BT in trouble over Phorm 'spyware' test

Police look at whether UK law was broken.

Uk prosecutors are investigating whether BT illegally tested online advertising system Phorm without users' consent.

The inquiry focuses on Webwise, a system from the company Phorm, which monitors a person's web browsing and search terms in order to serve up related advertisements.

An internal BT document leaked in June showed BT conducted a two-week test involving 18,000 subscribers in September and October 2006 but did not inform those users.

Google ads have spyware connections, researcher claims

Privacy activists have suggested the trials violated wiretapping laws as well as posing data security and privacy concerns. BT maintains no laws were broken.

A Crown Prosecution Service (CPS) spokesman said Friday the agency is collecting evidence and will later make a determination whether there are grounds for prosecution. A BT spokesman declined to comment on the matter.

BT's secret trials could have potentially violated the UK's Data Protection Act, which mandates that personal data can't be processed without consent. The trials could have also conflicted with the Regulation of Investigatory Powers Act of 2000, which makes it illegal to monitor communication between two entities without proper consent.

Digital rights activists have pushed for law enforcers to examine BT's trials. Alexander Hanff submitted extensive documentation on Webwise to the City of London police, but the agency concluded no laws were broken.

Hanff encouraged people on Thursday to write letters to CPS in support of prosecuting BT for illegal interception.

Other UK government agencies have also examined Webwise. In January, the Home Office declared that targeted ad systems with user consent don't violate the law. The Information Commissioner's Office, which handles data privacy regulations, had said it will continue to monitor deployments of the system.

The ruckus over privacy issues lead BT to emphasize that users will be asked whether they want to participate. Webwise uses a cookie - a piece of data stored in the browser - in order to track a user's Internet activity.

The cookie contains an anonymous user ID, which is then associated with certain categories, such as "cameras" or "computers," which then determine what ads a person may see on web pages that use Phorm to serve ads.

BT started another trial of the system in September and is attempting to get 10,000 users to enroll in it. The company plans to roll out Webwise to its entire broadband customer base, but no schedule has been set.

Two other ISPs, Virgin Media and Carphone Warehouse, are also planning to trial Webwise.


What are your views on this subject? Use the form below to post a comment on this article up to 500 characters.


Characters remaining: 500

Add your commentComments

Jonah | Published: 23:13 GMT, 30 November 2008

Why do you think there is Encryption on Mobile Phones! To stop Eavesdroppers, I do not expect or believe it to be legal for the Mobile or Telco or ISP to do so either!

Tanya | Published: 13:36 GMT, 30 November 2008

Totally disgusting, what happened to privacy, and the rights of consumers. What is the betting that this is a whitewash and nothing will be done about it. Big Business always wins out.

Related Security news

Antivirus programs fail to stop new malware

One in three systems infected.

Adobe sorry for 16-month-old Flash bug

Unpatched vulnerability 'slipped through the cracks'

HTML 5 leaves client storage open to web attacks

Security researcher says web apps could be vulnerable

Rugged Manifesto calls on developers for secure code

Security professionals call for better programming practices



Email this article to a friend or colleague:


PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Techworld White Papers

Challenges and opportunities of PCI

The Payment Card Industry Data Security Standard provides an enterprise structure for improving operational, security, and audit performance. The benefits of the PCI DSS go beyond audit costs and results.

Download Whitepaper

Database security: Preventing enterprise data leaks at the source

IDC discusses the growing internal threats to business information, the impact of government regulations on the protection of data, and how enterprises must adopt database security best practices...

Download Whitepaper

Six essential steps to successful IT centralisation

This report, based on the real experience of a recent centralisation project, is aimed at those involved in IT strategy within their organisation. It provides some practical insights for CIOs, CTOs, Heads of IT, IT Directors and those involved more closely with the service management function.

Download Whitepaper

Application Grid: The ideal platform for IT consolidation

Evaluating the opportunity for consolidation of middleware — Java application servers and related technologies.

Download Whitepaper

Techworld UK - Technology - Business

COLT White Paper

Are all VoIP services the same?

Questions to ask your service provider to ensure you get the VoIP service you need
With careful choice of partner, your business can have all the advantages of VoIP access - reduced costs, flexibility and simplicity - without the drawbacks.
This white paper is your guide to ensure you get right the VoIP service and details the pitfalls which businesses would do well to avoid.

Download white paper
COLT White Paper

IT Misuse Survey

Complete this survey and you could win a Nexus One

Techworld are running a short survey to discover how UK businesses are managing Internet and email misuse in the Enterprise.

Complete Survey

Webcast: IT Financial Management: Cost Optimisation for Efficiency and Agility.
On Demand Webcast
Join this webcast to learn about the techniques and technologies that can help you prove the value of IT to the business by understanding the true cost of today's IT services and those that will be necessary to deliver future success.

Register Today

Site Map

IDG Network

* *