Shanley bill would give internet users a `Right to Know'

Representative Evan Shanley said he and his father became a little disturbed after his father began seeing more golf-related advertising whenever he was online. He’d been reading a lot about golf lately and figured he was being tracked.

In addition, President Donald Trump recently signed a bill that would allow Internet Service Providers (ISPs) to sell user data, including browser history, to advertisers. Shanley said he was surprised the bill made it past both houses and to the President’s desk, especially after seeing polls that showed even a large amount of Republicans were against Trump’s signing of the bill. The fact that he "abandoned the idea that he's looking out for the little guy,” Shanley said.

“I don't see how this is a win for Trump or how he's helping his constituents or the general public,” he said.

In response, Shanley drafted the “Right to Know Act” (H 6087) which aims to protect Rhode Islanders from “disclosure of personally identifiable information through the Internet by operators of commercial websites or online services and would create a right of action for any operator violations.”

The legislation says that businesses are now collecting personal information and “sharing and selling it in ways not contemplated or properly covered by the current law.” It also states that some websites install tracking tools that record user visits to web pages and share information like age, gender, race, income, health concerns, religion, and recent purchases with third-party marketers and data brokers.

It doesn’t end with websites either, the bill says: Some mobile applications may also be sharing personal information like locations, phone numbers, age, gender, and other personal details with these third-party companies.

Under Shanley’s bill, operators of commercial sites that collect this type of information would have to let users know, free of charge, all types of personal information that are disclosed and the names of all third parties that receive the information. They also would be required to provide a description of user rights. In addition, the bill would create a right of action in the case of violations.

He’s not trying to ban sites or search engines from collecting information, Shanley said, but hopes to require them to disclose what they’re collecting so users “have an opportunity to make informed decisions.”

There are steps one can take to protect oneself, Shanley said. Disabling cookies (tracking devices on websites) on a browser and finding programs or extensions that prevent tracking can help, he said.

Shanley wasn’t sure of every possible security measure that can be taken and also assumed means of protection would change over time, but suggested that a quick (albeit ironic) Google search could lead to some answers.

One browser extension that could be helpful (and that this reporter uses) is HTTPS Everywhere. It can force websites to appear in secure form and even block unencrypted sites when fully enabled.

Another option is utilizing Virtual Private Networks (VPN), which the New York Times reports create a “virtual tunnel that shields your browsing information” from ISPs. VPNs can, however, run slower than regular browsers and can make downloading files difficult, so some research is needed before choosing to use one, the Times adds.

Other simple solutions include clearing website data on devices, or finding an ISP that has vowed to not sell data. According to USA Today, AT&T, Verizon, and Comcast are currently included among providers who have said they won’t sell browsing data to third parties.

Shanley’s bill is cosponsored by Representatives Lauren Carson, Aaron Regunberg, David Bennett, and Alex Marszalkowski and has been referred to the House Corporations Committee. If passed, it would go into effect later this year on July 1.