After the death of Doubleclick's effort to track web surfing habits, companies have generally tried to be more careful about how they monitor users. New York Times Digital is reported to be considering a new program that would deliver "personalized" ads to surfers. While the company says it is delivering only aggregate information to advertisers, in the future it is looking at being able to give the marketer more personal or demographic information. So far, it is testing the program with three advertisers, including pharmaceutical company Nexium.
The White House quietly released its Cybersecurity strategy today. The initiative has been pared down significantly from its first draft, which was released in September 2002. The majority of the policy appears to require the government to lead by example, and contains few mandates for the private sector.
Privacy International is conducting a "Stupid Security" contest that is designed to highlight the most "pointless, intrusive, annoying and self-serving" security measures. Nominations are due by March 15. The winners will be announced at the Conference on Computers, Freedom, and Privacy on April 3, 2003 in New York City.
A class action suite has been brought against TriWest Healthcare Alliance for failing to protect individuals' personal information adequately. In December, hard drives and laptops containing personal information were stolen from TriWest. The personal information of 500,000 military personnel was stolen. It is suspected that the thieves were targeting the personal information, as they left behind computer equipment that was more valuable. The lawsuit alleges violations of the Privacy Act, breach of contract, and negligence.
The Center for Public Integrity reports that it has obtained a draft of legislation labeled informally as "PATRIOT II." This draft may be long-anticipated legislation from the Department of Justice designed to expand government power beyond the USA PATRIOT Act, which passed in October 2001.
The new legislation, titled the "Domestic Security Enhancement Act of 2003," expands surveillance power, increases government access to private data, and expands the definition of terrorist activities. The legislation would also allow the creation of a DNA database for suspected terrorists. Additionally, there is a provision that would allow the government to "expatriate" a US citizen.