Toysmart Database To Be Destroyed 62
deebaine writes: "CNN has this article describing the settlement of the case of Toysmart.com's customer database, which Toysmart proposed to sell to the highest bidder in order to pay off their creditors. Apparently, the settlement stipulates that a Disney subsidiary will pay Toysmart $50,000, and they will destroy their own records. The FTC is hailing it as a victory."
A way to assure privacy (Score:3)
Of course some sites put in those agreements that they have the right to change it at any time. Simply avoid those sites. I do anyway- any site who isnt willing to agree to one policy probably isn't trustworthy anyway. Find a competitor or a brick and mortar version of the service.
A company you can trust (Score:2)
The tears of a marketing droid. (Score:4)
The sad thing is that this probably happens all the time, just this was a high enough profile case to be caught.
Re:The tears of a marketing droid. (Score:2)
An option. (Score:4)
Ok.. fine. They can sell off their list of customers. However, what if their list of customers only includes those customers that have purchased something in the last 30 days.
If I'm a brick&morter operation, sure.. MAYBE I want to send my customers advertisements every once in a while. After all, happy customers will come back for more. For this very reason, there is no need to keep their information on file. THEY WILL RETURN BY THEMSELVES.
If they don't return, well, they probably aren't all that interested anyways, and there's no reason to keep their records on file. All you need is the record of the transaction.
If the computer system automatically deletes the records of any customer who has not purchased something in the last 30 days, then the only customers who will have an open account are the ones that purchase something regularly. When the company plans to go out of business, simply disable the order screen but keep the system online for an extra month. Those customers will automatically be deleted by default, but at no time has the company intentionally destroyed any assets, as the customer list was never considered an asset to begin with.
On the other hand, most likely the companies in question actually WANT to sell it off because thats less money they'll have to come up with later to cover the debts after bankrupcy if any.
-Restil
How the hell is this a win? (Score:1)
If Toysmart itself was bought by Disney and they were going to continue to run the toystore site, that's one thing. I would not approve of my registration information with (for example) ComputerStuff.com being sold to russianbrides.com when they go out of business. After all, I was providing my information to have an account and services of a computer service -- not a russian bride thing. Same goes in this case. If people wanted to have their information owned by disney, they would have registered with disney. But they didn't. They registered with Toysmart.
I say, when a company/entity goes out of business, the personal data needs to be trashed. If a parent company continued to run a purchased company, that would be acceptible. But to just shell out what you want from a dead company and use that personal data -- OUR -- personal data for your own completely seperate purpose, is wrong.
---
seumas.com
Like winning a Video game. . . (Score:1)
Winning in the private sector is kind of like winning a video game. While it might help to slow the geometric growth of junk mail arriving at you from all quarters, it won't stop you from getting your ass hauled off to a concentration camp.
Some would suggest that there are bigger fish to fry. (True, some would also be called crazy, but there's some interesting food for thought out there nonetheless.)
To those interested in looking at what some of those bigger fish might be, check out this amazing site [cassiopaea.org] I just found: (Real or not, who cares? Clean and intelligent writing, it makes for the BEST sci-fi I've read in years! The Swiss watch of conspiracy theories. And frankly, any geek who isn't familiar with this cutting edge, web-based story telling technique can just turn in his membership card and kick his lame ass out the door. This is actually something new.) (Once you get past the cheesy opening page, it gets good fast.)
-Fantastic Lad. -Ten Steps Ahead and Lost With Confidence!
Re:The tears of a marketing droid. (Score:1)
I have personal information on almost 8,000 members at my 'company'. Under no circumstances would I hand this data over to another company or agency for money. I would sooner delete the data from my database or hurl the machine into the river.
---
seumas.com
Databases being destroyed (Score:1)
Seeka
Re:Warning GOATSE.CX (Score:1)
Re:How the hell is this a win? (Score:2)
It's a win because Disney directed them to destroy the database. They did not take it over. Disney got the ashes, not the data. That is the win.
(un)TrustE (Score:2)
Personally I dont think this will set any standard and in the article it mentioned complaints by privacy groups which is the foundation for the decision to take legal action, only one would hope ethical questions would've outweighed a watchful eye, but hey money talks.
I wonder what will happen when some of the bigger fish go out like Doubleclick, Netcreations.com, etc, are there standards in place already set to avoid this from happening or is information just going to end up on the eBay selling block? What about with mergers and takeovers, will the same rules apply if the newer parent company doesn't have the rules the other company did?
SourceForge Spoof [antioffline.com]
case from august (Score:1)
resource:
http://boston.internet.com/news/article/0,,2001_4
Re:A way to assure privacy (Score:1)
Interesting... perhaps we've found a good thing about clickable agreements?
Seems like a simple contract to me. (Score:3)
IAMAL, but it would seem that Company Z wouldn't then have the right to use the information for whatever purposes they want. The same would seem to go for a contract/agreement where the customer provides information to Company X. Company Z may have bought it, but there should be nothing that they can do with it, because it is outside the terms of the agreement.
At least, that seems like natural law. It would appear to hold some water, though.
Re:case from august (Score:1)
proper link [internet.com]
Re:How the hell is this a win? (Score:1)
So how is this any benefit to Disney?
---
seumas.com
Re:An option. (Score:1)
Re:I wouldn't trust Truste as far as I can spit (Score:1)
I'm sure if watchful eyes weren't kept it'd been sold.
AOL to implement security [antioffline.com]
Re:case from august (Score:1)
http://boston.internet.com/news/article/0,,2001_4
FAR from a victory... (Score:3)
The actions of the lawyers are to be expected: "What can we sell, what can we sell??"
The truly disgusting issue is that the courts would allow a company to do this. Toysmart clearly announced that this information would not be divulged, and blatantly turned around and tried to sell it.
This was not a victory, it was a close call that was saved by the fact that Disney was more worried about its rep than the money this would generate.
Won't be surprised when the next company in this situation has no rep to lose and sells its promises.
Those names aren't an asset (Score:3)
But that information is not an asset, because the company doesn't have complete control over it. If I put my name in that pot, it would have been under an agreement between Toysmart and myselft that stipulates that my name would not be sold. That contract does not change under bankruptcy proceedings does it? They don't own my information, they've only been given leave to hold it for a while. If a bank goes under, can it take all the deposits and hand it out to creditors? If one of those companies that provide small storage spaces goes out of business, are they suddenly allowed to open all the shed and start auctioning off what they find?
You can't call something you don't own an asset, and I think the bankruptcy court erred when it assumed that Toysmarts marketing list was under the companies control.
What about the backup tapes? (Score:2)
I doubt very much that this database is going to magically disappear, even for 50 grand.
Remember, there's probably a backup tape with at least part of this database on it for EVERY DAY this company has been doing business. That's a lot of tapes. Will every one be inventoried?
I doubt it.
What does the FTC have to do with it? (Score:1)
Re:An option. (Score:1)
It's a win because.... (Score:1)
Toysmart is majority owned by Disney
Dunno if they were owned by Disney before they had problems, in which case you had already sort of registered with Disney anyway, or not, but the transaction (selling the database to another subsidiary of Disney) is a dummy transaction which keeps the federal bankrupty court happy in assigning a value to the database, whilst avoiding the need for a long expensive legal argument. This way both the bankrupty court is happy 'cos Toysmart obtained value for an asset, and Toysmart get to keep their no disclosure promise.....
Re:The tears of a marketing droid. (Score:2)
If a company promises not to sell your information, I believe that means they shouldn't be able to sell it as part of the sale of their company as well. It should never be an issue. You simply don't sell the information regardless of circumstances. If your company is bought by another company, then destroying the information is the only way to make sure it is not transferred. It should be made clear to the purchasing company that customer information is not for sale.
Re:How the hell is this a win? (Score:1)
Eric W. Sarjeant
ericsarjeant[@]mediaone.net
Who to sue? (Score:1)
Re:Seems like a simple contract to me. (Score:1)
Imagine this company X buys 300 linceses for microsoft Office 2000 then goes bankrupt and sells the linceses to company Z, Company Z cannot install that software(legally) until it is no longer installed on company X's computers and may not be able to then it would be up to the orginial owner of the property since an address list is doesn't acutally belong to anyone and I seriously dought that the people on it knew they were the company that buys it should have to send a "would you like to remain on this mailing list?" card to everyone.
BUT THEY WONT!!!
Re:FAR from a victory... (Score:1)
Toysmart did not "baltantly turned around and tried to sell it." they where trying NOT to sell it, but where being told it was an asset and being forced to sell it to pay of creditors.
Please take time to read, information is easily misunderstood.
Also the disgusting issue is not the courts allowing them to do it, its the courts FORCING them to do it. Big Difference.
Re:Those names aren't an asset (Score:2)
That is not always true. How do you think that you get all of those "great" credit card offers. Because someone has your information and is selling it to these other companines that we have grown to hate.
Wow. (Score:1)
Clash of New and Old (Score:1)
There's one shocking detail to this... (Score:2)
Sure, this is pure speculation, but that's the advantage of being a pessimist; you're either proven right or pleasantly surprised.
Re:Who to sue? (Score:2)
If it could be shown that such costs would reasonably exceed the value of any such sale -- I think that such a database could then be legaly considered 'unsalable'.
`ø,,ø!
Re:Those names aren't an asset (Score:2)
So, someone is willing to buy a stolen TV. If I steal yours, then go bankrupt, will the bankruptcy court hold that I be allowed to sell your TV to pay my debts? Remember, possession is 9/10ths of the law, but it is only 9/10ths.
Re:How the hell is this a win? (Score:2)
I thaink that what we really need for a full win would be for the company to destroy the data on their own say-so.
`ø,,ø!
Re:The tears of a marketing droid. (Score:3)
There's even a precedent for this--a company's pension fund. By law, when one company is bought out by another, the purchasing company cannot plunder the other's pension fund--it must be maintained as a pension fund.
Cassiopaea ? (Score:1)
check out this amazing site I just found: (Real or not, who cares? [...] it makes for the BEST sci-fi I've read in years!
I did. What's good about it ? It's just another bunch of self-deluding New Age Loons doing bad science that Elron would be ashamed to have penned.
"Swiss watch of conspiracy theories" ? I get weirder things in my cornflakes.
Re:FAR from a victory... (Score:1)
I repectfully disagree...
Toysmart did not "baltantly turned around and tried to sell it." they where trying NOT to sell it, but where being told it was an asset and being forced to sell it to pay of creditors.
This may be true, however it is contrary to the article (which acording to your post, I did not read very well *grin*)
Waltham, Mass.-based Toysmart.com assured its customers that their personal information would never be shared with a third party, but the company took out an advertisement in The Wall Street Journal to sell the database after going out of business last May.
I know of no LESS blatant way to sell something, whether forced to or not.
Please take time to read, information is easily misunderstood.
Appears that it can be...
Also the disgusting issue is not the courts allowing them to do it, its the courts FORCING them to do it. Big Difference.
IF they were FORCED I agree completely.
It's a precedent (Score:2)
Like, duh. Of course they could. The point is, that it would be illegal of them to do so, where, before, it was questionably legal. This case sets a precedent that doing such a thing, is, in vact, a violation of consumer privacy.
If something has never been said/seen/heard before, best stop to think about why that is.
No Buyer - No Duh (Score:2)
Who's going to buy it? Other .com's can't afford it and real businesses already have our info. Besides, there's only 250,000 people in that database, once an existing company does a scrub against its own internal database that number will drastically decrease. I know the company I work for (5,000 employee company) loses about 30% of leads when they buy a database like that.
Re:An option. (Score:2)
A few counter examples:
The obvious one: the company sells large ticket items that don't get purchased every thirty days.
A subtler one: maybe the company introduces a new category of product. A customer who has been there before and had a good experience may not know about the new product category. They don't need any more of the thing they bought before, but they would love to buy the new thing at a store that served them well in the past.
A human one: people forget stuff all the time. If you don't have a strong brand, and you don't market to your previous customers, they will get confused and forget about you.
That is just one area of fallacy. Let's examine the comment "On the other hand, most likely the companies in question actually WANT to sell it off because thats less money they'll have to come up with later to cover the debts after bankrupcy if any."
Companies DO NOT care how many of their debts they cover in bankruptcy. That is what bankruptcy means! Debt forgiveness! The creditors do care, and they take legal action to prevent the destruction of assets that could conceivably provide value. Your 30 day system would be doing just that, and a smart creditor would try to stop it (and a smart company would never have done it anyway).
The solution to this problem is _exactly_ the one the FTC has pursued; we have here a rare case of successful government regulation. Collect the data, keep the data, use the data in accordance with the promises that you made to your customers, then if the data must be sold, the data still must be used in accordance with the promises that you made to your customers. That is admittedly tough to enforce, which is why the ultimate settlement led to the destruction of the data.
Re:Those names aren't an asset (Score:1)
But it still belongs to me, dammit. Or, at least, it should.
Sigh. I'm sure some corporate weasel in search of ever-increasing profits has wined-and-dined the appropriate politicians..
Re:The tears of a marketing droid. (Score:1)
Unfortunately, you may be liable for destruction of company property if you do that. I don't know the law but I wouldn't be at all surprised if you could go to jail for that. You may also be personally liable for whatever the data was valued at, just as if you intentionally broke the company refrigerator or smashed up a company car.
I respect your strong stand though!
Jamie McCarthy
Re:What about the backup tapes? (Score:1)
Re:The tears of a marketing droid. (Score:2)
In the larger sense, parts of a company can be declared 'off limits' in the same way that certain actions can be declared 'off limits' (eg, selling crack, monopoly, dangerous working conditions). Our legal precedents define regulations-to-protect-the-citizens to constrain the pure capitalist anarchy that makes living in the US such an interesting place. Please try to remember that.
Re:An option. (Score:1)
If the computer system automatically deletes the records of any customer who has not purchased something in the last 30 days, then the only customers who will have an open account are the ones that purchase something regularly.
The problem is, most people don't shop at e-commerce sites this frequently. I know I'd be pretty annoyed if I had to re-enter my credit card information, shipping and billing addresses, opt-out prefs, etc. every time I shopped at each store online just because I don't use them frequently enough.
It'd be much easier (and make much more sense) if these companies just realized that bankrupcy doesn't give them an excuse to break their privacy contract with me.
Motorola followup? (Score:2)
Worse horror stories exist (Score:2)
The company was set up at a co-lo, where they didn't own the servers. But at the San Francisco office, there was a data mining server that collected all the clickstream data, all the credit card info, etc, into a honking SQL database.
When the company folded, the boxes were simply shut down. No cleanup was done at all. When the company sold all the systems that had been used for building the site, they advertised thm as including softare (non transferable, and never paid for anyhow), so they continued to not be erased.
The company that bought the data mining server apparently decided that rather than flattening, and rebuilding, it would be more fun to crack the box. So they hired someone to break open the security on the systems. Thus getting them a COMPLETE copy of every session ever opened to the production site. Including all the aforementioned credit card info.
This is not a good thing (Score:1)
Re:The tears of a marketing droid. (Score:1)
---
seumas.com
Re:The tears of a marketing droid. (Score:1)
--Fesh
Strict Contract Law Interpretation (Score:2)
In this case, we can say that Toysmart ("the Company") owns the list of names. However, in submitting your name to the list, you ("the User") entered into a contract with the Company that personal information about the User would not be shared with any entity which was not the Company, for any purpose.
If Toysmart were bought by another firm, that firm would become the Company in a legally binding way, and therefore would have rights to the list. They would also be under the same contract that Toysmart began under.
However, the Company has dissolved, and by taking its assets, creditors in no way take on the role of the Company. As the contract stated that information about the User would not be shared with non-Company groups under ANY circumstances, the list must be destroyed upon dissolution of the Company. Simple.
Re:The tears of a marketing droid. (Score:1)
Hardly a major victory (Score:2)
Unfortunately, it doesn't mean that at all. It just means that's what happened in this case. Next time, it might not go the right way, and what we really need is a fix in the legislation. Encouragingly enough, the article also has this bit of information: Sen. Patrick Leahy, D-Vt., said in an interview that he would like to reform those laws this year to protect consumer privacy.
Keep an eye out for those bills. His statement implied there's something in the bankruptcy laws that allows this sort of thing to happen. So rather than just rail against all the bad legislation (which we should still do), it'd be nice to have some legislation that most
Re:The tears of a marketing droid. (Score:1)
The flip side of this is that it denies the ability to sell a company under some circumstances, which would violate all manner of legal and constitutional rights. Buying a company in order to run it as it is should not bring about destroying its assets, especially customer lists.
Besides, these are also business records that can't legally be destroyed for a certain period of time if the company will continue to exist.
Re:An option. (Score:2)
And only an idiot would keep them in any form other than a database these days, readily accessible.
Plus, parts of those records are also tax records, and failing to keep them for the several years the IRS requires is a good way to end up paying a lot of extra taxes, fines, and penalties. Possibly even to go prison.
Re:The tears of a marketing droid. (Score:2)
Besides, these are also business records that can't legally be destroyed for a certain period of time if the company will continue to exist.
Business records are one thing. Marketing data is another. There may be some overlap for essential information, but anything beyond that should be destroyed if customers were promised that the information would not be sold.
The flip side of this is that it denies the ability to sell a company under some circumstances, which would violate all manner of legal and constitutional rights.
What about the contract between the customer and the business? Should that simply be disregarded? Should businesses be allowed to create contracts that violate the Constitution? If they do violate the Constitution, shouldn't the contract be deemed null and void? If so, then the data that the business gained through the contract should be destroyed.
Re:An option. (Score:1)
You misunderstand the concept of bankruptcy. A corporation declares bankruptcy because it no longer has enough assets to cover its liabilities. The bankruptcy courts then step in to distribute what remains of the assets among creditors. The stockholders of the corporation are under no obligation to put in more of their own assets to cover the shortfall - the concept of limited liability (tho IANAL).
Therefore, it's no skin off the bankrupt corps' nose for a judge to declare a controversial asset like a customer database untransferable. It simply means creditors will get that much less.
Re:A way to assure privacy (Score:1)
"information wants to be free", remember? Actually, information wants to be expensive, thus increasing its chance of survival. Valuable information has a habit of being kept around.
Zero Sum