five years.
Upon notification by the Accountability Program, the company changed the opt-out
cookie’s expiration date to five years from the date of the request. The Accountability
Program has conducted subsequent tests on the opt-out mechanism on all browsers
previously tested and found the expiration date for the opt-out cookie to meet the fiveyear minimum as required by the industry standard.
The Accountability Program’s goal is to ensure that companies engaged in OBA comply
with the Self-Regulatory Principles. The Accountability Program’s monitoring and
complaint processes are designed to identify areas of possible non-compliance, to make
companies aware of potential non-compliance and to work with companies to rectify noncompliance. Reedge has implemented the Accountability Program’s recommendations
and the practice at issue has been resolved.
Reedge changed the opt-out to match the five (5) year time-frame suggested. We also
adjusted out internal opt-out procedure deleting all data connected to the unique cookie
(if it was present).
Thank you for your support in making the business better using self-regulation.
DISPOSITION OF DECISION
Practice voluntarily corrected.
1. The company states that its “ online software segments website visitors and dynamically modifies website content to match each individual visitor profile to improve user conversion, improve customer service and make websites operate more efficiently.”
http://www.reedge.com/our-company/about-us (last visited on October 29, 2011).
2. As the Aboutads.info web site explains to consumers who wish to exercise choice, “Opt out cookies storing such preferences that are placed by companies participating in the Program have a minimum fiveyear lifespan, and remain in effect for the user’s browser unless these opt out cookies are deleted (as can happen if users deletes all of their cookies using browser tools).” See also Chitika, Inc., FTC Docket No. C-4324 (June 7, 2011) (requiring Chitika to provide a five-year opt out)