advertisement
advertisement

This is page 2 of:

Would You Like Spam With That?

November 28th, 2012

Of course, there are serious problems with the way the Alabama court looked at this case. If I were a retailer, I would not rely too heavily on the court’s conclusions.

Express consent means exactly what it says and does: that a consumer has expressly consented to receiving communications substantially in the form of and in the nature in which they are sent. Obviously, if consumers give out their phone numbers to a retailer, and the retailer later calls those consumers for purposes for which they gave that phone number, that is not an unsolicited communication.

So, for example, if Walmart were to call Stephanie and tell her that her prescription was ready or follow up on information about the prescription, clearly Stephanie would have consented to this communication by giving out her telephone number. Similarly, other telephone communications related to the transaction for which Stephanie gave her phone number (and possibly even an SMS message saying something like “your prescription is ready”) could, under the definition of consent in both the statute and the regulations, be acceptable.

But for consent to be express, consumers need to be given an opportunity to know, in a meaningful way, exactly what it is they are consenting to. This is where the Alabama court gets it wrong and the Washington state court, at least at the outset, seems to get it right.

Consent, like privacy itself, is not binary. It’s not like you either have privacy or you don’t. It’s not like you either give consent or you don’t. You consent to providing certain information to certain people for certain purposes. Sometimes it is obvious; other times it is not. A lot of it is determined by the circumstances. For retailers, if they want express consent to use someone’s telephone number to send that person text messages, the best approach is that taken by almost every retailer: Tell the consumer what you’re doing.

The law does not require that the consent be in writing, through a click wrap agreement, or in a particular form or format. Merely that it be express. But the fact that the law requires express consent means that we—retailers—cannot rely on the implied consent. Consumers actually have to know what they are consenting to, and they actually have to agree to it.

I seriously doubt that a reasonable consumer was asked to provide his or her telephone number to a pharmacy as either expressly given or even implied consent to receiving text messages on unrelated matters. Even though a phone is capable of receiving both text messages and telephone calls through the same telephone number, they are different forms of communication. (If you provide your home address for someone to mail you a catalog, it does not imply consent for door-to-door salespeople to come into your home—even though it’s the same address.)

Consumers frequently pay their telephone providers separately for voice communications and for text messages. Under the Walmart rationale, once I have your phone number, I could send you hundreds or thousands of text messages, increasing your phone bill by hundreds of dollars, simply because you wanted a prescription. Not only is that a bad marketing practice, but it is exactly the type of thing that the telephone consumer protection act was designed to prevent.

The take away here is not that Walmart was able to win in the district court. Rather, that the best approach is to respect the privacy of your customers. When you collect personal information of any type from them, treat them with respect; use the information only for the purposes for which it was collected and, most importantly, have a commitment to transparency, openness and obtaining consent.

If you disagree with me, I’ll see you in court, buddy. If you agree with me, however, I would love to hear from you.


advertisement

One Comment | Read Would You Like Spam With That?

  1. Felix Lee Says:

    Consent to one thing is not tantamount to consent to other things, especially not spam. These companies just want to circumvent the law and make excuses for their actions. They shouldn’t be permitted to do this when what they’re actually doing is harassing customers.

Newsletters

StorefrontBacktalk delivers the latest retail technology news & analysis. Join more than 60,000 retail IT leaders who subscribe to our free weekly email. Sign up today!
advertisement

Most Recent Comments

Why Did Gonzales Hackers Like European Cards So Much Better?

I am still unclear about the core point here-- why higher value of European cards. Supply and demand, yes, makes sense. But the fact that the cards were chip and pin (EMV) should make them less valuable because that demonstrably reduces the ability to use them fraudulently. Did the author mean that the chip and pin cards could be used in a country where EMV is not implemented--the US--and this mis-match make it easier to us them since the issuing banks may not have as robust anti-fraud controls as non-EMV banks because they assumed EMV would do the fraud prevention for them Read more...
Two possible reasons that I can think of and have seen in the past - 1) Cards issued by European banks when used online cross border don't usually support AVS checks. So, when a European card is used with a billing address that's in the US, an ecom merchant wouldn't necessarily know that the shipping zip code doesn't match the billing code. 2) Also, in offline chip countries the card determines whether or not a transaction is approved, not the issuer. In my experience, European issuers haven't developed the same checks on authorization requests as US issuers. So, these cards might be more valuable because they are more likely to get approved. Read more...
A smart card slot in terminals doesn't mean there is a reader or that the reader is activated. Then, activated reader or not, the U.S. processors don't have apps certified or ready to load into those terminals to accept and process smart card transactions just yet. Don't get your card(t) before the terminal (horse). Read more...
The marketplace does speak. More fraud capacity translates to higher value for the stolen data. Because nearly 100% of all US transactions are authorized online in real time, we have less fraud regardless of whether the card is Magstripe only or chip and PIn. Hence, $10 prices for US cards vs $25 for the European counterparts. Read more...
@David True. The European cards have both an EMV chip AND a mag stripe. Europeans may generally use the chip for their transactions, but the insecure stripe remains vulnerable to skimming, whether it be from a false front on an ATM or a dishonest waiter with a handheld skimmer. If their stripe is skimmed, the track data can still be cloned and used fraudulently in the United States. If European banks only detect fraud from 9-5 GMT, that might explain why American criminals prefer them over American bank issued cards, who have fraud detection in place 24x7. Read more...

StorefrontBacktalk
Our apologies. Due to legal and security copyright issues, we can't facilitate the printing of Premium Content. If you absolutely need a hard copy, please contact customer service.