Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

European regulators start investigating Carrier IQ

Users need to be told about how their data is used, according to European Consumers' Organisation BEUC.

Organizations and regulators across Europe, including Germany, have started looking into the use of Carrier IQ's tracking software, to ensure that mobile phone vendors and operators are not violating users' privacy.

The Bavarian State Office for Data Protection has sent a letter to Apple questioning the company about its use of Carrier IQ's software.

The use of Carrier IQ's software caused a furor after security researcher Trevor Eckhart last month published a report accusing the company of installing malware on a number of different smartphones, where it apparently allowed operators and phone vendors to keep track of key presses, browsing history, SMS logs, and location data without the users knowledge.

Thomas Kranig, president of the Bavarian data protection office, said: "The most important thing to me is that users know how their data is used, and if that isn't the case there is a problem."

He wouldn't comment on the letter's contents, but expects an answer from Apple within about two weeks.

"Normally, Apple employees in Germany have to talk to the U.S. before they can say anything, so we have to wait," said Kranig.

His view of the importance of keeping users informed is echoed by the U.K. Information Commissioner's Office (ICO), an independent authority set up to uphold data privacy for individuals, and by BEUC, the European Consumers' Organisation.

"Being open and up-front with customers about how their personal data is being used is fundamental to maintaining their trust. It is obviously also vital that mobile manufacturers and operators comply with the Data Protection Act," ICO said in a statement.

ICO plans to contact mobile phone operators to see if Carrier IQ or similar software is on U.K. customers' handsets and, if so, what steps are being taken to ensure there are no privacy implications, it said.

As tools like Carrier IQ's are becoming more prevalent, clear rules on consent and mandatory privacy settings have to become the default, according to BEUC.

"Consumers are often shocked when they discover they are being so closely tracked, so more transparency is an urgent requirement," said Monique Goyens, Director General at BEUC, via email.

BEUC hopes that the upcoming update of E.U. laws on data protection will address these issues.

Apple included Carrier IQ in earlier version of iOS, the company has publicly stated, but dropped the software from iOS 5 and has not collected any personal information.

Samsung Electronics mobile phones sold in Europe don't use Carrier IQ's software, a spokesman for Samsung said via email.

European operators are giving Carrier IQ the cold shoulder, as well. Vodafone and Orange said that they don't use the software.

Vodafone in Portugal conducted a limited trial of Carrier IQ's software in 2009, but decided not to proceed with commercial deployment, according to the operator. However, a joint press release from 2009 says the opposite, and states that Vodafone Portugal was "moving [the software] into operation". That information is incorrect, a Vodafone spokesman said via email.

"The protection of our customers' privacy is paramount and we have strict guidelines governing the technologies we deploy," said the spokesman.

Carrier IQ last week said its software is only used to diagnose operational problems on networks and mobile devices, and does not record, store or transmit the contents of SMS messages, email, photographs, audio or video.

"For example, we understand whether an SMS was sent accurately, but do not record or transmit the content of the SMS. We know which applications are draining your battery, but do not capture the screen," the company said.

At noon, Central European Time a counter on Carrier IQ's website states that its software is used on about 141 million handsets.

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: Apple, Carrier, ICO, Orange, Samsung, Samsung Electronics, Vodafone
References show all

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: Android, Android OS, applications, Blackberry, BlackBerry OS, Carrier IQ, consumer electronics, iOS, iPhone, mobile, mobile applications, Mobile OSes, privacy, security, smartphones, Telecommunication, Windows Phone
Latest Blog Posts
Whitepapers
  • BPM Basics for Dummies
    This book helps you understand what BPM is really all about. We wrote it because BPM is so useful and so powerful — and because it is also very accessible. We wrote this book for you — the individual. You may be a business manager, or an Information Technology practitioner, or maybe an ambitious career individual who wants to know what BPM is all about and how to apply it.
    Learn more »
  • Focus & Invest in Business & Customers
    In an ever-changing economy, organisations are challenged to develop and maintain technology investment strategies that maximise process improvements and cost savings without compromising future growth. These organisations will emerge leaner and more competitive through economic cycles. And they will more likely have a firm technology foundation capable of adapting over time. Read more.
    Learn more »
  • So Long, Silos: Why Multi-Domain MDM Is Better For Your Business
    Say “so long” to silos. This white paper explains why a multi-domain MDM solution is far better than single-domain, single-focused point solutions. You’ll learn what to look for in a multi-domain solution so you don’t outgrow it or are forced to purchase multiple products down the road. You’ll also get tips on how to select a multi-domain solution that can lead to multiple benefits over many years. The age of multi-domain MDM is here. See why you should say “hello” to it!
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.