European laws target computer 'cookies,' but is compliance already crumbling?
| Los Angeles
Resisting a chocolate chip cookie is a dieter鈥檚 nightmare. But fighting unwanted digital 鈥渃ookies鈥� 鈥� the little text files that allow web sites to track your computer activity 鈥� is the new coin of the digital realm.
As global concern over cyber identity sleuthing by commercial interests grows, the European Union (EU) has taken the lead on the issue. Wednesday was the deadline for compliance with the first government-sanctioned 鈥渃ookie laws鈥� designed to give consumers the ability to choose whether to be tracked in their digital lives.
The 27 countries of the EU were supposed to begin implementing laws allowing any EU-based user the right to opt-in to being tracked. But compliance with the cookie law has been anything but sweet.
Depending on the definition of compliance, as few as two countries and maybe as many as nine have actually indicated an effort to require companies to provide an opt-in mechanism for EU-based consumers. The UK is complying, sort of, issuing a year鈥檚 grace period for UK firms to devise strategies to meet the requirements of the new law.
鈥淚鈥檓 sure the intention is good,鈥� says partner Bridget Treacy, speaking by phone from the London offices of Hunton & Williams, ranked by Computerworld magazine as the top law firm for privacy and data security.
But, she adds, 鈥淚t is not very practical to implement,鈥� adding that there is a 鈥渞eal question as to whether it will actually enhance data protection. 鈥�
One big obstacle is the sheer technical complexity of allowing users to opt-in to every cyber 鈥渃ookie鈥� a site may want or even need to place on a user鈥檚 hardware. There are different kinds of cookies (besides chocolate chip and oatmeal).
Advertisers track your buying habits
Roughly divided into what are known as first and third parties 鈥� for host site packets versus advertisers 鈥� these little files can do everything from keep track of that silk scarf you slipped into your online shopping basket until you get to checkout to following you as you wander from one web site to another.
What companies need to do during the grace period, says Ms. Treacy, is understand the cookies they already use 鈥� 鈥淭he need to understand where they sit on the spectrum from not intrusive to those that are much more intrusive.鈥�
After that, they can assess whether they really need them and which consent mechanism to offer.
This may vary from a pop-up request to a check box in the terms and conditions or even settings adjustments on browsers.
But of course, she points out, there are problems with each. For one thing, not everyone accesses the Internet via a computer with browser settings that can be adjusted.
Degrading the quality of the online interaction is another big issue, says Jim Halpert, partner in the communications, E-commerce, and privacy practice of DLA Piper, a legal services company with offices around the world.
鈥淭his will be a very bumpy user experience,鈥� he says, speaking from his office in Paris. A constant stream of interruptions could easily deter consumers from going very far online, he says.
Free Internet content could be impacted
鈥淭his could be potentially very disruptive to the Internet economy as a whole,鈥� adds Mr. Halpert. If the online experience is either severely interrupted with constant requests to consent or users remove their consent some other way, he notes, 鈥淭his will chip away at one of the few business models for free content on the Internet.鈥�
New media entrepreneur Alex Huf has been looking around that corner and says he has a solution to both sides of the problem.
Founder of the new, CloudCapture.org, currently in beta, Mr. Huf says the key is to allow users the ability to control their personal data.
Most consumers will say a knee-jerk 鈥渘o鈥� to being tracked if they are asked, but what they don鈥檛 realize is that there is value to both sides from sharing information with a web site or business you trust.
The key, he adds, is control, which he says his company offers by creating 鈥渁 sort of digital bank for this new online currency.鈥� Through it, he adds, consumers can control who gets to see their information and when.
