IBM's Weather Company leaked my personal info to analytics, thunders netizen

A lawsuit brought against IBM's Weather Company claims the website "knowingly and willfully disclosed its users' personally identifiable information - including a record of every video viewed by the user - to unrelated third parties, mParticle and AdNexus," now known as Microsoft's Xandr.

The complaint [PDF], filed in June in a federal district court in New York City, was amended this week to address deficiencies in the original filing. It alleges violations of the Video Privacy Protection Act (VPPA), of the Maryland Wiretapping And Electronic Surveillance Act, and unjust enrichment.

Plaintiff Lisa Addi, a resident of Maryland, claims that when visiting in May and June, her "full name, gender, e-mail address, precise geolocation, the name of the videos she watched, and the URLs of videos she watched - which listed the name of the video - were disclosed by [IBM's Weather Company] to third parties, mParticle and AdNexus/Xandr."

This is the basis for the alleged violation of the VPPA, passed in 1988 after Supreme Court nominee Robert Bork's video rental history was published. Congress has yet to enact a comprehensive federal privacy law and so many recent online privacy claims have sought redress under the VPPA, for lack of options.

According to the National Law Review, there were at least 70 VPPA violations alleged last year against websites that offer online videos and use third-party tracking and analytics tools. Some of these cases have been dismissed, others have not.

A federal case in New York, Martin v. Meredith Corporation et al, involving website data collection via Facebook Pixel was dismissed earlier this year because the video title was not disclosed - a necessary element for a VPPA claim. Thus, Addi's lawsuit explicitly states that URLs passed to IBM's analytics partners included the name of the video viewed.

The complaint against IBM also asserts this information was "intercepted in real time" by the third-party ad firms, forming the basis of the wiretapping claim.

A 2022 decision by the US Ninth Circuit Court of Appeals in Javier v. Assurance IQ, LLC and ActiveProspect Inc. [PDF] held that certain uses of online tracking technology without prior consent may violate California's wiretapping laws.

Whether that applies to Maryland law remains to be seen. In 2021, a Florida court said in Jacome v. Spirit Airlines that the Florida Security of Communications Act doesn't apply to session replay software used for website analytics.

The complaint against IBM, which announced the sale of the Weather Company in August, says that the law firm representing Addi hired a private research company to review the website and its data transmission. The firm claims to have observed that mParticle receives: Video Name, URL, Playlist, Geolocation, Gender, Name, and Advertising ID. And AdNexus/Xandr is said to receive the same but without the URL or Playlist.

mParticle, and Microsoft did not immediately respond to requests for comment.

An IBM spokesperson told The Register, "The Weather Company is fully committed to user privacy. We comply with all applicable privacy laws and regulations, and monitor upcoming ones to help ensure compliance. We are transparent about how we collect and use data in order to provide our services, and we provide users with this information in our Privacy Policy, privacy settings and notices on our apps and websites."

The sale of the Weather Company is expected to close by the end of Q1 2024. ®

About Us
Website HardCracked provides softwares, patches, cracks and keygens. If you have software or keygens to share, feel free to submit it to us here. Also you may contact us if you have software that needs to be removed from our website. Thanks for use our service!
IT News
Dec 4
Linus Torvalds flags holiday-mode changes to next kernel merge window

Penguin emperor ponders whether kernel contributors will code across the festive season, or humbug it

Dec 4
Creating a single AI-generated image needs as much power as charging your smartphone

AI in brief PLUS: Microsoft to invest £2.5B in UK datacenters to power AI, and more

Dec 2
Law secretly drafted by ChatGPT makes it onto the books

'Unfortunately or fortunately, this is going to be a trend'

Dec 2
HPE says impact of AI on enterprise not 'overstated.' It must be hoping so

HPE Discover EMEA Company counting on widespread business adoption to counter server declines

Dec 1
Boehringer Ingelheim swaps lab coats for AI algorithms in search for new drugs

Mixing IBM's foundation models and proprietary data to discover novel antibodies

Dec 1
Health crusaders prep legal challenge over NHS mega contract with Palantir

Groups claim Federated Data Platform requires new legislation to go ahead

Dec 1
Cinnamon and KDE sync version numbers in desktop sibling rivalry

Expect the former in a Linux Mint point release later this year