Phorm, Desktop Office Applications, and Data Privacy Concerns badphorm.co.uk/dephormation.org.uk

Nicholas Bohm ukcrypto at chiark.greenend.org.uk
Sun, 23 Mar 2008 17:32:56 +0000


Ben Laurie wrote:
> Pete John wrote:
>> Badphorm and Dephormation believe the Phorm system should be fully 
>> opt-in.
>> Opt-out systems are, in our opinion, not acceptable for such a 
>> potentially
>> invasive piece of technology. Such opt-in must be explicit and voluntary
>> (requiring specific user action) for all subscribers, not simply a 
>> change in
>> the ISPs terms and conditions. The opt-in process must be managed at a
>> network level, not reliant on cookies or any other type of client side
>> mechanism. Where a user has chosen not to participate in the Phorm 
>> system,
>> that user’s traffic must not be passed through or be accessible by any
>> equipment owned, operated or supplied in whole or in part by Phorm
>> (including software operating on ISP owned equipment).
> 
> With all the focus on irate users, people seem to be neglecting the 
> other injured party: the owner of websites whose data is intercepted by 
> Phorm.
> 
> Surely it should be opt-in for them, too?

Yes indeed, as FIPR has in effect argued to the Information Commissioner.

A technical fix would be nice; failing that, an express prohibition on 
the site would be better than nothing.  (Bear in mind that Phorm may 
fail in the UK but linger on elsewhere.)

Nicholas
-- 
Salkyns, Great Canfield, Takeley,
Bishop's Stortford CM22 6SX, UK

Phone  01279 870285    (+44 1279 870285)
Mobile  07715 419728    (+44 7715 419728)

PGP public key ID: 0x899DD7FF.  Fingerprint:
5248 1320 B42E 84FC 1E8B  A9E6 0912 AE66 899D D7FF