BBB National Programs Newsroom

Privacy group brings app publisher and website of health treatment centers into compliance with best practices

For Immediate Release

Contact: Abby Hills, Director of Communications, 301.412.7769 / ahills@bbbnp.org

 

Arlington, VA – April 23, 2020 – Today, the Digital Advertising Accountability Program (DAAP) released new actions detailing its efforts to provide consumers with control over how their data is used in personalized digital advertising. The privacy watchdog brought the app developer Mammoth Media into full compliance with the Digital Advertising Alliance’s self-regulatory principles (DAA Principles), which are best practices for privacy and interest-based advertising (IBA). Separately, the program alerted Recovery Centers of America, a company that operates addiction treatment facilities, to IBA on its website which the company immediately addressed.

Mammoth’s Wishbone and Yarn apps are widely used social polling and storytelling apps. DAAP initiated reviews of these apps as part of its general monitoring activities. Technical analysis revealed the collection of user data – including precise location data – by third parties for advertising purposes. Yet the apps neither provided clear, up-front notice of IBA nor requested consent for the collection of precise location data, as required by the DAA Principles.

After DAAP contacted Mammoth, the publisher quickly modified its app and privacy policy to reach compliance with the DAA Principles. These changes include:

 

  1. Incorporating an up-front “enhanced notice” jump link at the top of each app’s privacy policy; this leads directly to disclosures that describe how user data is collected and used for third-party advertising;
  2. Providing a link to and a description of the DAA’s AppChoices tool, which can be used to opt out of personalized advertising on mobile apps;
  3. Disabling the collection of precise location data by third parties on the Wishbone app
  4. Adding a statement of adherence to the DAA Principles to the company’s privacy policy.

 

Today’s second case concerns the website of Recovery Centers of America. During its regular monitoring of websites, DAAP detected signs of data collection for targeted advertising on the company’s website. DAAP reached out to Recovery Centers with an inquiry letter recommending an enhanced notice link to a privacy disclosure describing interest-based advertising. The company quickly updated its website to provide a link in its footer that takes users to a disclosure about third-party data collection for IBA occurring on its website.

“Enhanced notice is a major component of the DAA Principles’ self-regulatory regime,” said Jon Brescia, DAAP VP. “We appreciate the swift efforts these companies took to meet their obligations to app and website users.”

Today’s case releases bring the total number of public actions taken by DAAP to 115.

 

###

 

ABOUT BBB NATIONAL PROGRAMS: BBB National Programs is a non-profit that fosters trust, innovation, and competition in the marketplace through the development and delivery of cost-effective, third-party self-regulation, dispute resolution and other programs. BBB National Programs is where businesses turn to enhance consumers’ trust and consumers are heard. BBB National Programs is the home of leading industry self-regulatory and dispute resolution programs that include the National Advertising Division (NAD), National Advertising Review Board (NARB), BBB EU Privacy Shield, BBB AUTO LINE, Children’s Advertising Review Unit (CARU), Children’s Food and Beverage Advertising Initiative (CFBAI), Children’s Confection Advertising Initiative (CCAI), Direct Selling Self-Regulatory Council (DSSRC), Digital Advertising Accountability Program (Accountability Program), and the Coalition for Better Advertising Dispute Resolution Program (CBA DRM). The programs are designed to resolve business issues and advance shared objectives by responding to marketplace concerns to create a better customer experience. To learn more about industry self-regulation, please visit: BBBNP.org.

 

About the BBB National Programs Digital Advertising Accountability Program: The Digital Advertising Accountability Program (DAAP), a division of BBB National Programs, protects consumers' privacy online by providing independent, third-party enforcement of cross-industry best practices governing the collection and use of data in online interest-based advertising. DAAP also provides guidance to companies looking to come into compliance with the Digital Advertising Alliance’s principles and responds to complaints filed by consumers about online privacy.

Privacy group brings app publisher and website of health treatment centers into compliance with best practices

For Immediate Release

Contact: Abby Hills, Director of Communications, 301.412.7769 / ahills@bbbnp.org

 

Arlington, VA – April 23, 2020 – Today, the Digital Advertising Accountability Program (DAAP) released new actions detailing its efforts to provide consumers with control over how their data is used in personalized digital advertising. The privacy watchdog brought the app developer Mammoth Media into full compliance with the Digital Advertising Alliance’s self-regulatory principles (DAA Principles), which are best practices for privacy and interest-based advertising (IBA). Separately, the program alerted Recovery Centers of America, a company that operates addiction treatment facilities, to IBA on its website which the company immediately addressed.

Mammoth’s Wishbone and Yarn apps are widely used social polling and storytelling apps. DAAP initiated reviews of these apps as part of its general monitoring activities. Technical analysis revealed the collection of user data – including precise location data – by third parties for advertising purposes. Yet the apps neither provided clear, up-front notice of IBA nor requested consent for the collection of precise location data, as required by the DAA Principles.

After DAAP contacted Mammoth, the publisher quickly modified its app and privacy policy to reach compliance with the DAA Principles. These changes include:

 

  1. Incorporating an up-front “enhanced notice” jump link at the top of each app’s privacy policy; this leads directly to disclosures that describe how user data is collected and used for third-party advertising;
  2. Providing a link to and a description of the DAA’s AppChoices tool, which can be used to opt out of personalized advertising on mobile apps;
  3. Disabling the collection of precise location data by third parties on the Wishbone app
  4. Adding a statement of adherence to the DAA Principles to the company’s privacy policy.

 

Today’s second case concerns the website of Recovery Centers of America. During its regular monitoring of websites, DAAP detected signs of data collection for targeted advertising on the company’s website. DAAP reached out to Recovery Centers with an inquiry letter recommending an enhanced notice link to a privacy disclosure describing interest-based advertising. The company quickly updated its website to provide a link in its footer that takes users to a disclosure about third-party data collection for IBA occurring on its website.

“Enhanced notice is a major component of the DAA Principles’ self-regulatory regime,” said Jon Brescia, DAAP VP. “We appreciate the swift efforts these companies took to meet their obligations to app and website users.”

Today’s case releases bring the total number of public actions taken by DAAP to 115.

 

###

 

ABOUT BBB NATIONAL PROGRAMS: BBB National Programs is a non-profit that fosters trust, innovation, and competition in the marketplace through the development and delivery of cost-effective, third-party self-regulation, dispute resolution and other programs. BBB National Programs is where businesses turn to enhance consumers’ trust and consumers are heard. BBB National Programs is the home of leading industry self-regulatory and dispute resolution programs that include the National Advertising Division (NAD), National Advertising Review Board (NARB), BBB EU Privacy Shield, BBB AUTO LINE, Children’s Advertising Review Unit (CARU), Children’s Food and Beverage Advertising Initiative (CFBAI), Children’s Confection Advertising Initiative (CCAI), Direct Selling Self-Regulatory Council (DSSRC), Digital Advertising Accountability Program (Accountability Program), and the Coalition for Better Advertising Dispute Resolution Program (CBA DRM). The programs are designed to resolve business issues and advance shared objectives by responding to marketplace concerns to create a better customer experience. To learn more about industry self-regulation, please visit: BBBNP.org.

 

About the BBB National Programs Digital Advertising Accountability Program: The Digital Advertising Accountability Program (DAAP), a division of BBB National Programs, protects consumers' privacy online by providing independent, third-party enforcement of cross-industry best practices governing the collection and use of data in online interest-based advertising. DAAP also provides guidance to companies looking to come into compliance with the Digital Advertising Alliance’s principles and responds to complaints filed by consumers about online privacy.

Blog

A Cashless Future

How close are we from entering into a world where cash is no longer accepted? Do we truly understand the benefits and implications of completely going cashless and relying solely on financial transactions that are intimately connected with our data? Dr. Shelle Santana, Associate Professor at the Harvard University Business School, answers these questions and more on this episode of the >Better Series podcast.
Read more
Blog

All Things CCPA

After years of debate, discussion, and revisions, the California Consumer Privacy Act (CCPA) -- a law that gives consumers a wide range of rights and creates a series of obligations for businesses -- finally began enforcement on July 1st. Cobun Zweifel-Keegan, Deputy Director of BBB National Programs' Privacy Initiatives, joined Julian Flamant, Associate at Hogan Lovells US LLP, and Heather Federman VP of Privacy and Policy at BigID to discuss what the CCPA means for businesses inside and outside of California.
Read more
Blog

Schrems II: What Do Privacy Shield Businesses Need to Know?

The July 16 decision from the CJEU, known as Schrems II, addressed two mechanisms for transferring EU individuals’ personal data outside the EU. As the situation continues to develop, and before making changes to their practices around international data transfers, businesses should pause to review their data flows, contracts, and substantive commitments, and their current chain of compliance and accountability for data received from the EU.
Read more
Blog

Contact Tracing and Tech: An International Comparison

To confront coronavirus, governments across the globe have devised approaches for tracing its spread and quarantining individuals known to be carriers, also known as “contact tracing.” While almost all strategies rely on traditional means of contacting and recording the movements of infected individuals, many employ modern communications technologies: sensors, Bluetooth, GPS, thermal recognition, facial-recognition, and geofencing.
Read more

Media Inquiry

*Required fields