Israeli sites weak on protecting privacy

A study on the Internet in Israel shows that most Web sites, whether run by government or by companies, collect personal information on you - but neglect to protect your privacy. It's also easy to assume a false identity online, say Dr. Michael Birnhack of Tel Aviv University and Prof. Niva Elkin-Koren of the University of Haifa.

There are laws to protect the surfer, yet neither commercial nor government Web sites obey them scrupulously. Especially popular sites and more "sensitive" ones do a relatively better job in this respect, the researchers found.

Privacy is considered a basic right in Israel. But that doesn't mean those managing the sites are doing much about it. For example, a pizza parlor may record your address and credit card number, and will note whether you prefer olives or eggplant on your pie. Your health maintenance organization knows which doctors you consult. A dating site may know whether you prefer blondes or brunettes. And any of the above sources could pass on your information to telemarketers. As for the state, it already knows pretty much everything about you, but will ask for more.

Birnhack and Elkin-Koren looked at the statements of privacy posted on various sites, checked legal compliance and tried to discern whether the sites took steps beyond those mandated by law. They also examined whether the sites asked for sensitive information as a condition for access, and whether they could be "fooled" by false information.

The researchers found that 86% of the popular sites demand that the user identify himself, as did 94% of so-called sensitive sites. Half of the sites in both groups demanded even more information, which the researchers say attests to the vulnerability of surfers to commercial elements.

Many sites don't warn that they're collecting information, though the law requires them to do so. Out of 232 government or public sites, only 50 bore the warning, and most didn't do so adequately. The rest simply break the law.

A majority of popular sites (69%) and 55% of commercial sites reserve the right to change privacy policy.

The law requires sites to state what purpose the information they collect will serve; legally, it is not supposed to serve any other purpose. Among popular sites 61% said the information would serve to keep in touch with the surfer. As for the rest, well, you can never know.