Third on the headlines today on TechMeme (perhaps the leading tech news aggregator) is this headline: “An Apology To Our Readers,” a heart-felt piece from TechCrunch editor Michael Arrington disclosing that a TechCrunch intern had, on at least two occasions, demanded computers from start-ups as compensation for writing favorable blog posts about them on the highly influential site. The intern was immediately suspended and, when the allegation was confirmed, terminated. Arrington made no excuses for Daniel Brusilovsky on account of his age (he’s under 18). You can read Daniel’s response here.

If this incident demonstrates anything, it’s just how essential it is for a site like TechCrunch to, as Arrington promised his readers in closing, “maintain complete transparency with you on how we operate, even when it isn’t such an easy thing to do.” Arrington went so far as to have “deleted all content created by this person on our blogs”—indeed, “every word written by this person on the TechCrunch network,” which presumably includes comments.

One might take from this the lesson that the press, as it evolves from the newspaper model towards something blog-ier but still hard to pin down precisely, can police itself pretty darn well. Alas, the FTC has taken a much dimmer view of the ability of reputational incentives to discipline the influence that might be exerted by “blogola” payments (cash or in-kind) on editorial discretion and journalistic creation. Last October, the FTC updated its “Guides Concerning the Use of Endorsements and Testimonials in Advertising” to provide that bloggers should disclose any direct financial interest in subjects they write about if they wish to avoid being subject to an FTC enforcement action—even though no such endorsement is required of traditional journalists, as Adam noted. The best response to this was probably this splendid open letter from Randall Rothenberg, President and Chief Executive Officer of the Interactive Advertising Bureau (IAB) to FTC Chairman Jon Leibowitz, as Adam noted here.

TechCrunch goes out of their way to avoid even the appearance of bias—just as traditional publications do, if not more so! So why should they be subject to special FTC scrutiny? Of course, if a site sets forth a policy about endorsements, it would clearly be held to that promise by the FTC and any violation for breaking that promise could be considered an “unfair” or “deceptive” trade practice under the FTC’s existing statutory authority.

If the FTC really wanted to encourage other sites to follow the lead of TechCrunch, they could encourage (but not bully) others into developing some kind of a seal program like that developed by TrustE that would lay out core principles for how sites handle blogola and product endorsements. If a site wanted to advertise its commitment to these principles, it could display the seal on its site—and be held to that commitment by the FTC (with a self-regulatory group perhaps providing additional enforcement or auditing). If a site chose not to do so, users would be able to see that, too.

A very robust version of this idea could take the next step and use a machine-readable tag so that any site choosing to participate in a “trust seal” program wouldn’t have to rely on just putting this icon on its page, but could instead simply include, in the packets sent to users who visit the page, the tag that corresponds to either (a) the URL for its own endorsement policy or (b) the URL for the for that “trust seal” seal program the site participates in. That tag could then be “read” by a plug-in or a tool built directly into the browser that would either link to the disclosure page or display an appropriate “trust” icon for the site next to the address bar, just as HTTPS sites using SSL encryption get a special green block or safe-looking lock next to their URL. (This is precisely the kind of interface the Mozilla Foundation is thinking about implementing its Firefox browser for websites’ privacy policies.) When the user clicks on that icon, they could get more information about the site’s policies or how the trust seal program works.

The important thing about such a concept, however implemented, is that there could be multiple seal programs out there, each of which could do the hard work of figuring out what appropriate disclosure policies could be and how to make them work in an evolving medium. Given TechCrunch’s leadership in this area, I’d say the TechCrunch seal program could be a gold standard in the online news and commentary business.

This is the kind of innovation that could occur in this space (and others, like privacy) if users really care as much about blogola as the FTC thinks they do—and if the FTC encouraged innovation in disclosure and self-regulation instead of trying to write proscriptive rules to cover all possible situations. (In fairness to the FTC, what I’m proposing works well for “first party” content authored by a site’s employees but there’s a separate problem of how to deal with “third party” content like blog comments on someone else’s site. If a company sends its employees to post comments or reviews praising its products on another blog or, say, on Amazon’s product reviews, I don’t really have a problem with expecting that company to require that its employees disclose their affiliation when they post elsewhere because there probably isn’t a better way to deal with this issue.)

For now, I’m content that sites like TechCrunch are already actively guarding their reputation with prompt disciplinary action such as what Arrington described today. The more attention paid to responsible self-regulation like this, the more other sites will be prompted to follow TechCrunch’s lead—and keep innovating in how to build systems and interfaces that assure user trust.

While I was away at Oxford University last week, a USA Today story ran entitled “Online Hate Speech: Difficult to Police… and Define.”  The author, Theresa Howard, was kind enough to call me for comment on the issue before I left and I made two general points in response to her questions about how serious online hate speech was and how we should combat it:

(1) “The Internet is a cultural bazaar. It’s the place to find the best and worst of all human elements on display.” What I meant by that, quite obviously, is that you can’t expect to have the most open, accessible communications platform the world has ever known and not also have a handful of knuckleheads who use it spew vile, hateful, ridiculous comments. But we need to put things in perspective: Those jerks represent only a very, very small minority of all online speech and speakers. Hate speech is not the norm online.  The overwhelmingly majority of  online speech is of a socially acceptable — even beneficial — nature.

(2) “When advocacy groups work together and use the new technology at their disposal, they have a way of signaling out bad speech and bad ideas.” What I meant by that was that the best way to combat the handful of neanderthals out there that spew hateful garbage is to: (a) use positive speech to drown out hateful speech, and (b) encourage websites to self-police themselves or use community policing techniques to highlight hateful speech and encourage the community to fight back.  Importantly, this process is reinforcing.  When online communities “flag and tag” objectionable or hateful content, it is easier for better site policing to occur, for social norms to develop, and for better speech to be targeted at that bad speech.  Moreover, these new tools and methods are helping groups like the Anti-Defamation League and the National Hispanic Media Coalition to better identify hate speech and then channel their collective energy and efforts to unite the rest of the online community against those hateful speakers and sites.

I think this approach makes more sense than calling in governments to police online hate speech through censorship efforts. This is especially the case because, at the margins, “hate speech” can often be tricky to define and, at least in the United States, regulatory efforts could conflict with legitimate free speech rights. Again, the best way to deal with and marginalize such knuckleheads is with more and better speech.  Fight stupidity with sensibility, not censorship.

I’ll be heading to Oxford University this week to participate in an Oxford Internet Institute (OII) forum on the subject of “Child Protection, Free Speech and the Internet: Mapping the Territory and Limitations of Common Ground.”  It’s being led by several experts from the OII as well as my good friends John Morris and Leslie Harris of the Center for Democracy & Technology (CDT).  The aims of this forum are:

• To facilitate a dialogue between NGOs campaigning to protect respectively, child protection and children’s rights online, and freedom of speech and other civil liberties online.
• To promote a better understanding of each others’ positions, to share perspectives and information with a view to identifying areas of common ground and areas of disagreement.
• To identify any shared policy goals, and possible tools to support the achievement of those goals.
• To publicize the findings of the forum in international policy debates about Internet governance and regulation.

Conference participants were asked to submit a 2-3 pg summary of their views on a couple of questions that will be discussed at this event.  I have listed those questions, and my answers, down below the fold.  It’s my best attempt to date to succinctly outline my views about how to balance content concerns and free speech issues going forward. 

What is the nature of your interest or experience in this field?

I have spent the last 18 years covering the intersection of child safety concerns and free speech issues at four different think tanks.  In recent years, I have tied together all my research in a constantly updated Progress & Freedom Foundation special report entitled, “Parental Controls & Online Child Protection: A Survey of Tools & Methods.” The 4^th edition of this 250-page report was released in August.

Are there particular values or principles which underlie your work?

The goal of my research has been to explore the tension between free speech and child protection and to identify methods of striking a sensible balance between these two important values.   It is my hope and belief that we are now in a position to more fully empower parents such that government regulation of content and communications will be increasingly unnecessary.

In the past, it was thought to be too difficult for families to enforce their own “household standard” for acceptable content. Thus, many believed government needed to step in and create a baseline “community standard” for the entire citizenry.  Unfortunately, those “community standards” were quite amorphous and sometimes completely arbitrary when enforced through regulatory edicts.  Worse yet, those regulatory standards treated all households as if they had the same tastes or values—which is clearly not the case in most pluralistic societies.

If it is the case that families now have the ability to effectively tailor media consumption and communications choices to their own preferences—that is, to craft their own “household standard”—then the regulatory equation can and should change.  Regulation can no longer be premised on the supposed helplessness of households to deal with content flows if families have been empowered and educated to make content determinations for themselves.  Luckily, that is the world we increasingly live in today. Parents have more tools and methods at their disposal to help them decide what constitutes acceptable media content in their homes and in the lives of their children.

Going forward, our goal should be to ensure that parents or guardians have (1) the information necessary to make informed decisions and (2) the tools and methods necessary to act upon that information.  Optimally, those tools and methods would give them the ability to not only block objectionable materials, but also to more easily find content they feel is appropriate for their families. In my work, I refer to this as the “household empowerment vision.”

Will we ever be able to achieve a world of perfect parental control over all online content and communications?  That is unlikely since both content and technology will continuously evolve and make that goal elusive. But government regulation of speech should yield where less restrictive alternatives such as household-based controls and strategies exist.  Given the value associated with free speech and the danger of government censorship, these alternatives need not be perfect to be preferable to government regulation.

What are the issues/policies or laws which you see as most problematic in terms of creating or illustrating a conflict between online child protection and free speech?

It is essential that policymakers resist the temptation to extend traditional broadcast industry regulatory statutes and standards to new media outlets and digital technologies.  In a world of media convergence and increasing user empowerment, traditional regulatory rationales make increasingly less sense.  Nonetheless, many ongoing social problems and challenges remain to achieving the “household empowerment vision” I outlined above, including:

• The “lack of awareness” problem: Some parents remain unaware of empowerment tools.
• The “bad parent” problem: Some parents don’t use tools even when aware of them.
• The “bad neighbor” problem: “Good” parents fear what happens when their kids visit other kids with more permissive parents.
• The “generation gap” problem: Kids sometimes know more about new digital technologies than their parents.
• The “technological surprise” problem: Rapid emergence and diffusion of new digital technologies can catch some parents by surprise.
• The “bad corporate actor” problem: Most companies self-regulate, but a handful push the boundaries of good taste in ways that create social concerns that reflect on industry generally.
• The “user-generated content” problem: Even when “professional” content can be managed, it is difficult to control “amateur” expression and creations.
• The “peer-on-peer bullying” problem: While many are concerned about predators, the real online safety problem turns out to be cyber-bullying among peers.

Because of these ongoing social challenges or concerns, legal and regulatory proposals will continue to be put forward. But each has serious downsides:

• Future of filtering: Centralized, network-based or decentralized, user-based?  The former creates serious censorship threats, as we see in China and other repressive states. The latter is more consistent with the household empowerment vision.
• Middleman deputization: Should online intermediaries be required to police the Net for various social ills?  If so, as hand-maidens of the state, they could become over-zealous speech regulators.
• Universal content ratings: Can policymakers mandate unified (or “scientific”) content media ratings?  Doing so puts regulators in a position to dictate content standards—for better or worse.  Moreover, this does nothing to address user-generated “amateur” content.
• Mandatory online age / identity verification: Potentially threatens anonymity, privacy, and free speech rights.  Moreover, to the extent “bad guys” continue to get into “secured” environments it creates a false sense of security for parents and kids.
• Expanded data retention: Although it would help facilitate some law enforcement goals, it also gives rise to new privacy and data breach risks.

Might any of these conflicts be avoidable, e.g. through the use of improved legislative instruments or greater clarity and accountability in processes of self-regulation?

For the above reasons, it makes more sense to put our energies into finding new self-regulatory mechanisms, social norms, and user empowerment strategies to solve ongoing social problems instead of focusing on regulatory solutions or mandates.  Instead of providing greater clarity, legislative instruments are more likely to instead create greater ambiguity, or at least uncertainty, for content creators and consumers alike. This is because, as was noted above, “community standards” are notoriously subjective; they are ham-handed attempts to gloss over the diverse needs and values of a diverse citizenry. By contrast, self-regulation, social norms, and empowerment strategies are evolutionary in character and more responsive to differences among cultures and households.

What are the issues where you think there might be most scope for finding some common ground?

In two words: empowerment and education. Because reliance on legislation is perilously difficult and enforcement of regulatory mandates is complicated (and sometimes impossible in an increasingly borderless world), efforts to better empower families and educate both kids and parents offer the most sensible path forward.  All stakeholders involved in child safety and free speech debates can generally agree that empowerment efforts, media literacy programs, awareness-building programs, and so on, are both effective and unobjectionable.

At the international level, are there certain key principles which we ought to be defending above all others?

Because of the “values clash” at the international level, it’s hard to imagine we’ll ever achieve consensus on some of these issues.  Countries vary widely in their sensitivities about speech, making any attempt to devise “universal principles” complicated.  For example, Europeans generally deride America’s prudish ways when it comes to matters of sexuality or “indecency.”  By contrast, most Americans cannot understand European concerns about “hate speech” or violently-themed media.  Meanwhile, governments in many other parts of the world are still busy trying to quell political or religious dissent.  “Harmonization” among those competing cultural norms remains complicated, therefore, and it would be a mistake if international harmonization was accomplished by sacrificing free speech rights for countries and cultures who cherish them.

Mediapost has published an interview I gave to Omar Tawakol, founder of the BlueKai registry entitled “User Empowerment, Not Regulation, Is The Answer to Privacy Concerns About Targeted Ads” in which I summarize the arguments Adam Thierer and I have been making since our “Principles to Guide the Debate” piece last September.

We argue for user empowerment over restrictive defaults (like “opt-in”) for data use and collection because, as the Supreme Court held in 2000: “Technology expands the capacity to choose; and it denies the potential of this revolution if we assume the Government is best positioned to make these choices for us.” We promote tools that let users make their own decisions about privacy, not only because those decisions are fundamentally subjective, but because regulatory mandates could stifle the development of online content and commerce.

I also note the parallels between speech controls and privacy regulation, and call for a consistent, principled approach to both:

Since 1997, the Supreme Court has struck down multiple legislative attempts to censor online and offline content [especially the CDA] because there were “less restrictive alternatives” that would not so heavily burden free speech rights. In a 2000 cable-related decision, the Court held that “targeted blocking [by users] is less restrictive than banning, and the Government cannot ban speech if targeted blocking is a feasible and effective means of furthering its compelling interests.” Courts have struck down other federal and state speech controls because parents had the tools to filter their kids’ access to information online, in video games, etc., as described in my PFF colleague Adam Thierer’s ongoing catalog of these tools… Many who oppose industry self-regulation are not really “consumer advocates” because they don’t recognize that consumers have many, competing values. Those regulatory advocates are more interested in their preferred one-size-fits-all mandates than in empowering users to determine their own privacy preferences. Like advocates of censorship, privacy zealots assert great dangers to which citizens are supposedly oblivious but which urgently require government intervention-dismissing arguments to the contrary as either uninformed or irresponsible.

The comments on the interview are equally worth reading.  Jeff Chester, who has made a career out of attacking advertising, quickly posted a comment dismissing, but ignoring, my arguments about consumer welfare as corporate propaganda—just as he did with his comment on the post Adam and I wrote in June about congressional hearings on the issue featuring Chester (and Scott Cleland, the right-wing “Bizarro Chester“).  I’ve had it with Chester’s ad hominem attacks on the motives of those who disagree with him, as I explained in my reply to Chester:

Despite our profound “Conflict of Visions,” I must rush to Mr. Chester’s defense to point out [contrary to the assertion of another commenter who criticized Chester’s motives] that his salary has only reached “six figures” in one of the three years for which Chester’s group, the Center for Digital Democracy, has filed their Form 990 returns with the IRS: $101,500 in 2005, but a mere $97,925 in 2006 and $96,750 in 2007 (including benefits). Given CDD’s declining donations, Chester’s salary has grown from 35% of CDD’s income in 2005 ($288,807) to 56% ($172,852) in 2007. As a result of deficit-spending to maintain Chester’s salary, CDD’s 2007 assets were just half what they were in 2005 ($203,508 / $411,174). These returns are available on guidestar.org. I might take the same approach Chester takes in attempting to dodge our arguments: question his motives and suggest that the hysteria level of his arguments has grown in close correlation with his increased need to boost CDD’s donations, which have sagged even as his salary has remained constant. But unlike Chester and others who suffer from the “Vision of the Anointed,” I am not in the business of—as Thomas Sowell put it—”disdainfully dismissing” arguments contrary to my own “as either uninformed, irresponsible, or motivated by unworthy purposes.” I truly take Chester at his word: I think he genuinely believes the fantastical claims he makes about the evils of “targeted” advertising and that advertising is manipulative, creating what Neo-Marxists would call “false consciousness” (making people think they want things they don’t). I don’t think he’s merely trying to drum up donations (although that may be a happy coincidence of his Chicken-Little-ism). I ask only that Chester grant us the same respect by recognizing that our arguments are deeply rooted in a principled belief that online advertising creates enormous value for consumers, and that better targeting should be celebrated as a way of sustaining media in the 21st century, not an evil conspiracy by a shadowy cabal of advertisers. I take no pleasure in noting that Chester makes more money than I do (assuming his salary has not finally started to decline since 2007 along with the apparent downward trend in CDD’s donations). Moreover, since my market value as a recently-practicing lawyer is probably considerably higher than this, I gave up quite a lot to fight the battle of ideas when I joined The Progress & Freedom Foundation last year. Chester may not agree with my arguments, but for him to dismiss me as a corporate whore is simply laughable. If I really wanted to sell out, I would go back to a law firm at an annual salary greater than the donations his Center for Digital Democracy received in 2007. I would not have chosen a career as a consumer advocate at considerable personal cost if I were not utterly sincere in my convictions. So, please, Jeff, spare us all your sanctimony and engage our arguments on substance. Your dismissal of Omar Tawakol is also grossly unfair, since BlueKai has been an industry leader in empowering users with its consumer preference registry. On substance, I find it equally amusing that Chester has embraced the rhetoric of “consumer empowerment” in support of an agenda that is about just the opposite: making choices for users. Our argument is that we should to do everything we can to empower users to make their own choices about privacy preferences through tools like the BlueKai Registry, Google’s Ad Preference Manager and other more radical innovations. But Chester’s argument is that government should mandate restrictive default settings (e.g., opt-in). This is not empowerment but arrogant presumption: Chester is an elitist not only because he presumes that consumers are as paranoid about “being tracked” as he is, but also because he would impose a default (no tracking) that would destroy the economic value created by targeted advertising. That default has enormous costs for users as an “Industrial Policy for the Internet,” reducing revenues for publishers whose “free” content and services Chester takes for granted, but which benefit Internet users around the world.

The leading trade associations in the online advertising industry have just released their new self-regulatory principles—the first comprehensive self-regulatory principles industry has produced, which track closely with the suggested guidelines released by the FTC in February.

I commend the industry for setting a new standard in transparency, consumer control and data security. These Principles do much to empower Americans to make their own decisions about privacy, but I fear that many critics of so-called “targeted advertising” will never be satisfied, no matter how high industry raises the bar.

These critics have insisted that ordinary users can’t be trusted to make the “right decisions” about privacy and have insisted on imposing restrictive default “opt-in” rules for the online data collection that makes online advertising valuable to websites that rely on ad revenue.  Such pre-emptive privacy regulation would stunt the growth of revenue for the “Free” online content and services we’ve all come to take for granted.  During a time of economic recession, and as traditional media like newspapers struggle to make the transition from print to the Internet, it’s more important than ever that policymakers allow self-regulation to evolve.  Only by doing so can we expect continued innovation and creativity online. We must all remember:  There is no free lunch!

I’ll lead a panel discussion on July 10 on Capitol Hill about “Regulating Online Advertising: What Will it Mean for Consumers, Culture & Journalism?”  Please RSVP here.

FTC Chairman Jon Leibowitz warned yesterday that companies involved in Web advertising face their “last chance” to “voluntarily” adopt stricter policies governing the use and collection of consumer information, Reuters reports. This isn’t the first time the FTC has threatened the advertising industry with regulation, but it signals a sense of immediacy that may pressure industry leaders to change their practices in coming weeks.

Leibowitz presumably wants to quell widespread concern that Internet companies like Google and AT&T have “excessive control” over consumer information. But what’s excessive about using information that individuals have voluntarily handed over for marketing purposes, subject to legally enforceable rules laid out from the get-go?

Users ultimately control their data, not firms. After all, only data that users transmit can be collected. When a user visits a website, their IP address may be recorded, and when a user submits a query to a search engine, the search term can be logged. This is how the Internet has always worked.

Not all consumers understand what information is gathered about them as they browse online. The best way to protect such users is not through regulation, but by educating — and, therefore, empowering — users. Volumes have been written on privacy and data security, and the ongoing TLF series “Privacy Solutions” offers a growing body of tips on how consumers can achieve the level of privacy that suits them.

Understandably, some people are uncomfortable with their queries being logged, and would prefer that websites simply not track any data. Some sites are willing to do just that — Cuil, a search engine launched in 2008, promises to never log IP addresses or even use cookies (as Jim has noted). Other anonymity solutions rely on secure virtual tunnels that can mask users’ actual IP addresses.

Still, no matter what the FTC does, transmitting data in plaintext over the Internet will never be truly “safe.” Robust end-to-end encryption is the only surefire method of ensuring information cannot be seen by anybody except the sender and the recipient. Even then, information is only as safe to the extent that the party at the other end of the line can be trusted.

Any new FTC mandates on data collection would almost certainly impose a privacy ceiling that would offer some, if not most, people too much privacy. This may sound impossible at first, but think of people who document their every move on Twitter, open for the world to see. Different people have wildly different privacy preferences, and there is no way a single set of rules-however well-conceived-could satisfy everyone.

Privacy mandates will place shackles on the still-young Internet advertising industry, stifling promising opportunities for making money from online content. Strict rules governing data collection will deprive publishers — especially small ones — of ad revenue at a time when it is sorely needed. Rigid mandates will also prolong “dumb” Web ads by delaying the evolution of targeting technologies capable of making advertisements more relevant and, therefore, more interesting to users.

Online advertising is the lifeblood of Web content, as Berin, Adam, and others have explained time and time again. The alternative to advertiser subsidies — charging consumers for access to content — has proven relatively unpopular with consumers. Who wants to take out their credit card when all content creators pine for is a pair of eyeballs?

Advertising will fuel the growth of online content, but only if regulators let the market work.

As TLF readers may know, I took over in July as Chairman of the Board of the Space Frontier Foundation.  As I explained in my recent interview on The Space Show, SFF has been the leading citizens’ advocacy group for space commercialization since 1988.  Dedicated to promoting Princeton physicist Gerard O’Neill‘s vision of space settlement, as described in his 1976 masterpiece The High Frontier, the Foundation has always argued that “space is a place, not a program.”

We sent out the following press release on October 28, calling for a major transformation of the U.S. government’s space program by which the U.S. government would buy commercial transportation to the International Space Station.  We’ll have more to say about this in the coming weeks.

Space Frontier Foundation Finds Funding Source for COTS-D

The Space Frontier Foundation today called upon Presidential candidates Barack Obama and John McCain to invest the $2 billion in new funds they have promised to NASA for reducing the “Gap” in U.S. human spaceflight (after the Space Shuttle is retired in 2010) to spur innovation and competition in America.

Foundation Chairman Berin Szoka said “It’s time that our national leaders give American entrepreneurs a shot at closing this gap. Let’s take the two billion dollars in the candidates’ plans and fund up to five winners of COTS-D.”

The NASA Authorization Act of 2008, recently signed into law by the President, directs NASA to “issue a notice of intent [by mid-April 2009] … to enter into a funded, competitively awarded Space Act Agreement with two or more commercial entities’ for transporting humans to the ISS”-the “Capability D” of NASA’s Commercial Orbital Transportation Services program (or COTS-D for short). But that directive is not yet funded.

Szoka continued, “Let’s have an American competition in space – to create good jobs, fuel innovation, and close the gap more quickly. With private funds matching government’s investment, we can dramatically leverage the $2 billion to produce breakthroughs in a new American industry – commercial orbital human spaceflight.”

By investing in several different approaches, the government will win no matter who wins this new race, and also benefit from the resulting price competition.

Many American companies, including Boeing, PlanetSpace, SpaceDev, SpaceX, and t/Space have each previously submitted credible COTS-D proposals to NASA. Each of these firms has reached the semi-finals of one of the previous NASA COTS competitions. Increasing funding for COTS by $2 billion would allow NASA to fund all five of these promising companies’ proposals with COTS agreements, and in so doing, build redundancy into the human spaceflight capability available to NASA and other customers.

“It’s popular in Washington to use ‘The Gap’ to cynically justify continued funding of an expensive jobs program,” concluded the Foundation’s co-founder, Bob Werb. “We’re using ‘The Gap’ to advocate a policy that will bridge a gap that matters much more: the chasm between a dying government Human spaceflight monopoly and an emerging, free and competitive marketplace that can open the space frontier to everyone.”

The Federal Circuit significantly limited the patentability of software and business methods today.  Mike Masnick at TechDirt summarizes the holding of the case as follows:

the court has said that there’s a two-pronged test to determine whether a software of business method process patent is valid: (1) it is tied to a particular machine or apparatus, or (2) it transforms a particular article into a different state or thing. In other words, pure software or business method patents that are neither tied to a specific machine nor change something into a different state are not patentable.

I’m sure several of my TLF colleagues will have a great deal to say about this.   Tim Lee has already written about this on Ars Technica:

The Bilski decision, then, is a clear signal that the pendulum has begun to swing back toward tighter limits on software and business patents. However, it remains to be seen how far the court will go in this direction. Bilski was a relatively easy case. The applicant made little effort to hide the fact that he was seeking to patent a mental process, something the Supreme Court has clearly said is not allowed. Therefore, the Federal Circuit’s rejection of this patent doesn’t tell us how it will rule when confronted with software or business method patents that are tied more directly to a physical machine or a transformation of matter. And indeed, the Federal Circuit reiterated that some software and business method patents are valid, so we are unlikely to return to the near-prohibition on such patents that prevailed until the early 1980s.

Thoughts?

Debates about online privacy often seem to assume relatively homogeneous privacy preferences among Internet users.  But the reality is that users vary widely, with many people demonstrating that they just don’t care who sees what they do, post or say online.   Attitudes vary from application to application, of course, but that’s precisely the point:  While many reflexively talk about the “importance of privacy” as if a monolith of users held a single opinion, no clear consensus exists for all users, all applications and all situations.  

If a picture is worth a thousand words, this picture makes the point brilliantly—showing:

locations where [Flickr] users are more likely to post their photos as “public,” which is the default setting, in green. Places where Flickr users are more likely to put privacy controls on their photos show up in red.

Of course, geography is just one dimension across which users may vary in their attitudes about privacy, but the map makes the basic point about variation very well.  Seeing what users actually do in real life says a lot more about their preferences than merely polling them about what they think they care about in the abstract—as my colleagues Solveig Singleton and Jim Harper argued brilliantly in their 2001 paper With A Grain of Salt: What Consumer Privacy Surveys Don’t Tell Us (SSRN).

Google has just announced that it is now accepting applications from undergraduate, graduate and professional students for its summer 2009 Google Policy Fellowship.  Three think tanks employing TLFers are among the host organizations participating in the program: The Progress & Freedom Foundation, the Cato Institute and the Competitive Enterprise Institute. 

Applications are due by December 12, 2008.  The program will run for ten weeks during the summer of 2009 (June-August). Apply today!

The Progress & Freedom Foundation has just launched the new Center for Internet Freedom.  CIF offers an alternative to the proliferation of advocacy groups calling for government intervention online by offering timely analyses and critiques of proposals that diminish the vital role of free markets, free speech and property rights.  We aim to drive the Internet policy debate in new directions by emphasizing a layered approach of technological innovation, user education, user self-help, industry self-regulation, and the enforcement of existing laws consistent with the First Amendment.  Such an approach is a less restrictive—and generally more effective—alternative to increased regulation.  

Here are some of the issues I’ll be working on as CIF’s Director in conjunction with my esteemed colleagues Adam Thierer, Adam Marcus, and adjunct fellows: 

• Defending online advertising as the lifeblood of online content & services, especially in the “Long Tail”;
• Emphasizing market solutions to problems of privacy protection, especially regarding the use of cookies and packet inspection data;
• Protecting online speech and expression both in the U.S. and abroad;
• Defending Section 230 immunity for Internet intermediaries;
• Opposing online taxation and legal barriers to e-commerce and digital payments, especially at the state and local levels; and
• Ensuring that Internet governance remains transparent and accountable without hampering the evolution of the Internet.

Congress has very wisely cancelled the National Reconnaissance Office’s proposed Broad Area Space-Based Imagery Collection (BASIC) satellite system. The proposal to build two new imaging satellites at a cost to taxpayers of $1.7 billion would have represented a major break from what is possibly the U.S. government’s most successful effort to promote space commercialization to date: buying the imagery it needs from commercial providers, who can also sell imagery to other buyers.

Five years ago, the idea that Internet users could pull up a satellite image of just about any location on the planet at a whim would have seemed ludicrous. Yet that’s precisely what websites like Google Maps and Microsoft’s Live Search offer today—for free! Desktop applications like Microsoft’s Virtual Earth and Google Earth offer even more advanced geospatial tools—again, for free. But of course this library of incredibly rich imagery didn’t just “fall out of the sky,” as they say. It was collected by a handful of expensive commercial remote sensing satellites whose construction was made possible by the National Geospatial-Intelligence Agency‘s (Wikipedia) extraordinarily successful “Nextview” program implemented under the Commercial Remote Sensing Policy of 2003.  Rather than having the Federal government build its own satellites—and pay for the entire cost of the satatellites—the NGA very wisely chose to buy imagery from commercial providers in two ~$500 million, 4-year contracts with U.S. satellite imagery companies:  DigitalGlobe in 2003 and OrbImage (now GeoEye) in 2004.  

These long-term purchase agreements essentially made the U.S. Government the “anchor tenant” in a new class of remote sensing satellites, providing the initial funding for both companies to build and operate their satellites. But because the companies sell roughly half of imagery to foreign governments and commercial buyers like Google and Microsoft, these deals have saved U.S taxpayers money for the purchase of imagery for a wide variety of needs, ranging from agricultural monitoring to military intelligence. At the same time, the Nextview contracts have given birth to a vibrant geospatial industry whose immediate benefits should be obvious to anyone who’s ever pulled up a satellite map online and whose macroeconomic impact is potentially enormous. 

So why mess with success?  If the U.S. Government thinks it needs more satellite imagery, why not simply award another long-term purchase agreement to a commercial provider? Besides reducing the burden on the taxpayers, continuing the NextView approach would support the construction of a new generation of commercial satellites like GeoEye-1, which was launched just last month, and DigitalGlobe’s WorldView-1, launched last year.  Rather than rolling back NextView in favor of building its own systems, the U.S. Government should be looking for other space services it can buy on a commercial basis as a way of building industries rather than programs, ranging from sending crew & cargo to the International Space Station to communications and navigation services for NASA’s planned Return to the Moon.

Rather than giving up on the NextView approach in the area where it has already produced spectacular results, the U.S. government should be looking for other areas in which to apply the NextView model by buying space services from commercial providers.

Full disclosure: I was proud to handle FCC matters for GeoEye while practicing law at Latham & Watkins LLP. I currently have no greater personal interest in their success than should any American who wants to see the private sector succeed where the government has failed in opening up the space frontier to all mankind.

By Berin Szoka & Adam Thierer Progress Snapshot 4.19 (PDF)

Since the fall of 2008, a debate has raged in Washington over “targeted online advertising,” an ominous-sounding shorthand for the customization of Internet ads to match the interests of users.  Not only are these ads more relevant and therefore less annoying to Internet users than untargeted ads, they are more cost-effective to advertisers and more profitable to websites that sell ad space.  While such “smarter” online advertising scares some—prompting comparisons to a corporate “Big Brother” spying on Internet users—it is also expected to fuel the rapid growth of Internet advertising revenues from $21.7 billion in 2007 to $50.3 billion in 2011-an annual growth rate of more than 24%. Since this growing revenue stream ultimately funds the free content and services that Internet users increasingly take for granted, policymakers should think very carefully about what’s really best for consumers before rushing to regulate an industry that has thrived for over a decade under a layered approach that combines technological “self-help” by privacy-wary consumers, consumer education, industry self-regulation, existing state privacy tort laws, and Federal Trade Commission (FTC) enforcement of corporate privacy policies.

In an upcoming PFF Special Report, we will address the many technical, economic, and legal aspects of this complicated policy issue-especially the possibility that regulation may unintentionally thwart market responses to the growing phenomenon of users blocking online ads.

We will also issue a three-part challenge to those who call for regulation of online advertising practices:

1. Identify the harm or market failure that requires government intervention.
2. Prove that there is no less restrictive alternative to regulation.
3. Explain how the benefits of regulation outweigh its costs.

The Online Advertising Market

While there are other forms of targeted advertising based on who you are (“demographic”) or where you are (“locational”), the most important varieties are based on what you’re searching for, seeing or doing online at any particular moment (“contextual”) and the pattern of what you’re searching for, seeing or doing over time (“behavioral”). The bulk of Internet advertising falls into one or both of these last two categories, with behavioral advertising growing rapidly.

Search engines deliver contextual ads on search results pages based on the search keywords entered by a user, while third-party advertising networks (some of which also run search engines) deliver contextual ads on behalf of website operators who sell ad space to the network, with the ads displayed on each page chosen according to keywords on that page. Contextual advertising is far “smarter” than displaying the same “dumb” untargeted banner ads to every user, because the contextual ad uses keywords to “guess” what the user is interested in based on the context of each page. But the purely contextual ad network doesn’t “remember” what the user has looked at in the past, so its insights into what the user would find relevant are very limited, especially for some websites. Online behavioral advertising (OBA) solves this problem and increases the value of advertising space on all websites by targeting ads based on a “profile” of the user created by tracking websites the user has visited—as well as limiting the number of times a user is shown a particular ad.

The Perceived Harm Driving Calls for Regulation

For a decade, the basic technology behind OBA has changed little: When a user visits the typical webpage, they download not only the webpage contents but also a small piece of code that allows the website to distinguish that user’s browser from other browsers (a “cookie”)—without personally identifying the user. Some cookies are required to make sites work properly (“site cookies”) while others (“tracking cookies”) are used by the third party ad network in which that site participates to recognize that browser across multiple sites participating in the ad network, and thus create a “profile” of what the user might be interested in. Even though such profiles themselves are anonymous, many privacy advocates have pointed to four reasons why online profiling is becoming “too invasive:” (i) It is sometimes possible to infer the actual identity of the user; (ii) though all browsers allow users to opt-out of tracking by “cleaning out” their tracking cookies, a website may be able to restore deleted tracking cookies through the use of cookie alternatives such as “Flash cookies”; (iii) certain vulnerabilities in current browser design make it theoretically possible to “sniff” a user’s browsing history, cache or bookmarks; and (iv) the use of “packet inspection” by Internet Service Providers (ISPs) (instead of the use of cookies) to track online browsing amounts to illegal wiretapping.

The other concerns expressed by the advocates of regulation vary significantly. Some fear that browsing profiles could be captured by hackers, somehow associated with personally identifying information, and used for identity theft. These advocates demand limits on data retention as well as data security mandates. Others demand that users have access to their own profiles—a goal inherently in tension with data security. Most share a vague queasiness about “being tracked” and about advertising in general, while downplaying the effectiveness of self-regulation or user self-help.

Perhaps most legitimately, others fear that the real “Big Brother”—the government—will gain access to a “honeypot” of surveillance data that might be associated with individual users. A variety of other solutions have been proposed to what is, for the most part, a poorly defined problem, including a government-run “Do Not Track” registry to make it easier for users to block tracking cookies; mandating opt-in for some or all forms of profiling; and banning completely the collection of tracking data about sensitive subjects, cross-referencing of data sets, and use of packet inspection data for OBA.

The Less Restrictive Means: A Layered Approach

But how should policymakers decide which, if any, of these interventions are really necessary–or would even be effective? Ironically, those who demand immediate OBA regulation to protect user privacy are often the first to insist on less burdensome approaches whenever a policy “problem” involves purely non-commercial speech. For example, emphasizing personal and parental responsibility is often favored as the more sensible approach to dealing with free speech and child protection concerns. But, as Chapman University Law Professor Tom Bell has asked, why not apply the same standard across the board? Why not expect those especially privacy-sensitive users who object to OBA to do something about it? To the extent effective self-help privacy tools exist, they provide a means of solving policy problems that is not only “less restrictive” than government regulation but generally more effective and customizable as well. Why settle for one-size-fits-all solutions of incomplete effectiveness when users can quite easily and effectively manage their own privacy? Indeed, those who advocate personal responsibility and industry self-regulatory approaches to free speech and child protection issues should be advancing the same position with regards to privacy.

Fortunately, a wide variety of self-help tools and “technologies of evasion” are readily available to all users and can easily thwart traditional cookie-based tracking, as well as more sophisticated tracking technologies such as packet inspection. While cookie management tools that allow users to delete their cookies have been standard in browsers for some time, the latest generation of browsers incorporates far more advanced control over what kind of cookies browsers will accept from websites in the first place. Furthermore,  the extensible nature of modern browsers allows any freelance software developer who sees a way to improve a browser to do so by writing an add-on that “plugs in” to the browser using standard programming interfaces designed by each browser developer.  Many such add-ons are wildly popular, but even those users who never install a single one benefit from the acceleration of browser evolution made possible by add-ons.  We will be documenting examples of these tools in our upcoming Special Report and in an ongoing  series of blog essays.

The Benefits of Smarter Advertising

The “free” Internet economy is based on a simple value exchange: Users get access to an ever-expanding collection of content and services at no cost from websites that are able to generate revenue from “eyeballs” on their pages by selling space on their sites to advertisers, usually through ad networks. The smarter that advertising, the more free content and services it can support. This is the same value exchange that has supported free, over-the-air television and radio content for decades. The only difference is technological: Because websites can connect directly with the user, they need not rely on crude profiling tools such as Nielsen ratings.

There are larger economic benefits of smarter online advertising. First, it makes the overall economy more open and competitive by allowing small market entrants to reach consumers with messages about their products. Second, those who attack the use of packet inspection by ISPs for OBA fail to see that it is precisely the kind of “game-changer” that could disrupt Google’s currently dominant market position. Third, the involvement of ISPs in OBA could help defer broadband costs: Even if OBA revenue does not completely subsidize monthly service costs, smarter advertising could at least keep prices in check and potentially lower them significantly going forward.

But smarter advertising isn’t just about selling products or services. It is ultimately about making all kinds of speech more cost-effective. The ability to “target” listeners more narrowly also increases the ability of political and other not-for-profit speakers to communicate their messages. In short, smarter advertising means more voices, more choices, and more speech. The line between “advertising” and “content” is already blurring rapidly, as the technologies used to customize advertising are also used to customize webpages and ad networks themselves are used to deliver content.

The Larger Implications of Potential Regulation

As if reducing the advertising revenue generated by each web ad didn’t do enough to reduce the total amount of funding for free web content and services, government regulation of targeted online advertising could reduce advertising revenues even further by aggravating the problem of adblocking in two ways. First, the less relevant ads are, the more annoying users will find them, and the more likely users are to try to block them. Increased relevance is perhaps the most important remedy for adblocking and the best way to maintain the implicit value exchange that currently supports free Internet content and services

Second, regulation could short-circuit the eternal battle of technological one-upmanship between online advertisers and those users who rely on the technologies of evasion to “opt-out” of seeing ads or being tracked. Such privacy-conscious users are “free-riding” off of those users who don’t opt-out, since (at present) they generally don’t lose access to the free content and services supported by the targeted advertisements that other users do see. The user who blocks tracking, but not ads, is still free-riding off those users who don’t opt-out of tracking. On a large enough scale, such self-help has the potential to disrupt the value exchange of the Internet, just as automatic commercial-skipping has already disrupted the value exchange of television. As with all “Spy v. Spy” battles, this long-term trend is inevitable: As more sophisticated technologies of evasion are incorporated seamlessly into browsers and can be used without significantly degrading the browsing experience, their use will become increasingly mainstream. But ultimately, just as with television commercial-skipping, market forces can and will, if permitted, respond through technological means and the development of new business models. Today’s implicit quid pro quo may become, of necessity, explicit: Websites and ad networks will have to find increasingly creative ways to grant access to certain content and services for users who do not block ads or the tracking that makes ad space more valuable. Policymakers should take care not to ban such technologies or cripple such business models (e.g., through requiring opt-in), which may rely on more sophisticated forms of targeting such as the use of packet inspection data.

As users face an increasingly clear choice between (i) getting content and services for free supported by behavioral advertising and (ii) paying to receive those same services and content without tracking or even without ads altogether, policymakers will finally see whether users are really as bothered by profiling as the advocates of OBA regulation insist. Given the ongoing and widespread replacement of fee- or subscription-supported web business models with ad-supported models, it seems likely that the vast majority of consumers will continue to choose ad-supported models, including profiling.

Conclusion

The questions raised above—about the harm that supposedly requires intervention, the availability of less restrictive means, and the cost/benefit analysis of regulation—are vital considerations for the future of the Internet. Indeed, if smarter online advertising will not fund the Internet’s future, what will? As both the desire for “free” services and content and the need for bandwidth expand, OBA has the potential to offer important new revenue sources that can help support the entire ecosystem of online content creation and service innovation, while also providing a new source of funding for Internet infrastructure and making ads less annoying and more informative. That would certainly seem preferable to increased user fees or other “pay-per-view” pricing models for Internet content and services.

But looming legislative and regulatory action could stop all of that by replacing the current regime—in which the FTC merely enforces industry self-regulatory policies—with one in which the government preemptively dictates how data may be collected and used. The more enlightened approach is a “layered” approach to privacy protection that combines industry self-regulation, enforcement of industry-established privacy policies, consumer education, and user “self-help” solutions. These and other issues will be addressed in greater detail in our upcoming PFF Special Report.