For the third year running, identity theft has been the most frequently cited reason why individuals contact consumer protection authorities. In 2003, 43% of complaints to the FTC's Consumer Sentinel database were for identity theft.
In a federal district court decision by Judge John Bates, Verizon lost its defense against the Recording Industry Association of America. A subpoena was issued by RIAA for the name of a Verizon costumer alleged to have trafficked in copyright violating material. Verizon has announced that it will appeal the decision.
The Wall Street Journal reports that supermarket discount cards do not give consumers savings over grocery stores that do not have loyalty card programs. In a study involving five grocery stores in different U.S. cities, the authors found that stores without loyalty cards were cheaper. The cards create a windfall for grocery stores because approximately 10% of shoppers don't use them, and those who use the cards enjoy the same savings that existed before the loyalty programs began.
The banking industry has started playing "Chicken Little" in anticipation of Congressional action that is likely to increase privacy protections. In statements to a Delaware newspaper, a Bank of America spokesperson claims that institutions will have to set up separate call centers to handle consumer requests if opt-in privacy laws pass. However, even in an opt-in framework, federal law would clearly allow information sharing when necessary to administer transactions, to service, or to maintain an account.
In 2002, before North Dakota residents were to vote on a reference establishing opt-in financial privacy protections, the banking industry ran advertisements claiming that increased privacy protections would prevent automated teller machines (ATM) from working in the state. Other advertisements depicted a great wall being erected around the state if privacy laws passed. To contradict the claim that ATMs would no longer function, the North Dakota Attorney General issued a formal opinion showing that the machines would still operate. The residents ultimately approved opt-in by a 73% vote.
Virginia and Maryland legislators have introduced do-not-call (DNC) legislation in order to give individuals more control over telemarketing. VA Senator Leslie Byrne (D) has introduced the Telephone Privacy Protection Act, a bill that addresses both DNC issues and predictive dialers.
MD Senator Brian E. Frosh (D) has introduced Senate Bill 3 to create a free DNC list for residents.
New Jersey State Senator Shirley Turner (D) has introduced the "New Jersey Financial Information Privacy Act." If passed, the act would require opt-in consent before financial institutions shared information with affiliates or non-affiliates. The bill also requires that financial institutions limit their collection of data on individuals.
The California DMV has revoked Allstate Insurance company's online access to DMV records after Allstate employees were caught accessing personal information without authority.
The Supreme Court of Georgia has invalidated a state anti-fornication law, stating that "the government may not reach into the bedroom of a private residence and criminalize the private, noncommercial, consensual sexual acts of two persons legally capable of consenting to those acts." The Court recognized that the "right to privacy has a value so essential to individual liberty in our society that its infringement merits careful scrutiny by the courts."
The Court also rejected the prosecution's argument that an individual has no right to privacy when they enter as a guest into the private home of another.
This decision builds upon a 1998 decision that invalidated the State's anti-sodomy law--a law that was previously upheld by the U.S. Supreme Court in Bowers v. Hardwick.
In December 2002, the U.S. Supreme Court granted review of Lawrence and Garner v. Texas, a Texas case involving a "homosexual conduct" law. The case will test the sodomy laws in 13 states.
San Francisco is the newest local government in California to pass opt-in privacy protections for financial information use. The law takes effect on January 1, 2004, and requires financial institutions to obtain consent before engaging in affiliate or non-affiliate sharing. Fines start at $2,500 for violation of the law.
Other California jurisdictions, including San Mateo, Contra Costa, Alameda, Santa Cruz and Solano counties, and Daly City have already passed opt-in laws.
Richard Smith of ComputerBytesMan.com has challenged the Direct Marketing Association (DMA) to explain how it develops figures measuring the impact of telemarketing sales. According to the DMA, outbound business to consumer telemarketing constituted $274 billion in sales in 2001. If that figure is true, Smith argues "each US resident (adults and children) is spending on average $1,000 per year on outbound telemarketing offers."
In two recent cases, enormous quantities of personal information have been stolen from data warehouses. The Defense Department reported that thousands of medical records were stolen from a Pentagon health care contractor. In that incident, thieves stole hard drives containing more than 500,000 records with Social Security numbers, but left other computer equipment behind. The data was stored electronically as part of the process of building a large network to computerize all military health care files. A $100,000 award is now being offered to individuals who solve the crime.
In a separate incident, the personal information of all 9,600 residents of Iwashiro, Japan was stolen. The data, which included unique identifiers, was stored on data tapes, and apparently were encrypted backups of the national resident registry system.
In 2001, Governor Gray Davis signed California Senate Bill 168, a measure that increases protections against identity theft. The bill was sponsored by Senator Deborah Bowen (D-Redondo Beach). On January 1, 2003, Californians will be able to place a "security freeze" on their credit reports that prevents credit bureaus from releasing their credit information. This provision attempts to address the practice of credit card companies that extend new credit accounts despite the fact that the consumer had recently reported an incident of credit fraud. Other protections, including the ability to place a "security alert" on the credit report and protections against misuse of the Social Security Number, took effect in July 2002.
The University of Pennsylvania has appointed a privacy officer with broad responsibilities to protect student data. The school plans to change its student identifier from the Social Security Number to an alternative identifier.
Police in Kenosha, Wisconsin report that a stalker used a global positioning system (GPS) device to monitor the movements of a victim. This is the newest in a series of incidents where malicious actors have used new technology to harass or otherwise control others.