What's Happening?
Data brokers are collecting and monetizing sensitive personal information, including location data from smartphones, which can reveal visits to medical facilities, abortion clinics, and places of worship. This practice allows companies to infer individuals'
health conditions and other private details, subsequently targeting them with advertisements for products like unproven cancer treatments. Despite the Health Insurance Portability and Accountability Act (HIPAA) protecting patient privacy in healthcare settings, location data emitted from mobile phones is not covered by this law. The U.S. government has initiated actions against some companies, such as a settlement with Idaho-based data broker Kochava, prohibiting it from selling sensitive location data without consumer consent. However, privacy advocates argue that these individual settlements do not establish broader legal precedents or regulations for the entire industry. Efforts to enact comprehensive privacy laws at both federal and state levels have faced obstacles, with some state bills being vetoed or facing lobbying efforts from digital advertisers. This unregulated environment has led to a proliferation of data brokers, many of whom do not register with state governments or offer easy opt-out mechanisms for consumers.
Why It's Important?
The widespread collection and sale of sensitive personal data by data brokers pose significant risks to individual privacy and public health. Consumers are exposed to targeted advertising for potentially harmful or ineffective treatments, as exemplified by individuals receiving ads for fake cancer cures after medical appointments. This can lead to patients making dangerous health decisions that contradict professional medical advice. The lack of comprehensive federal privacy laws means that individuals' most intimate activities and locations can be tracked and exploited without their explicit consent or knowledge. This practice also raises ethical concerns about the commercialization of personal vulnerability. The economic incentives for data brokers and big tech companies are substantial, as digital advertising generates significant profits, often in exchange for consumer data. This creates a powerful lobbying force against stricter privacy regulations, making it challenging to implement protections that prioritize consumer well-being over corporate interests. The current landscape also highlights a disparity in data protection, where health information shared directly with providers is protected, but location data inferring health status is not.
What's Next?
The debate over data privacy is expected to continue at both state and federal levels. Privacy advocates and consumer protection groups will likely persist in pushing for stronger legislation that bans or significantly limits the sale of sensitive geolocation and health data. This includes advocating for a national privacy law similar to regulations in the European Union. States that have already banned the sale of precise geolocation data, such as Connecticut, Delaware, Maryland, New Jersey, Oregon, and Virginia, may serve as models for other states considering similar measures. However, digital advertisers are expected to continue lobbying against such restrictions, emphasizing the economic benefits of targeted advertising. Consumers can take individual steps to protect their privacy by adjusting smartphone settings to limit location tracking and disable ad tracking. The effectiveness of these individual actions, however, remains limited in the face of an industry designed to collect and monetize data. Future government actions may include more investigations and settlements with data brokers, but a systemic solution will likely require legislative intervention.
Beyond the Headlines
The issue of data brokers tracking sensitive information extends beyond immediate privacy concerns, touching upon broader societal implications. The ability to infer highly personal details, such as health conditions or political affiliations, from location data creates a potential for discrimination and manipulation. For instance, individuals visiting reproductive health facilities or participating in protests could be categorized and targeted in ways that impact their access to services or expose them to unwanted scrutiny. The inaccuracies often found in data broker profiles, where individuals are misidentified or assigned incorrect demographic information, further complicate matters, potentially leading to mischaracterizations and unfair treatment. This unregulated data ecosystem also presents a significant cybersecurity risk, as the vast amounts of sensitive data held by numerous brokers create a large 'attack surface' for potential breaches. Such breaches could expose millions of Americans to identity theft, blackmail, or other forms of exploitation. The ongoing struggle to balance innovation and economic growth with fundamental privacy rights will shape the future of digital citizenship and the ethical boundaries of data collection in the U.S.
