Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Google offers a Chrome plugin that uses cookies to control privacy, while Firefox offers a HTTP Header to tell websites to not track the users and log the data anonymously.

This obviously extends a level of trust to the advertiser to respect the user's privacy wishes. The Google cookie approach seems to be based off an advertising consortium called


Can someone explain what consumer privacy protections are in place for advertisers? I'm looking for links to legal repercussions, or how to report a negligent advertiser.

So far I've only found information on how to report non-compliant companies in the United States, but I don't know how effective that is (fines, etc) or what the laws are in other countries .

share|improve this question
The main issue is that the USA have unbelievable poor consumer and privacy protection laws, but most of the companies, that violate privacy, are USA-based. For example the German privacy advisors have little power over Facebook. All they can do is to concentrate on German organizations and companies, that use the social plugins without explicit user consent. – Hendrik Brummermann Mar 19 '12 at 9:23
up vote 1 down vote accepted

At least in the USA privacy at least privacy with respect to what a coperation knows about us, is a hot topic in congress, mainly because coperations are slowly proving their inability to protect the information they collect from us.

On paper major coperations have recently agreed to honor Do Not Track headers, they have promised to provide a means to enable/disable this option, it happening slowly but still progress I suppose.

The problem is simply every country has a different expectation of privacy. So what level of privacy should be the default? Using the user's country to determine that is a bit of information, and a great way, to supress information.

At this point the worst a company can do is break their own policy, get caught doing so, and have it be reported on by the world's media. There really isn't a standard.

As Hendrik Brummermann points out. A country that does have laws on the books about privacy has their hands tied, on companies outside of their borders, because the internet being bordless.

share|improve this answer
"major coperations have recently agreed to honor Do Not Track headers" if it is not activated by default! – curiousguy Aug 11 '12 at 4:22
"major coperations have recently agreed to honor Do Not Track headers" is no longer true. Some factions are attempting to derail the Do Not Track process. – pseudon Mar 19 '13 at 17:06
In any case, there is currently no agreement on what Do Not Track means. Advertisers want it to mean Do Not Target (but they can still collect and aggregate whatever data they want). But the intent of the standard, and what most users want, is for Do Not Track to mean exactly what it says... Do Not Track (which implies do not collect and aggregate). – pseudon Mar 19 '13 at 17:09

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.