31 votes

Consumer Reports releases "Permission Slip" app for requesting data removal

Posted by patience_limited
Tags: privacy, android, ios, omidyar network, california consumer privacy act, data brokers, author.kaveh waddell, source.consumerreports
https://www.consumerreports.org/electronics/privacy/take-control-of-online-data-with-apps-a5151057853/

Link information

This data is scraped automatically and may be incorrect.

Title
How to Take Back Control of Online Data With Apps Like Consumer Reports' Permission Slip - Consumer Reports
Published
Oct 3 2023
Word count
1671 words

7 comments

  1. patience_limited
    (edited )
    Link
    The Consumer Reports organization has joined with privacy groups to build a database of brokers who aggregate and sell personal data. They're leveraging state laws that permit you to designate an...

    The Consumer Reports organization has joined with privacy groups to build a database of brokers who aggregate and sell personal data. They're leveraging state laws that permit you to designate an "authorized agent" for data removal requests, and automating the process on your behalf.

    A number of companies charge for this service and claim to pursue individual requests to completion, but CR is offering to do it for free.

    Services that help you clean up your online presence have existed for years, but the ability to use CCPA data requests supercharged their abilities.

    As companies have received more requests from both individuals and authorized agents, they’ve gotten better at responding. Early in 2022, a CR study found that companies were often completely unprepared to deal with authorized agents. In the study, volunteers submitted more than 200 data requests via CR—but fewer than a quarter were successful. (Those were requests to access data, which are more complicated to comply with than opt-out or deletion requests.)

    Since then, things have gotten much better: Most authorized agent requests filed through Permission Slip are resolved quickly. “We do our best to let companies know when they will be added to Permission Slip, and often take calls with their privacy teams to figure out how we can best deliver requests,” says Ginny Fahs, a research director at CR who helped launch Permission Slip.

    CR has been working to smooth the way, together with a group of other privacy-focused organizations, companies that get a lot of data requests, and software providers that process those requests on the companies’ behalf. Together, this group has developed a “data rights protocol” to standardize authorized agent requests, making it easier for companies to respond.

    Footnote: Android app reviews suggest there are capacity problems with the service right now - maybe wait a few days. OTOH, the Android app is working for me on a Pixel 7 Pro without any issues. You do have to submit each request individually per company, but it's still faster than locating and submitting forms on each site. Some sites require deleting your account if you want privacy.

    10 votes
  2. [6]
    JackA
    (edited )
    Link
    The article mentions that this service was made possible by various new state laws but doesn't expand upon that much. Is this limited to those specific states? Does it behave differently between...

    The article mentions that this service was made possible by various new state laws but doesn't expand upon that much. Is this limited to those specific states? Does it behave differently between those specific states? Do people in other states not covered by these laws receive any benefit from using this service?

    I'm also usually distrustful of "free" services. Consumer reports is a nonprofit organization and a note at the end of this article says this service was made possible by a nonprofit grant, which seems to tick all the right boxes, but I'm not super familiar with how consumer reports operates. Are there any privacy concerns for this service itself?

    1 vote
    1. [3]
      patience_limited
      (edited )
      Link Parent
      There's a comprehensive chart [PDF warning] of progress in state privacy legislation here. It's a little hard to read, but so far, about 11 states have passed legislation, and more have privacy...

      There's a comprehensive chart [PDF warning] of progress in state privacy legislation here. It's a little hard to read, but so far, about 11 states have passed legislation, and more have privacy legislation pending. I'm in a state that doesn't have specific legislation, but it appears you can request removal based on where the companies do business.

      As to Consumer Reports' organization, they have a very long history of non-profit consumer advocacy, and are directly responsible for significant product recalls. The most serious complaint that could be directed at them is that they rarely if ever engage in direct political advocacy (why Ralph Nader left the organization), but rather focus on ensuring that consumers can make well-informed choices and exercise their rights in the capitalist marketplace.

      As to the app, the Android permissions look relatively innocuous and restricted to those necessary to run the application.

      6 votes
      1. nukeman
        Link Parent
        That’s a really interesting cross section of states, mix of very liberal, very conservative, and some middle-of-the-road ones.

        That’s a really interesting cross section of states, mix of very liberal, very conservative, and some middle-of-the-road ones.

        4 votes
      2. FlippantGod
        Link Parent
        probably the Suzuki Samurai defamation lawsuit which, while settled and dismissed, was not a good look and called into question testing standards and ethics.

        The most serious complaint that could be directed at them is....

        probably the Suzuki Samurai defamation lawsuit which, while settled and dismissed, was not a good look and called into question testing standards and ethics.

        1 vote
    2. [2]
      JXM
      Link Parent
      There are several states with privacy protection laws, but the biggest one is the California Consumer Privacy Act. A lot of companies will comply with any requests they receive under the CCPA...

      There are several states with privacy protection laws, but the biggest one is the California Consumer Privacy Act. A lot of companies will comply with any requests they receive under the CCPA because it’s not worth the trouble to weed out those who are not in CA, but they don’t legally have to.

      I'm also usually distrustful of "free" services. Consumer reports is a nonprofit organization and a note at the end of this article says this service was made possible by a nonprofit grant, which seems to tick all the right boxes, but I'm not super familiar with how consumer reports operates. Are there any privacy concerns for this service itself?

      In the FAQ on the app, they say it is currently funded by donations.

      3 votes
      1. patience_limited
        Link Parent
        I did receive a single, polite, easily dismissed prompt to contribute while using the app. I'm a CR member, but may contribute anyway if there's action on any of the removal requests.

        I did receive a single, polite, easily dismissed prompt to contribute while using the app. I'm a CR member, but may contribute anyway if there's action on any of the removal requests.