• « Nos données personnelles valent de l’or ! » - Cash Investigation
    https://www.francetvinfo.fr/replay-magazine/france-2/cash-investigation/cash-investigation-du-jeudi-20-mai-2021_4605401.html

    Pour ce nouveau numéro, l’enquête a commencé par l’appel téléphonique d’un inconnu qui a alerté la journaliste Elise Lucet : il a trouvé son numéro de téléphone mobile en vente pour soixante centimes sur un site internet américain ! Avoir son numéro de téléphone vendu sans son autorisation sur une base de données, c’est illégal. Pourtant, cela touche des centaines de millions de personnes à travers le monde. Des entreprises appelées des « #data_brokers » vendent les données de consommateurs qui deviendront les destinataires de publicités ciblées. Un marché colossal estimé à 400 milliards d’euros en Europe !

    « Cash » révèle comment un téléphone espionne son utilisateur, comment des données très personnelles sur sa religion, sa grossesse ou son moral sont envoyées sans son consentement à des partenaires commerciaux. Par exemple, lors d’une connexion sur le site de santé #Doctissimo, des informations sont transmises à l’insu de l’utilisateur et elles vont ensuite être envoyées à des entreprises appelées des « data brokers » qui vendent ces données de consommateurs pour des publicités ciblées. Un marché colossal estimé à 400 milliards d’euros en Europe !

    Quarante millions de Français seraient pistés

    Très difficile d’échapper à ces nouveaux courtiers de données, même en éteignant le téléphone mobile ou l’ordinateur… La journaliste Linda Bendali a découvert que ces « data brokers » ont trouvé un autre moyen pour récupérer ce nouvel or noir : la carte Vitale ! Dans la moitié des pharmacies françaises, les informations sur les médicaments achetés par les consommateurs sont transmises à la société IQVIA, le plus gros « data broker » de données médicales au monde. Sans le savoir, quarante millions de Français seraient ainsi pistés.

    Rien n’échappe aux marchands de données, même les pensées de tout un chacun qu’ils veulent désormais prédire. Cela s’appelle le « profilage prédictif ». En quelques années, la montre de sport est par exemple devenue un accessoire indispensable pour ceux qui veulent se maintenir en forme. Mais ces bracelets connectés qui enregistrent la fréquence cardiaque, les calories dépensées, la qualité du sommeil... pourraient aussi permettre de cerner la personnalité de son propriétaire !

    combien de clients vont aller voir leur pharmacien pour demander à ce que leurs données soient pas transmises à IQVIA ?

    ping @touti

    #données #données_de_santé #carte_vitale #pharmacies #hôpital #Cnil #IQVIA #Health_Data_Center #RGPD

  • Opinion | The Government Uses ‘Near Perfect Surveillance’ Data on Americans - The New York Times
    https://www.nytimes.com/2020/02/07/opinion/dhs-cell-phone-tracking.html?referringSource=articleShare

    “When the government tracks the location of a cellphone it achieves near perfect surveillance, as if it had attached an ankle monitor to the phone’s user,” wrote John Roberts, the chief justice of the Supreme Court, in a 2018 ruling that prevented the government from obtaining location dataClose X from cellphone towers without a warrant.

    “We decline to grant the state unrestricted access to a wireless carrier’s database of physical location information,” Chief Justice Roberts wrote in the decision, Carpenter v. United States.

    With that judicial intent in mind, it is alarming to read a new report in The Wall Street Journal that found the Trump administration “has bought access to a commercial database that maps the movements of millions of cellphones in America and is using it for immigration and border enforcement.”

    The data used by the government comes not from the phone companies but from a location data company, one of many that are quietly and relentlessly collecting the precise movements of all smartphone-owning Americans through their phone apps.

    Many apps — weather apps or coupon apps, for instance — gather and record location data without users’ understanding what the code is up to. That data can then be sold to third party buyers including, apparently, the government.

    Since that data is available for sale, it seems the government believes that no court oversight is necessary. “The federal government has essentially found a workaround by purchasing location data used by marketing firms rather than going to court on a case-by-case basis,” The Journal reported. “Because location data is available through numerous commercial ad exchangesClose X, government lawyers have approved the programs and concluded that the Carpenter ruling doesn’t apply.”
    The Privacy Project
    If you’re online — and, well, you are — someone’s using your information. We’ll tell you what you can do about it. Sign up here.

    A spokesman from Customs and Border Protection defended the practice in a statement to The Times: “While C.B.P. is being provided access to location information, it is important to note that such information does not include cellular phone tower data, is not ingested in bulk and does not include the individual user’s identity.”

    Use of this type of location-tracking data by the government has not been tested in court. And in the private sector, location data — and the multibillion dollar advertising ecosystem that has eagerly embraced it — are both opaque and largely unregulated.

    Last year, a Times Opinion investigation found that claims about the anonymity of location data are untrue since comprehensive records of time and place easily identify real people. Consider a commute: Even without a name, how many phones travel between a specific home and specific office every day?

    This week’s revelations dredge up many questions about C.B.P.’s workflow: What precisely does the agency mean when it claims that the data is not ingested in bulk? Who in the agency gets to look at the data and for what purposes? Where is it stored? How long is it stored for? If the government plans to outsource the surveillance state to commercial entities to bypass Supreme Court rulings, both parties ought to be questioned under oath about the specifics of their practices.

    The use of location data to aid in deportations also demonstrates how out of date the notion of informed consent has become. When users accept the terms and conditions for various digital products, not only are they uninformed about how their data is gathered, they are also consenting to future uses that they could never predict.

    Without oversight, it is inconceivable that tactics turned against undocumented immigrants won’t eventually be turned to the enforcement of other laws. As the world has seen in the streets of Hong Kong, where protesters wear masks to avoid a network of government facial-recognition cameras, once a surveillance technology is widely deployed in a society it is almost impossible to uproot.

    Chief Justice Roberts outlined those stakes in his Carpenter ruling. “The retrospective quality of the data here gives police access to a category of information otherwise unknowable. In the past, attempts to reconstruct a person’s movements were limited by a dearth of records and the frailties of recollection. With access to [cellphone location data], the Government can now travel back in time to retrace a person’s whereabouts, subject only to the retention polices of the wireless carriers, which currently maintain records for up to five years. Critically, because location information is continually logged for all of the 400 million devices in the United States — not just those belonging to persons who might happen to come under investigation — this newfound tracking capacity runs against everyone.”

    The courts are a ponderous and imperfect venue for protecting Fourth Amendment rights in an age of rapid technological advancement. Exhibit A is the notion that the Carpenter ruling applies only to location data captured by cellphone towers and not to location data streamed from smartphone apps, which can produce nearly identical troves of information.

    For far, far too long, lawmakers have neglected their critical role in overseeing how these technologies are used. After all, concern about location tracking is bipartisan, as Republican and Democratic lawmakers told Times Opinion last year.

    “I am deeply concerned by reports that the Trump administration has been secretly collecting cellphone data — without warrants — to track the location of millions of people across the United States to target individuals for deportation,” Representative Carolyn Maloney, who leads the Oversight and Reform Committee, told The Times. “Such Orwellian government surveillance threatens the privacy of every American. The federal government should not have the unfettered ability to track us in our homes, at work, at the doctor or at church. The Oversight Committee plans to fully investigate this issue to ensure that Americans’ privacy is protected.”

    Surely, Congress has time to hold hearings about a matter of urgent concern to everyone who owns a smartphone or cares about the government using the most invasive corporate surveillance system ever devised against its own people.

    #Géolocalisation #DMP #Data_Brokers #Surveillance

  • Ces data-brokers qui font commerce de nos données personnelles | L’Atelier : Accelerating Innovation
    http://www.atelier.net/trends/articles/data-brokers-commerce-de-nos-donnees-personnelles_445345

    Faisant commerce de nos données personnelles, les sociétés de data brokers sont l’objet de tous les fantasmes. Pourtant il est nécessaire, à l’heure du tout numérique, de saisir les implications économiques, sociétales et humaines de ce business fleurissant, dont on ne sait finalement pas grand-chose.

    #données_personnelles #commercialisation #data_brokers

  • Comment les jeux se jouent-ils de nous ? Pokémon, économie des données et analyse comportementale | LINC
    http://linc.cnil.fr/comment-les-jeux-se-jouent-ils-de-nous-pokemon-economie-des-donnees-et-ana

    Les #applications peuvent tout d’abord permettre à leur éditeur d’obtenir des revenus par de la #publicité. Dans ce cadre, les #données_personnelles sont, comme toujours, au cœur des mécanismes de fixation des prix sur le marché publicitaire. Si la publicité est diffusée dans l’application, l’éditeur voudra indiquer aux annonceurs à quel prospect ils s’adressent, a minima avec des données sociodémographiques de base. Mais si l’éditeur veut générer davantage de revenus, il sera incité à collecter des #informations #comportementales ou #contextuelles, comme la #géolocalisation. Si la publicité n’est pas diffusée dans l’application, l’application sert souvent de prétexte à la collecte et à la revente de données sur un « marché secondaire » où coexistent des dizaines d’acteurs, des plateformes d’enchères en temps réel (le RTB) aux #data_brokers.

    Un autre modèle est celui du #freemium. L’accès au service de base est alors gratuit, mais pour une partie du service plus avancée, il faut s’acquitter d’un paiement, généralement d’un #abonnement. C’est par exemple le modèle choisi par les acteurs de la musique en streaming, tels que Deezer et Spotify, qui permettent la création d’un compte gratuit mais cherchent ensuite à faire avancer leurs utilisateurs vers l’abonnement. Là aussi, les données collectées jouent un rôle majeur : par la personnalisation de l’expérience et en particulier de la recommandation, le service cherche à créer de la satisfaction et de l’engagement.

    Dans le domaine du #jeu_vidéo, le modèle freemium se développe notamment via des #achats_in-app : niveaux supplémentaires, nouvelles options, bonus permettant d’avancer plus vite dans le jeu, voire simplement d’acheter le fait de gagner du temps. La mécanique du jeu change entièrement sous l’influence de ce modèle : pour gagner de l’argent, l’éditeur devra exploiter au mieux la disposition à payer de ses utilisateurs et donc évaluer une demande individuelle extrêmement contextuelle et éventuellement fugace. Comme nous l’expliquions dans notre cahier IP 3, le modèle « Free to play » requière donc « une micro-gestion dynamique de chaque joueur et de son expérience de jeu » (selon l’expression de Myriam Davidovici-Nora) pour être rentable. La fine compréhension des ressorts #psychologiques des joueurs est donc bien plus qu’auparavant un enjeu commercial : dans le monde du jeu vidéo, le #neuromarketing n’est plus vraiment une prédiction ou une hypothèse, c’est une réalité émergente.

    Cette réalité est décrite dans un article et une vidéo de Vox intitulé « How free games are designed to make money » (« comment les jeux gratuits sont-ils conçus pour faire de l’argent »). La réponse à cette question est à chercher du côté de la psychologie et de l’économie comportementales, dans la manière dont les jeux gratuits nous incitent à dépenser de l’argent (création d’un intermédiaire monétaire qui rend le calcul de la dépense plus compliqué, euphémisation de la dépense, et au contraire création d’une sensation de perte d’opportunités ou de frustration dans le déroulement du jeu, …). Au final, les développeurs sont incités à faire deux choses qui ne sont pas alignées avec les intérêts des joueurs : intégrer volontairement des éléments frustrants dans le jeu, et… collecter le plus de données possibles pour être en mesure de régler finement ce nudge (c’est-à-dire ces incitations à l’achat, ces frustrations, ces récompenses).

    http://zinc.mondediplo.net/messages/33944 via BoOz

  • Meet The Company That Tracks More Phones Than Google Or Facebook - Forbes
    http://www.forbes.com/sites/parmyolson/2013/10/30/meet-the-company-that-tracks-more-phones-than-google-or-facebook

    Then there’s #Flurry, which went from not even being in the ad business to occupying one of its most enviable positions. It recently launched a pair of real-time mobile ad exchanges, built over two years, that uniquely handle both demand and supply in the ad marketplace.

    “We have the data that glues them together,” says CEO Simon Khalaf

    #publicité

    More than 400,000 #apps now use the tool and, in return, funnel much of that user data back to Flurry.
    http://www.flurry.com/big-data.html
    Flurry thus has a pipe into more than 1.2 billion devices globally and is inside seven to ten apps per device. It continuously triangulates among them all, collecting on average 3 terabytes of #data each day.

    #big_data #tracking utilisé pour les #mobile_games notamment ; #data_broker #jeux_vidéo

    #Mobile phones don’t have cookies in their browsers, so Flurry’s analytics tool crowd-sources that data through apps instead. It encrypts and combines identifying bits of data to create an anonymous ID for each device, lumping them into one or more of 40 “personas” (psychographic profiles like “business traveler” and “sports fanatic”) that it edits every two weeks for each Flurry ID. Khalaf is aiming for up to 100 personas by the end of 2013. They won’t get more granular, he says, just “better” for advertisers.

    Fin de l’article sur les atteintes possibles à la #privacy, au regard de la (future) législation européenne. Où il est question de #lobbying à Bruxelles.

  • L’#industrie multimilliardaire de la surveillance
    The data hackers, by Pratap Chatterjee
    http://mondediplo.com/openpage/the-data-hackers
    http://www.tomdispatch.com/blog/175757

    “The challenge of managing information has become the challenge of managing the light” (Glimmerglass)

    Trois types d’entreprises font du #data-mining ou #DPI, autant de légions de la #silicon_army :

    – les services-gratuits-vous-le-produit
    – les #data_brokers
    – les entreprises spécialisées dans la surveillance

    [this] category is made up of professional #surveillance companies. They generally work for or sell their products to the government — in other words, they are paid with our tax dollars — but we have no control over them. Harris Corporation provides technology to the FBI to track, via our mobile phones, where we go; #Glimmerglass builds tools that the U.S. intelligence community can use to intercept our overseas calls; and companies like James Bimen Associates design software to hack into our computers.
    http://www.corpwatch.org/article.php?id=15665
    http://online.wsj.com/article/SB10001424053111904194604576583112723197574.html
    http://www.glimmerglass.com/products/intelligent-optical-systems
    http://www.corpwatch.org/article.php?id=15864

    Glimmerglass donc, dont certaines technologies (“210 tiny gold-coated mirrors mounted on microscopic hinges etched on to a single wafer of silicon. It can help transmit data as beams of light across the undersea fiber optic cables”) permettent de surveiller l’#internet_traffic qui transite par les #câbles_sous-marins :
    http://www.wikileaks.org/spyfiles/docs/glimmerglass/55_glimmerglass-cybersweep.html

    Pour les communications via #mobile :

    The simplest form of surveillance technology is an IMSI catcher. (IMSI stands for International Mobile Subscriber Identity, which is unique to every mobile phone.) (...) One of the key players in this field is the Melbourne, Florida-based Harris Corporation, which has been awarded almost $7 million in public contracts by the Federal Bureau of Investigation (#FBI) since 2001, mostly for radio communication equipment. For years, the company has also designed software for the agency’s National Crime Information Center to track missing persons, fugitives, criminals, and stolen property.

    Harris was recently revealed to have designed an IMSI catcher for the FBI that the company named “Stingray.” Court testimony by FBI agents has confirmed the existence of the devices dating back to at least 2002. Other companies like James Bimen Associates of Virginia have allegedly designed custom software to help the FBI hack into people’s computers, according to research by Chris Soghoian of the American Civil Liberties Union (ACLU).

    SS8 of Milpitas, California, sells software called #Intellego that claims to allow government agencies to “see what [the targets] see, in real time”

    Cf. http://seenthis.net/messages/176446

    Take #Raytheon, a major U.S. military manufacturer, which makes Sidewinder air-to-air missiles, Maverick air-to-ground missiles, Patriot surface-to-air missiles, and Tomahawk submarine-launched cruise missiles.
    [en vidéo] http://www.theguardian.com/world/video/2013/feb/10/raytheon-software-tracks-online-video

  • Des nouvelles d’Acxiom, le #data_broker qui se la joue transparent
    http://seenthis.net/messages/77164

    Acxiom Lets Consumers See Data It Collects - NYTimes.com
    http://www.nytimes.com/2013/09/05/technology/acxiom-lets-consumers-see-data-it-collects.html

    But mostly critics faulted the site for promoting data-driven marketing without explicitly describing some of Acxiom’s more sophisticated consumer-tracking techniques. In marketing materials, for instance, #Acxiom describes one of its products, called AbiliTec Digital, as a data-powered “customer recognition” service that helps companies link a customer’s history with his or her name, nickname, e-mail address, home address, and mobile and landline phone numbers.

    #marketing #privacy #data-mining (fausse) #transparence

    • Acxiom to create ‘master profiles’ tying offline and online data
      September 23, 2013 #paywall
      http://www.ft.com/intl/cms/s/0/151d940e-2431-11e3-8905-00144feab7de.html

      Acxiom is now offering a system that does not rely on cookies, which are both widely used and controversial. Instead, Acxiom is creating a new identifier that will match profiles about an individual regardless of the device.

      Other data brokers have been racing in the same direction. Datalogix, which tracks shopping activities, works with Facebook and Twitter to help the social networks bridge people’s activities online and away from the screen.

      The Acxiom system is different as it does not use cookies and allows any of its clients to access master profiles about consumers that can be used to personalise and target ads across multiple devices and services.

  • Everything We Know About What Data Brokers Know About You - ProPublica
    https://www.propublica.org/article/everything-we-know-about-what-data-brokers-know-about-you

    many people still don’t even know that #data_brokers exist. [we do https://fluxetfixe.wordpress.com/2012/10/20/data-brokers #shameless ]

    Here’s a look at what we know about the consumer data industry.

    How much do these companies know about individual people?
    Where are they getting all this info?
    Where else do data brokers get information about me?
    Are there limits to the kinds of data these companies can buy and sell?

    etc.

    #data-mining