US Government fines Verizon for illicit ‘supercookie’ use

Verizon faces a $1.35m fine over the use of its 'supercookie', which the US Government has said the company used to track mobile phone customers’ internet browsing habits without their consent. The ruling also means that from now on, Verizon will have to seek permission from its customers before it can pursue certain kinds of tracking. The term supercookie has been used as they are virtually impossible to block; Verizon uses these types of cookies to deliver targeted advertisements to mobile phone customers. The case against Verizon has revealed that the company began using supercookies in December 2012, but didn’t disclose their use until almost two years later. It wasn’t until March 2015 that the company updated its privacy policy, providing customers with the option to opt out from supercookie usage.

NEW YORK (AP) — Verizon will pay a $1.35 million fine over its "supercookie" that the government said followed phone customers on the Internet without their permission. Verizon will also have to get an explicit "yes" from customers for some kinds of tracking.

NEW YORK (AP) — Verizon will pay a $1.35 million fine over its "supercookie" that the government said tracked phone customers' internet browsing habits without their permission.

Verizon will also now have to get an explicit "yes" from customers for some kinds of tracking.

The supercookies landed their name because they were hard, or near-impossible, to block. Verizon uses them to deliver targeted ads to cellphone customers. The company wants to expand its advertising and media business and bought AOL for its digital ad technology in 2015.

The Federal Communications Commission said Monday that it found that Verizon began using the supercookies with consumers in December 2012, but didn't disclose the program until October 2014. Verizon updated its privacy policy to disclose the trackers in March 2015 and gave people an option then to opt out.

When the supercookies became public knowledge, they were the subject of heavy criticism. "Verizon users might want to start looking for another provider," wrote Jacob Hoffman-Andrews for advocacy group the EFF in November 2014. "[Supercookies allow] third-party advertisers and websites to assemble a deep, permanent profile of visitors' web browsing habits without their consent.

The FCC settlement says consumers now must opt in to letting Verizon share data with third parties. But for data-collection and sharing within Verizon itself, the company can choose to have customers either opt in or automatically do it and give consumers the option to stop it, a less stringent requirement.

The New York company has already changed some practices that critics considered most invasive. In an emailed statement, the company said that the FCC settlement recognizes that it had already made adjustments to its ad programs that give consumers more choices.

Nate Cardozo, a staff attorney at the Electronic Frontier Foundation, a privacy watchdog that had been critical of the supercookies, said the settlement was an "unqualified win" for consumers. "Today's order will mean that other companies contemplating similar involuntary tracking will think twice before proceeding without explicit consumer consent," he wrote in an email.

Here's the full order from the FCC: