I know you've seen this before but just for all of those who haven't and who think this is too important to bury (like me):
Privacy Villain of the Week: Gen. Wesley Clark & Acxiom
More information has come to light in the
JetBlue/CAPPS II incident regarding the role of data broker Acxiom and its rainmaker-slash-board-member (and now-presidential candidate) Gen. Wesley Clark.
Privacy Villain of the Week:
Gen. Wesley Clark & Acxiom
You may recall that the incident involved a strange cross-pollination of executive agency functions as a U.S. Army contractor, Torch Concepts, tested a program purportedly intended for the Transportation Security Administration, an agency of the Department of Homeland Security. That program is CAPPS II, the air-travel customer profiling system set to go online early next year, assigning every American who travels by commercial airliner a color-code based on a purported threat level generated by computer algorithms.
The JetBlue scandal arose when it was found out that the airline violated its privacy policy by releasing 5 million "passenger name records" to Torch Concepts. Torch Concepts then crossreferenced those records with information from data-broker Acxiom. That information included such data as gender, residence information, children, Social Security Number, vehicles, occupation and income. In a presentation foolishly posted to the web, complete with at least one passenger's social security number, the test system seemed to flag everyone who wasn't "Young Middle Income Home Owners with Short Length-of-Residence" or "Older Upper Income Home Owners with Longer Length-of-Residence" as a potential terrorist threat worthy of extra airport searches by federal TSA agents.
Acxiom's sale of that data would seem to violate its privacy policy, as outlined in the
complaint filed with the Federal Trade Commission by the Electronic Privacy Information Center (EPIC):
"Acxiom displays a US Privacy Policy on its website providing in pertinent part:
'Acxiom respects the privacy of every individual about whom we have information. Acxiom and our associates (employees) pledge to conduct our business according to these principles:
"Notice, Access and Choice -- Acxiom recognizes that individuals should be informed about how information about them is used and have choices about the dissemination of that information . . .
"'Acxiom displays on its website Access, Notice, and Choice provisions providing in pertinent part:
"'Notices should be provided that explain the collection, use and distribution of personally identifiable information. Most importantly, individuals should have the choice to opt out of the use of their data in marketing campaigns if they so desire. Similarly, Acxiom believes individuals should have access to information a company has about them that will be used for commercial reference purposes. Acxiom conforms to all legal and self-regulatory guidelines for providing an individual with notice, access and choice . . . . Acxiom does not provide any information, whether public or non-public, to individuals. Acxiom also does not allow our clients to make any non-public information available to an individual. Acxiom does allow our clients to make only public record and publicly available information available to individuals in the form of commonly used and accepted real estate research tools and public listing searches via the Internet. . . .'
"There is no evidence that Acxiom provided notice to or obtained the consent of any passengers whose personal information was sold to Torch Concepts for the purposes of the study. . . .
"Acxiom's sale of personal information to Torch Concepts violated its US privacy policy and Notice, Access, Choice provisions, and constitutes an unfair and deceptive trade practice in or affecting commerce within the meaning of Section 5(a) of the Federal Trade Commission Act, 15 U.S.C. § 45(a)."
Now, how did Acxiom get this contract? Look toward a story buried on page A9 of the Saturday
Sept. 27 Washington Post, where it is reported that Gen. Wesley Clark, who became a
member of Acxiom's board after his retirement, went hard to work trying to increase the value of his share of stock in the firm by meeting "on the company's behalf with officials at the Department of Justice, the CIA, the Department of Transportation, the Transportation Security Administration and Lockheed Martin Corp., the defense contractor that is heading up CAPPS II."
That article also reported that back in January 2002, when TSA was still a part of the Department of Transportation,
"In a meeting at the (DOT) in January 2002, according to participants, Clark described a system that would combine personal data from Acxiom with information about the reservations and seating records of every U.S. airline passenger." ((Excerpts from article provided below))
<snip>
http://www.nccprivacy.org/handv/031006villain.htm The Privacy Villain of the Week and Privacy Hero of the Month are projects of the National Consumer Coalition's Privacy Group. ===
Clark Worked For Ark. Data Firm
Acxiom Role Part of Surveillance Debate
By Robert O'Harrow Jr.
Washington Post Staff Writer
Saturday, September 27, 2003; Page A08
Retired Gen. Wesley K. Clark helped an Arkansas information company win a contract to assist development of an airline passenger screening system, one of the largest surveillance programs ever devised by the government.
Starting just after the Sept. 11, 2001, terror attacks,
Clark sought out dozens of government and industry officials on behalf of Acxiom Corp., a data powerhouse that maintains names, addresses and a wide array of personal details about nearly every adult in the United States and their households, according to interviews and documents. <snip>
In a meeting at the Department of Transportation in January 2002, according to participants, Clark described a system that would combine personal data from Acxiom with information about the reservations and seating records of every U.S. airline passenger. With officials from an Acxiom partner sitting nearby,
he explained that computers would examine the data -- massive amounts of information about housing, telephone numbers, car ownership and the like -- for subtle signs of terrorist intentions. The system would authenticate the identity of every passenger, he told the government officials at the meeting.
Implementation of CAPPS II has been delayed several times because of a mix of technological hurdles and concerns about its potential intrusiveness.
www.washingtonpost.com/ac2/wp-dyn?pagename=article&node=&contentId=A7380-2003Sep26¬Found=true