Nonprofit websites are riddled with ad trackers

Asia's Tech News Daily

Federal Trade Commission, Internet privacy, US

Last year, nearly visited the website of Planned Parenthood, a nonprofit that many people turn to for very private matters like sex education, access to contraceptives, and access to abortions. What those visitors may not have known is that as soon as they opened plannedparenthood.org, some two dozen ad trackers embedded in the site alerted a slew of companies whose business is not reproductive freedom but gathering, selling, and using browsing data.

The Markup ran and found 28 ad trackers and 40 third-party cookies tracking visitors, in addition to so-called “session recorders” that could be capturing the mouse movements and keystrokes of people visiting the homepage in search of things like information on contraceptives and abortions. The site also contained trackers that tell Facebook and Google if users visited the site.

The Markup’s scan found Planned Parenthood’s site communicating with companies like Oracle, Verizon, LiveRamp, TowerData, and Quantcast—some of which have made a business of assembling and selling access to masses of digital data about people’s habits.

Katie Skibinski, vice president for digital products at Planned Parenthood, said the data collected on its website is “used only for internal purposes by Planned Parenthood and our affiliates,” and the company doesn’t “sell” data to third parties.

“While we aim to use data to learn how we can be most impactful, at Planned Parenthood, data-driven learning is always thoughtfully executed with respect for patient and user privacy,” Skibinski said. “This means using analytics platforms to collect aggregate data to gather insights and identify trends that help us improve our digital programs.”

Skibinski did not dispute that the organization shares data with third parties, including data brokers.

A a localized website specifically for people in the Gulf region, including Texas, —churned up similar results.

Planned Parenthood is not alone when it comes to nonprofits, some operating in sensitive areas like mental health and addiction, gathering and sharing data on website visitors.

, The Markup scanned more than 23,000 websites of nonprofit organizations, including those belonging to abortion providers and nonprofit addiction treatment centers. The Markup used the to identify nonprofits that have filed a tax return since 2019 and that the agency as focusing on areas like mental health and crisis intervention, civil rights, and medical research. We then examined each nonprofit’s website as publicly listed in . We found that about 86 percent of them had third-party cookies or tracking network requests. By comparison, when The Markup did a in 2020, we found 87 percent used some type of third-party tracking.

About 11 percent of the 23,856 nonprofit websites we scanned had a Facebook pixel embedded, while 18 percent used the Google Analytics feature.

The Markup found that 439 of the nonprofit websites loaded scripts called session recorders, which can monitor visitors’ clicks and keystrokes. Eighty-nine of those were for websites that belonged to nonprofits that the IRS categorizes as primarily focusing on mental health and crisis intervention issues.

“As a user of this website, by sharing your information with them, you probably don’t assume that this sensitive information is shared with third parties and definitely don’t assume that your keystrokes are recorded,” Gunes Acar, a privacy researcher who copublished a , said. “The more sensitive the website is, the more worried I am.”

Tracy Plevel, the vice president of development and community relations at Gateway Rehab, one of the nonprofits with session recorders on its site, said that the nonprofit uses trackers and session recorders because it needs to stay competitive with its larger, for-profit counterparts.

“As a nonprofit ourselves, we are up against for-profit providers with large advertising budgets as well as the addiction treatment brokers who grab those seeking care with similar online advertising tactics and connect them with the provider who is offering the greatest ‘sales’ compensation,” Plevel said. “Additionally we know user experience has a big impact on following through on treatment. When someone is ready to commit to treatment, we need to ensure it [is] as easy as possible for them before they get frustrated or intimidated by the process.”

Other nonprofits had a significant number of trackers embedded on their sites as well. The Markup on The Clinic at Sharma-Crawford Attorneys at Law, a Kansas City legal clinic that represents low-income people facing deportation.

Rekha Sharma-Crawford, the board president of The Clinic, wrote in an emailed statement, “We take privacy and security concerns very seriously and will continue to work with our web provider to address the issues you have identified.”

Save the Children, a humanitarian aid organization founded more than 100 years ago, had 26 ad trackers and 49 third-party cookies. March of Dimes, a nonprofit started by President Franklin D. Roosevelt that focuses on maternal and infant care, had more than 29 ad trackers on its site and 58 third-party cookies. City of Hope, a Californian cancer treatment and research center, had 25 ad trackers and 47 third-party cookies.

Federal Trade Commission, Internet privacy, US
Credit: The Markup
Results of Blacklight scans of the homepages of Save the Children, March of Dimes, and City of Hope, performed on Oct 19 2021

Paul Butcher, associate vice president of global digital strategy at Save the Children, said in an emailed statement that the organization “takes data protection very seriously.” Butcher also wrote that Save the Children collects some data through ad trackers “to improve user experience” and that the organization is in the process of revamping its data retention policies and recently hired a new head of data.

March of Dimes and City of Hope did not respond to requests for comment.

State-level privacy laws miss nonprofits

While health data is governed by HIPAA, and FERPA  regulates educational records, there are no federal laws governing how websites track their visitors. Recently, a few states—California, Virginia, and Colorado—have enacted consumer privacy laws that require companies to disclose their tracking practices and allow visitors to opt out of data collection.

But nonprofits in two of those states, California and Virginia, don’t need to adhere to the regulations.

Sen. Ron Wyden (D-OR), who has proposed his , said that nonprofits accrue a large amount of potentially sensitive data.

“Nonprofits store incredibly personal information about things we’re passionate about, from political causes and social views to which charitable causes we care about,” Wyden said in an emailed statement. “If a data breach reveals someone donates to a domestic violence support group or an LGBTQ rights organization or the name of their mosque, any of that information could be incredibly private.”

Nonprofit leaders, however, argue that they lack the infrastructure and funding to comply with privacy law requirements and must gather and share information on donors in order to survive.

“One of the most substantive and impactful uses of data by nonprofits has been our fundraising,” said Shannon McCracken, the CEO of The Nonprofit Alliance, an advocacy group made up of nonprofits and businesses. “Without the ability to cost-effectively reach prospective new donors and current donors, then nonprofits can’t continue to be as impactful as they are today.”

But purposeful or not, privacy experts say, nonprofits are feeding personal information to data brokers and tech giants like Facebook and Google.

“A nonprofit might share your phone number and name with LiveRamp. Tomorrow, a for-profit entity can then reuse that same data to target you,” said Ashkan Soltani, a privacy expert and former chief technologist at the Federal Trade Commission. “The data flows that go into these third-party aggregators and data brokers come often from nonprofits as well.”

Soltani, who was appointed executive director of the California Privacy Protection Agency on Oct. 4, helped draft the California Consumer Privacy Act, which was originally introduced with the nonprofit exemptions.

Many major nonprofits work with data brokers to help organize and analyze their data, Jan Masaoka, CEO of the California Association of Nonprofits, said.

“People that have big donor lists use them extensively, pretty much all of them use one of the services,” Masaoka said. “They don’t keep it in-house, pretty much everybody keeps it with one of these services.”

She noted that Blackbaud is a company that nonprofits often turn to. The ’s marketing material promotes a that combines donor data from more than 550 nonprofits with public information on millions of households.

Blackbaud didn’t respond to a request for comment.

Because of a lack of funds, nonprofits also rely on third-party platforms—which also happen to be data brokers—to manage their data’s security and privacy, McCracken said. But these kinds of companies aren’t immune to cyberattacks either: Blackbaud in which hackers stole passwords, Social Security numbers, and banking information, according to a . Hundreds of were affected, along with more than 13 million people, according to the Identity Theft Resource Center.

“They rely on this kind of problematic ecosystem to achieve their work, and as a result, they share number lists, email addresses, or browsing behavior with third-party advertising companies and subject their members to risk,” Soltani said.

The exception

Unlike its predecessors in California and Virginia, Colorado’s privacy bill doesn’t have an exemption for nonprofits.

In both California and Virginia, the bills’ main supporters gave nonprofits an exemption as a political maneuver. Alastair Mactaggart, a real estate developer and founder of Californians for Consumer Privacy, who was the driving force behind the California Consumer Privacy Act, said his proposal was already facing opposition from tech giants and didn’t want a political showdown with nonprofits, too.

“You gotta take the first step, so we figured this was the one that would be the easiest to bounce off,” Mactaggart said. “Eventually, I hope that the big nonprofits are included as well.”

David Marsden, the state senator who introduced the Virginia Consumer Data Protection Act, echoed that sentiment, reflecting that the law wasn’t perfect but still a good start.

“Does this pick up everybody that it should, or exempt everybody who needs an exemption? Probably not, but it comes pretty close,” Marsden said. “We were able, with this bill, to get it passed without people getting up and objecting to what we were trying to do.”

Colorado state senator Robert Rodriguez, who co-sponsored the state’s privacy bill, said he didn’t include an exemption for nonprofits because he felt that any entity that had data on more than 100,000 people should have to follow privacy protections. He also didn’t understand why other states had exemptions.

“Someone that has over 100,000 records is a good size,” he said in an email. “They should have some protections or requirements to follow.”

This article by Alfred Ng and Maddy Varner was and was republished under the

Internet Explorer Channel Network
Asia's Tech News Daily
News Related

OTHER NEWS

What makes Spotify's Wrapped such a popular end-of-year tradition? FOMO

Obsessed with the Olivia Rodrigo album that came out this year? Did you listen to a podcast for more hours than you realized? Or have you been stuck in the ... Read more »

Get up to $200 in gift cards and free earbuds when you switch to Verizon's Visible wireless service now

— Recommendations are independently chosen by Reviewed’s editors. Purchases you make through our links may earn us a commission. Ready to switch wireless carriers? Visible is giving customers reasons to ... Read more »

Elon Musk replies to a tweet about web 3.0 saying it sounds like "crap"

The term web 3.0 is one that has been getting around a lot lately. It refers to the evolution that many believe the Internet will have, including features such as ... Read more »

Rocket Lab announces the construction of Neutron, a reusable rocket that will become the competition of SpaceX and Blue Origin

The American company founded by Peter Beck spoke about the details of its new rocket, Neutron , in a presentation broadcast live on YouTube. This will aim to put satellites ... Read more »

ISS just had to swerve out of the way of space junk left over from 1994

The International Space Station just had to dodge space junk in orbit, demonstrating the increasing risk to the orbital station and smaller satellites from the proliferation of space trash in ... Read more »

FTC launches lawsuit to block Nvidia's 'anticompetitive' Arm acquisition

The US Federal Trade Commission (FTC) has sued to block Nvidia’s $40bn acquisition of Arm over concerns that the combined firm would stifle competition as well as innovation in the ... Read more »

Workspot DaaS review

Workspot is a SaaS platform and cloud PC service that offers and manages virtual desktops for enterprise organizations. Its key customers have advanced security needs and require high-performing, reliable computing ... Read more »

Pretty much all Wi-Fi routers are vulnerable to attack, study finds

In a shocking revelation, cybersecurity researchers have discovered over 200 bugs in Wi-Fi routers made by nine popular manufacturers, suggesting that millions of the most common devices around the world ... Read more »

Meta head of experimentation says failure is his number one priority

Ime Archibong, Head of New Product Experimentation at Meta (née Facebook), says designing truly innovative products in the tech sector is all about failing, but doing so quickly. Speaking at ... Read more »

How to watch Demon Slayer: Entertainment District Arc online from anywhere

Returning for its second act, Demon Slayer: Kimetsu no Yaiba ‘Entertainment District Arc’ reacquaints Anime fans with Tanjiro Kamoda, a demon slayer apprentice, who finds his path following the slaughter ... Read more »

Forget Spotify Wrapped, groove to the sound of black holes colliding

How do you convey the yawning abyss of infinity that is a black hole to a person who hasn’t immersed themselves in non-Euclidean geometries with infinite dimensions, the ‘math side’ ... Read more »

Why Qualcomm believes its new always-on camera for phones isn't a security risk

One of the biggest new features of the new Snapdragon 8 Gen 1 chipset is an always-on camera. Yes, you read that right. An always-on camera on your phone. It ... Read more »

Where's the snow? Rockies winter starts with a whimper

The Associated PressDrew Darnell rides his skateboard at Cheesman Park Pavilion on Wednesday, Dec. 1, 2021, in Denver. The city is close to breaking a record for its longest streak ... Read more »

Lexus RZ teaser gives us our first glimpse at the firm's first dedicated electric car

Lexus has given us our first look at its next EV. Dubbed the Lexus RZ, a 28 second teaser video (which you can see above) shows the exterior styling from ... Read more »

Ginger writing tool review

It’s been a while since writing assist tools arrived on the market, and they’ve managed to establish a solid reputation among professional writers and even some hobbyist communities. There is ... Read more »

Microsoft Teams update will stop you annoying your colleagues

Microsoft is working on a simple update for Teams that should help address common issues with international collaboration. According to a new entry in the company’s product roadmap, Microsoft Teams ... Read more »

China aiming for DNA storage supremacy as it races towards solid-state device

After Microsoft’s DNA storage announcement and that of the Georgia Tech Research Institute (GTRI), a team from China led by Liu Hong, a professor at Southeast University in the country’s ... Read more »

Microsoft reverses change in Windows 11 that made it hard to switch browsers

Microsoft is reversing a change in the newly released Windows 11 which made it very hard to change your default browser via the system settings. Microsoft released the Windows 11 ... Read more »

US govt phones 'hacked with NSO spyware'

Apple iPhones of at least nine US State Department employees were hacked by an unknown assailant using sophisticated spyware developed by the Israel-based NSO Group, according to four people familiar ... Read more »

Didn't find a Cyber Monday TV deal? These Sony 4K TVs have you covered

Sony makes some top-tier TVs, so it’s well worth paying attention when they’re on sale. And despite Black Friday and Cyber Monday now being over, you can still get some ... Read more »

United dragged by Twitter over greenwashing with its ‘100% sustainable fuel' flight

Wednesday was a “historic” day for aviation, United Airlines . Boeing 737 MAX 8 flew from Chicago’s O’Hare International Airport and headed to Reagan National Airport in Washington, DC, marking ... Read more »

There's still an amazing Cyber Monday on the powerful Alienware m15 R4 Gaming Laptop

Cyber Monday is behind us, but Dell still has some incredible laptop deals available. There’s a massive $610 discount on Dell’s all-powerful Alienware m15 R4 Gaming Laptop. It’s an incredible ... Read more »

Arthur Labinjo-Hughes: ‘Cruel' stepmother who murdered boy is attacked with salt in jail by inmates

The stepmother and father of Arthur Labinjo-Hughes have been jailed over the six-year-old’s killing in Solihull (PA) An “instinctively cruel” stepmother convicted of murdering her partner's six-year-old son was threatened ... Read more »

Nicola Sturgeon blames Steps concert for omicron Covid outbreak

Steps singing on stage in 1999 – Nikos/Shutterstock Nicola Sturgeon has blamed a Steps concert for an outbreak of the omicron Covid variant in Scotland. The First Minister said the ... Read more »

Bereaved families ‘sickened' by No 10 lockdown parties

Boris Johnson in front of the Downing Street Christmas tree in 2020 (Justin Tallis/PA) Families who lost loved ones during the pandemic say they are “sickened” by reports that Downing ... Read more »

George Clooney turned down $35m for one day of work

Watch: George Clooney turned down $35m for one day of work George Clooney has revealed he once turned down $35 million (£29.8 million) for one day’s work. The actor has ... Read more »

Swiss district puts 2,000 people in quarantine after two Omicron cases at school

The entrance of the Châtaigneraie campus of the International School of Geneva which has closed after two cases of the Omicron variant were identified (Fabrice COFFRINI / AFP) More than ... Read more »

Minister claims Tory Xmas party backlash is 'rumour and hear'say' in excruciating exchange

Maggie Throup, the Minister for Vaccines and Public Health, was challenged about the Conservatives’ Christmas parties in 2020 but said the backlash surrounding the COVID rule-breaching events was ‘rumour and ... Read more »

The GoPro Hero 10's superb Black Friday accessory bundle deal is still going strong

GoPro’s Black Friday deal on its flagship Hero 10 Black camera is still running, with the deal effectively giving you a bunch of free accessories with the action cam – ... Read more »

New MP: Bexley by-election win 'greatest honour of my life'

The newest Conservative MP has promised to “get on delivering” for the people of Old Bexley and Sidcup, as he retained his party’s seat in the by-election following the death ... Read more »

Met not investigating No 10 over reported Christmas party, says Cressida Dick

Met not investigating No 10 over reported Christmas party, says Cressida Dick Read more »

One of the best Nintendo Switch Cyber Monday deals is still live and ripe for Christmas shopping

Cyber Monday is over, but we’re still seeing some excellent deals alive and kicking across the internet. Take this superb Nintendo Switch Cyber Monday deal hosted right now at Best ... Read more »

Satellite image shows how vital ocean current is affected by climate crisis

A satellite image shows a major ocean current that is speeding up due to climate change. The Antarctic Circumpolar Current (ACC), which sweeps around the abyss off Antarctica, is the ... Read more »

Washington wants to restrict exports of surveillance tech used in rights abuses

Surveillance technologies cover a wide range of increasingly sophisticated tools whose use is spreading all over the world, from surveillance cameras and drones. WASHINGTON (AFP) – The United States wants ... Read more »

Russia has banned a whole load more VPN services

Russia continues to wage war against virtual private network (VPN) services, adding half a dozen more to its list of banned services, which already contained nine such services. According to ... Read more »

This is how government plans to use Blockchain in its systems

The electronics and IT ministry on Friday released a national strategy on blockchain for adopting the technology in government systems especially for e-governance services.The ministry has adopted a multi-institutional approach ... Read more »

Save $600 on This Solar Generator for Your Home for Cyber Week

Entrepreneurs know they always have to have a plan. But when things don’t go according to that plan, you also have to be ready to adapt on the fly. Working ... Read more »

8 Critical Email Rules for Optimal Efficiency

Even though you have many other ways to communicate (e.g., Zoom, Teams, phone calls, text), email still dominates the workday. Thoroughly controlling your inbox will allow you to be more ... Read more »

How to Navigate Data Privacy Regulations When Deploying Enterprise Blockchain Solutions

As businesses in nearly every sector focus on digital transformation, more aim to incorporate enterprise blockchain technology into their operations. According to a Deloitte study, more than half of global ... Read more »

This Robot's Facial Expressions Will Freak You Out

Engineered Arts A U.K. robotics firm called Engineered Arts just debuted the first videos of its new humanoid robot, which is able to make hyper-realistic facial expressions. It’s a pretty ... Read more »
On free-english-test.com you will find lots of free English exam practice materials to help you improve your English skills: grammar, listening, reading, writing, ielts, toeic