FROM: U.S. FEDERAL TRADE COMMISSION
Retail Tracking Firm Settles FTC Charges it Misled Consumers About Opt Out Choices
Company Falsely Promised an In-Store Opt Out, Agency Alleges
Nomi Technologies, a company whose technology allows retailers to track consumers’ movements through their stores, has agreed to settle Federal Trade Commission charges that it misled consumers with promises that it would provide an in-store mechanism for consumers to opt out of tracking and that consumers would be informed when locations were using Nomi’s tracking services.
The complaint alleges that Nomi collected information on about nine million mobile devices within the first nine months of 2013. The complaint is the FTC’s first against a retail tracking company.
“It’s vital that companies keep their privacy promises to consumers when working with emerging technologies, just as it is in any other context,” said Jessica Rich, Director of the FTC’s Bureau of Consumer Protection. “If you tell a consumer that they will have choices about their privacy, you should make sure all of those choices are actually available to them.”
Nomi, according to the complaint, places sensors in its clients’ stores that collect the MAC addresses of consumers’ mobile devices as the devices search for WiFi networks. MAC addresses are unique 12-digit identifiers that are assigned to individual mobile devices. Although Nomi “hashes” the MAC addresses prior to storing them, the hashing process still results in an identifier that is unique to a consumer’s mobile device and can be tracked over time.
The complaint alleges that Nomi tracked consumers both inside and outside their clients’ stores, tracking the MAC address, device type, date and time the device was observed, and signal strength of consumers’ devices. In reports to clients, Nomi provided aggregated information on how many consumers passed by the store instead of entering, how long consumers stayed in the store, the types of devices used by consumers, how many repeat customers enter a store in a given period and how many customers had visited another location in a particular chain of stores.
Under the terms of the settlement with the FTC, Nomi will be prohibited from misrepresenting consumers’ options for controlling whether information is collected, used, disclosed or shared about them or their computers or other devices, as well as the extent to which consumers will be notified about information practices.