Policy

More bad news for Big Tech: Lina Khan’s a privacy hawk, too

The incoming agency chair once likened widespread data collection to environmental pollution. What can she do about it now?

FTC chair Lina Khan

FTC chair Lina Khan's privacy views may be bad for Big Tech.

Photo: Saul Loeb-Pool/Getty Images

In December 2019, a Columbia Law School fellow named Lina Khan co-authored an article in the Harvard Law Review comparing social media executives to used-car salesmen.

In it, Khan and her co-author, Columbia Law professor David Pozen, dismissed as "implausible" the idea that a company like Facebook or Google, which makes its money from personalized ads, could ever truly put its users' privacy first.

"As long as such companies make most of their money through personally targeted advertisements, they will be economically motivated to extract as much data from their users as they can," they wrote, "a motivation that runs headfirst into users' privacy interests as well as any interests users might have in exercising behavioral autonomy or ensuring that their personal data is not stolen, sold, mined, or otherwise monetized down the line."

The article was a full-throated condemnation of the very business model that dominates the web and a call for regulation that would actually force tech companies to protect users' privacy. "By and large, addictive user behavior is good for business. Divisive and inflammatory content is good for business. Deterioration of privacy and confidentiality norms is good for business," the article reads.

Now, as she takes over as chair of the Federal Trade Commission, it's a critique Khan might be able to translate into action.

Ever since Khan was first nominated to the FTC, another piece of her writing, in which she built a novel antitrust case against Amazon, has been cited endlessly as evidence that she'll be coming for the ecommerce giant (Disclosure: I'm married to an Amazon employee). That speculation only increased after Sen. Amy Klobuchar unceremoniously let slip that Khan would not only join the commission, but also lead it. But while Khan built her name on competition policy, her writing on online ads deserves its own close read. It offers insights into how Khan thinks about online privacy just as she prepares to become one of the country's chief privacy enforcers.

Paging Dr. Zuckerberg

While Khan might not describe herself as a privacy scholar per se, Pozen, her co-author on the privacy article, said that Khan's views on personalized advertising are a natural outgrowth of her views on competition. She is, after all, is best known for pushing the theory that pricing isn't the only metric for measuring the harm monopolies can do to consumers. There are other harms, like, for instance, privacy violations. "Lina has emphasized the point that there are a much broader set of potential harms from companies getting so powerful that can't be captured by their monetary prices," Pozen said, noting that ad-funded businesses are often cheap or even free, "but that very same model also creates an obvious and massive privacy concern."

The 2019 article grapples with an increasingly popular concept in privacy law that proposes turning tech companies into "information fiduciaries." Just as these companies have a fiduciary duty to maximize profits for their shareholders, the thinking goes, they could also be required to be fiduciaries — which is to say, legally-bound stewards — of user data.

The idea has been floated in privacy legislation at the state and national level — and Khan and Pozen more or less rip it to shreds.

The enormously successful business of behavioral ads, they argue, is so at odds with user privacy that a company like Facebook could never truly uphold its duty to shareholders while also upholding its duty to user privacy. In a world in which information fiduciaries existed, Khan and Pozen argue, user privacy would still come second, rendering the duty meaningless. "The social media executive who is exhorted to treat users well [...] yet not required to place users' interests first resembles, instead, the used-car dealers and restaurateurs who are classic examples in the case law of service providers who are not ordinarily fiduciaries for their customers," the article reads.

Proponents of information fiduciaries often point to the fact that doctors are bound by certain duties of care for their patients in order to suggest that the same concept could be applied to tech. But once again, Khan and Pozen show how that idea would border on ridiculous if doctors also made all their money on ads.

"Imagine visiting a doctor — let's call her Marta Zuckerberg — whose main source of income is enabling third parties to market you goods and services," they write. In Khan and Pozen's telling, this Dr. Zuckerberg flings ads for pills and procedures at patients based on their demographic, economic and psychological profiles, and gets paid every time patients even look in their direction.

"They are also continually updated in light of information Dr. Zuckerberg collects on you; to be sure she does not miss anything, she has planted surveillance devices all around your neighborhood as well as her office," Khan and Pozen write, asking ominously whether this system could "plausibly be reconciled with a commitment to prioritizing your health?"

To Chris Hoofnagle, faculty director at Berkeley Center for Law & Technology and author of a book on the FTC, this line of thinking is precisely what differentiates Khan from other regulators and lawyers. "Most attorneys are basically snowed by business people. The business people come in and say: 'This is how the tech works.' Most lawyers can only nod along," Hoofnagle said. "Khan is a realist and has spent a lot of time studying the business models of these different companies."

Cleaning house and writing rules

The article goes so far as to liken abuse of user data to environmental pollution and calls for "clear prohibitions and economic disincentives, rather than morally laden standards" to deal with that pollution. The question now is what Khan can do about any of that as chair.

While the chair of the FTC has more power than individual commissioners, Khan still won't be able unilaterally to bring a case against individual tech companies, a decision that falls to FTC staff. But she will have the power to staff the FTC with people who share her outlook on both competition and online privacy.

"The cases the attorneys get to work on, the topics the attorneys explore, what cases make it and don't in terms of getting dropped or getting pursued, all of those decisions are made by the bureau heads," said Ashkan Soltani, former chief technologist for the FTC. "Who the chair chooses to install as the bureau chiefs will have a huge implication on the approach the agency takes moving forward."

Soltani said while the FTC has suffered from lack of funding and authority, part of its inaction in recent years has had to do with inertia among the never-changing staff. Some inside the agency, he said, refer to themselves as the "webes" as in "we be here," while individual chairs cycle in and out. One of the most significant changes Khan could make, Soltani said, is to "clean house."

"She has congressional backing on a lot of this stuff," he said, noting that she was confirmed to the commission with bipartisan support. "That essentially would permit her to say: 'I think Congress is looking for a refresh.'" He also encouraged Khan to elevate the office of chief technologist, his former role, enabling the chief technologist to consult on enforcement cases in the same way the Bureau of Economics currently does.

Another important change, Hoofnagle said, would be to develop a new basic internet privacy rule. The FTC, which has rule-making authority, already has rules regarding children's online privacy and financial privacy, which give the FTC the ability to seek damages from violators. "The FTC could pass a rule that says: If you materially mislead a consumer through third-party information sharing, it is an unfair practice, and violators of that rule would have to pay money damages," Hoffnagle said.

Former acting chair Rebecca Slaughter already signaled her interest in reinvigorating rule-making within the FTC by forming a new rule-making group earlier this year. "I believe that we can and must use our rule-making authority to deliver effective deterrence for the novel harms of the digital economy and persistent old scams alike," Slaughter said at the time.

Slaughter and Khan also have some overlap in how they see the connection between competition and privacy, two issues that the FTC has authority over, but which are often handled along different tracks. Khan and Pozen clearly considered this dynamic in their article on online ads, writing that "antitrust lawsuits reversing key acquisitions and penalizing forms of monopoly" are one possible remedy.

Khan and Pozen also wrote about imposing interoperability requirements on tech platforms, arguing that if consumers could take their data and go to a competitor, "a platform that perennially violated users' privacy would likely lose ground to more privacy-conscious rivals."

Both Soltani and Hoofnagle said the FTC would be well-served by encouraging more coordination between the Bureau of Competition and the Bureau of Consumer Protection.

Ultimately, though, one of the biggest tools Khan will have as chair is the power to use the bully pulpit to communicate these concerns both to Congress and to industry. Slaughter used her limited time as acting chair to ask Congress for additional funding and authority for the FTC and to issue a warning to tech companies that selling or using biased AI could violate the agency's prohibition on deceptive or misleading practices. As chair, Khan could issue much the same sort of guidance on deceptive data practices and send a message about how the FTC plans to pursue such cases in the future.

"There's enforcement, which is entering new cases," Soltani said, "but there's also the soft regulatory dance that's done with industry and regulators about what industry is planning and how regulators will receive those plans."

LA is a growing tech hub. But not everyone may fit.

LA has a housing crisis similar to Silicon Valley’s. And single-family-zoning laws are mostly to blame.

As the number of tech companies in the region grows, so does the number of tech workers, whose high salaries put them at an advantage in both LA's renting and buying markets.

Photo: Nat Rubio-Licht/Protocol

LA’s tech scene is on the rise. The number of unicorn companies in Los Angeles is growing, and the city has become the third-largest startup ecosystem nationally behind the Bay Area and New York with more than 4,000 VC-backed startups in industries ranging from aerospace to creators. As the number of tech companies in the region grows, so does the number of tech workers. The city is quickly becoming more and more like Silicon Valley — a new startup and a dozen tech workers on every corner and companies like Google, Netflix, and Twitter setting up offices there.

But with growth comes growing pains. Los Angeles, especially the burgeoning Silicon Beach area — which includes Santa Monica, Venice, and Marina del Rey — shares something in common with its namesake Silicon Valley: a severe lack of housing.

Keep Reading Show less
Nat Rubio-Licht

Nat Rubio-Licht is a Los Angeles-based news writer at Protocol. They graduated from Syracuse University with a degree in newspaper and online journalism in May 2020. Prior to joining the team, they worked at the Los Angeles Business Journal as a technology and aerospace reporter.

While there remains debate among economists about whether we are officially in a full-blown recession, the signs are certainly there. Like most executives right now, the outlook concerns me.

In any case, businesses aren’t waiting for the official pronouncement. They’re already bracing for impact as U.S. inflation and interest rates soar. Inflation peaked at 9.1% in June 2022 — the highest increase since November 1981 — and the Federal Reserve is targeting an interest rate of 3% by the end of this year.

Keep Reading Show less
Nancy Sansom

Nancy Sansom is the Chief Marketing Officer for Versapay, the leader in Collaborative AR. In this role, she leads marketing, demand generation, product marketing, partner marketing, events, brand, content marketing and communications. She has more than 20 years of experience running successful product and marketing organizations in high-growth software companies focused on HCM and financial technology. Prior to joining Versapay, Nancy served on the senior leadership teams at PlanSource, Benefitfocus and PeopleMatter.

Policy

SFPD can now surveil a private camera network funded by Ripple chair

The San Francisco Board of Supervisors approved a policy that the ACLU and EFF argue will further criminalize marginalized groups.

SFPD will be able to temporarily tap into private surveillance networks in certain circumstances.

Photo: Justin Sullivan/Getty Images

Ripple chairman and co-founder Chris Larsen has been funding a network of security cameras throughout San Francisco for a decade. Now, the city has given its police department the green light to monitor the feeds from those cameras — and any other private surveillance devices in the city — in real time, whether or not a crime has been committed.

This week, San Francisco’s Board of Supervisors approved a controversial plan to allow SFPD to temporarily tap into private surveillance networks during life-threatening emergencies, large events, and in the course of criminal investigations, including investigations of misdemeanors. The decision came despite fervent opposition from groups, including the ACLU of Northern California and the Electronic Frontier Foundation, which say the police department’s new authority will be misused against protesters and marginalized groups in a city that has been a bastion for both.

Keep Reading Show less
Issie Lapowsky

Issie Lapowsky ( @issielapowsky) is Protocol's chief correspondent, covering the intersection of technology, politics, and national affairs. She also oversees Protocol's fellowship program. Previously, she was a senior writer at Wired, where she covered the 2016 election and the Facebook beat in its aftermath. Prior to that, Issie worked as a staff writer for Inc. magazine, writing about small business and entrepreneurship. She has also worked as an on-air contributor for CBS News and taught a graduate-level course at New York University's Center for Publishing on how tech giants have affected publishing.

Enterprise

These two AWS vets think they can finally solve enterprise blockchain

Vendia, founded by Tim Wagner and Shruthi Rao, wants to help companies build real-time, decentralized data applications. Its product allows enterprises to more easily share code and data across clouds, regions, companies, accounts, and technology stacks.

“We have this thesis here: Cloud was always the missing ingredient in blockchain, and Vendia added it in,” Wagner (right) told Protocol of his and Shruthi Rao's company.

Photo: Vendia

The promise of an enterprise blockchain was not lost on CIOs — the idea that a database or an API could keep corporate data consistent with their business partners, be it their upstream supply chains, downstream logistics, or financial partners.

But while it was one of the most anticipated and hyped technologies in recent memory, blockchain also has been one of the most failed technologies in terms of enterprise pilots and implementations, according to Vendia CEO Tim Wagner.

Keep Reading Show less
Donna Goodison

Donna Goodison (@dgoodison) is Protocol's senior reporter focusing on enterprise infrastructure technology, from the 'Big 3' cloud computing providers to data centers. She previously covered the public cloud at CRN after 15 years as a business reporter for the Boston Herald. Based in Massachusetts, she also has worked as a Boston Globe freelancer, business reporter at the Boston Business Journal and real estate reporter at Banker & Tradesman after toiling at weekly newspapers.

Fintech

Kraken's CEO got tired of being in finance

Jesse Powell tells Protocol the bureaucratic obligations of running a financial services business contributed to his decision to step back from his role as CEO of one of the world’s largest crypto exchanges.

Photo: David Paul Morris/Bloomberg via Getty Images

Kraken is going through a major leadership change after what has been a tough year for the crypto powerhouse, and for departing CEO Jesse Powell.

The crypto market is still struggling to recover from a major crash, although Kraken appears to have navigated the crisis better than other rivals. Despite his exchange’s apparent success, Powell found himself in the hot seat over allegations published in The New York Times that he made insensitive comments on gender and race that sparked heated conversations within the company.

Keep Reading Show less
Benjamin Pimentel

Benjamin Pimentel ( @benpimentel) covers crypto and fintech from San Francisco. He has reported on many of the biggest tech stories over the past 20 years for the San Francisco Chronicle, Dow Jones MarketWatch and Business Insider, from the dot-com crash, the rise of cloud computing, social networking and AI to the impact of the Great Recession and the COVID crisis on Silicon Valley and beyond. He can be reached at bpimentel@protocol.com or via Google Voice at (925) 307-9342.

Latest Stories
Bulletins