News
News
3/23/2006
02:40 PM
50%
50%

Spitzer Alleges Firm Fraudulently Sold Personal Data From Millions

New York Attorney General Eliot Spitzer is suing a company for allegedly selling the personal information of millions of consumers, despite "explicit" promises to the contrary.

New York Attorney General Eliot Spitzer on Thursday sued a Washington, D.C., company for allegedly selling the personal information of millions of consumers. Prosecutors called it the largest deliberate breach of privacy in Internet history.

Gratis Internet Inc. and its owners Peter Martin and Robert Jewell were named in the suit filed in New York State Supreme Court. The defendants are accused of selling lists of millions of Gratis customers to three independent email marketers, despite explicit promises that no personal information would be given to anyone. The suit seeks a court injunction preventing the company from further sales, and seeks penalties under New York's consumer fraud statutes.

The suit stems from an investigation Spitzer launched last year of companies involved in the compilation and sale of marketing lists. Gratis collected customer information on several of its Web sites in exchange for free products, generally received through free trials of other products. The Gratis sites included FreeiPods.com, FreeCDs.com, FreeDVDs.com and FreeVideoGame.com.

From 2000 to 2004, Gratis posted on its Web sites several statements claiming to protect personal information, including one that said, "We well never give out, sell, or lend your name or information to anyone," Spitzer said.

Nevertheless, during 2004 and 2005, Martin and Jewell repeatedly violated those promises by selling customer lists to marketers, who then sent hundreds of millions of email solicitations on behalf of their own cutomers, Spitzer said. In each deal, Gratis shared between 1 million and 7 million confidential user records.

"This is believed to be the largest deliberate breach of a privacy policy ever discovered by U.S. law enforcement," Spitzer said in a statement.

The suit also alleges that Gratis falsely denied such data sharing had occurred. In a written response to Spitzer's investigation, Gratis claimed that "at all times during its existence . . . Gratis has never sold, rented, or lent email addresses or personal information of its users to any third-party and the company has always maintained control over and ownership of such information."

In the suit, Spitzer cites specific data-sharing contracts, as well as testimony and other evidence provided by Internet marketers that did business with Gratis.

Privacy advocates quoted in Spitzer's statement announcing the suit, praised the actions by the attorney general.

"Without strong enforcement, privacy policies are meaningless," Marc Rotenberg, the executive director of the Electronic Privacy Information Center in Washington D.C., said.

Beth Givens, director of the Privacy Rights Clearinghouse, said the suit sends the message that "Deception doesn't pay."

Comment  | 
Print  | 
More Insights
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Tech Digest, Nov. 10, 2014
Just 30% of respondents to our new survey say their companies are very or extremely effective at identifying critical data and analyzing it to make decisions, down from 42% in 2013. What gives?
Video
Slideshows
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
Join us for a roundup of the top stories on InformationWeek.com for the week of November 16, 2014.
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.