FTC Announces Settlement with Turn Regarding Privacy Policy Misrepresentations and Tracking Opt-Outs

On Tuesday, December 20, the FTC announced a settlement with digital marketing platform Turn Inc. regarding how Turn tracked consumers, its privacy policy, and the opt-out mechanisms available to consumers. 

In its complaint, the FTC alleged that from 2013 to 2015, Turn misled consumers in two ways through statements in its privacy policy:

(1) the privacy policy – either expressly or by implication – stated that consumers could stop Turn’s tracking by setting their browser to block cookies, even though Turn continued to track users through other methods, and

(2) the privacy policy represented that its opt-out mechanism would be effective in blocking targeted ads on websites and apps, when in fact the opt-out cookie only worked for mobile browsers and did not block targeted ads in mobile apps.

As described by the FTC, Turn used a variety of methods to track consumers online and in mobile apps including cookies, web beacons, Apple’s IDFA, Google’s Ad ID, and unique identifier tracking headers generated by Verizon Wireless and added to its users’ mobile traffic (X-UIDH headers). (In March 2016, Verizon agreed to pay $1.35 million to settle FCC charges over these unique identifiers.)

More specifically, the FTC alleged that Turn used the X-UIDH header to sync with IDFA, Ad ID and other identifiers and to revive cookies even after users deleted their cookies. (The FTC also pointed out that Apple and Google contractually prohibit developers from syncing or correlating IDFA or the Advertising ID with other identifiers, which is intended to make sure that users can effectively express their choice not to be tracked by changing their identifier through each platform’s OS settings.)

The proposed Consent Order (1) bars Turn from misrepresenting the extent of its online tracking or users’ ability to limit or control the company’s use of their data, (2) requires Turn to provide an effective opt-out for consumers who do not want their information used for targeted advertising, and (3) requires Turn to place a prominent hyperlink on its home page that takes consumers to a disclosure explaining what information the company collects and uses for targeted advertising.

The key message from the settlement is that the basic requirement to provide consumers with clear and accurate notice of privacy practices and the ability to make choices about how their data is used to target advertising will continue to be a critical area of regulatory attention.

For more information, please contact:

Nate Hole: 312.464.3110 

Jessica Lee: 212.407.4073 

Or any member of our Advanced Media and Technology group.