EA's 'Invasion of Privacy' Policy

Justus writes "Gamers with Jobs has posted an article covering EA's privacy policy for Xbox Live users. In a nutshell, by using an EA game over Xbox Live, you are automatically creating an 'EA Online' account and granting Electronic Arts the ability to collect your name, address, and credit card information, as well as a variety of demographic information about how you use their products. Not only that, they explicitly say that they may tie these demographics to your personal information — no anonymous aggregation here! When Gamers with Jobs asked EA and Microsoft about these issues, they were met with stony silence, a fact they attribute to the pending release of the new Madden game next week. Without an official comment from the companies involved, it certainly looks like EA has the most invasive privacy policy they could come up with."

Comments

It's stories like this one...

[c0l0]

...that should make it to the front page, to enable the really important stuff to spread more quickly - it's more than about time to let the big corps know we're giving up neither on our privacy, nor our freedom.

Vote with your wallet - do _not_ buy products that fuck with your inalienable rights so badly.

Re:It's stories like this one...

[TheRaven64]

How can it be an "inalienable right" if it's being taken away from you?

Inalienable does not mean it can't be taken away from you, it means it is inherent; an inalienable right is a right which is absolute, not one which is granted. I could shoot you in the face with a gun, for example, removing your inalienable right to life. It's quite a fluffy concept, one that has kept philosophers happy for quite a while. As always Wikipedia has more coverage.

Re:It's stories like this one...

[enharmonix]

Hear, hear!

You know, slashdot has so many readers, we ought to form a PAC for /. style issues, you know fixing IP law (can you name a movie in the public domain?), protecting privacy, withdrawing from WIPO, dismembering the DMCA, etc. Kinda like the EFF, but for convincing Congress to protect our personal information, our computers, our rights, etc. Everybody donates $20 bucks, and before you know it, we've got a couple million dollars to lobby with. You know, if freaking PETA can do it, I think the slashdot community can do it, and if we did, I bet Congress would pay attention.

Re:It's stories like this one...

[TopShelf]

You're absolutely right about encouraging people not to deal with companies like this if they really care that much about the issue. Bottom line is, most people don't.

It's insightful to remember the Scott McNealy quote: "You have zero privacy. Get over it."

Re:It's stories like this one...

[Anonymous Coward]

I could shoot you in the face with a gun, for example, removing your inalienable right to life.

You think you can take ALL of us Mr. Vice President?

Easy solution

[mustafap]

Dont buy their games

Re:Easy solution

[thedletterman]

Except educating the general public on privacy isn't an easy reason as to why they shouldn't play the latest version of Madden. There needs to be a pointed attack on EA by the media and lobbying firms for movements like this. Simply "boycot" solutions are non-solutions. Madden is probably one of the best selling games in the United States, and while I find it deplorable that an online service would take advantage of consumer confidence to literally spy on them in means for more invasive than any New York Times article about Bush. Certainly, it's a sad day for privacy as the leaders of the industry use their mass appeal to break the resistance of the people more interested in protecting the historical wall of online privacy than playing video games.

Re:Easy solution

[ajs318]

Unfortunately, that probably won't help the cause. The media will conveniently forget that that information should never have been collected in the first place, and spin it as "evil hackers steal identities", not as "company commits egregious invasion of privacy". (If you do want to steal someone's identity, BTW, you can do worse than look here for inspiration.)

As always, the best way to protect yourself is to lie through your teeth when asked for personal information and never, ever be even vaguely consistent across different requests. For instance, if you pretended to be an Albanian nun to get a NYT login, pretend to be a Portuguese sausage-maker with hobbies of sword-fighting and watch repair to get an IMDB login -- but don't mention anything ecclesiastical or Albanian.

EA's policies now public...

[Anonymous Coward]

Glad to see they now treat their consumers like they treat their employees.

Re:EA's policies now public...

[LiquidCoooled]

Quit

Are you sure you want to quit?

Yes

I am sorry, you have not yet completed 18 hour units of playtime, you must continue playing for another 16 hours to enable the Quit command.

Should be fully expaned on the frontpage

[Ceriel Nosforit]

This article should be fully expanded on the frontpage. Why? Because it's obiously exactly what EA and MS do not want. And therefore it should be done. Just out of spite.

Looking forward to...

[krell]

Looking forward to the industry that springs up when someone finds out that in the games, you can farm for other players' personal information along with weapons and magic-items.

Surprised?

[ObsessiveMathsFreak]

Is there a single slashdotter who is in any way surprised by this? Is there anyone so naive as to believe that private companies are the best guardians of your privacy? Even the most rapid laissez faire capitalist would hesitate before declaring your valuable data safe from explotation at the hands of the private sector.

Your data is worth money. Marketers are willing to buy it. Hence, companies will be willing and eager to sell it. They don't care. They're private companies, beholden to no one except their shareholders.

If you would like to give your explicit approval to this buy buying such a game, or tacit approval by buying any other EA game, then do so. That is your right. Just don't complain when your playing habits are vomited all over the net like so many AOL search results.

One more point for Nintendo...

[dalmiroy2k]

I live in Buenos Aires, Argentina. I have a DS and I play online a lot. It is easy for me to find and open and unsecured hotspot in this city and when I play Mario Kart or Metroid, I dont have to input and username, password or credit card information. Online playing it's completely anonymous, fast and free, yet astounding fun.
Why can't EA learn from Nintendo?

More info on http://www.nintendowifi.com/customersupport/Suppor tHome.jsp

Re:Most invasive?

[Jimmy King]

Not to mention the fact that EA is gathering information that you provide.

Not quite. EA is gathering information that you provide TO MICROSOFT, not to EA. Sure, you could argue that one should have read the privacy policie and all other documentation, but you know what? Who's going to go to EA's website and read that before buying a game, if at all? No, it's not the company's duty to make sure you read all the documentation, but I do believe they make that stuff longer and more difficult to read, both in terms of wording and tiny fonts that some people may have trouble with, than it needs to be to try to dissuade people from reading it which is wrong imo. My first line might make you think I'm only blaming EA in this, but just to be clear, I believe both companies are in the wrong.

Not surprising...

[enharmonix]

I found some very odd little registry setting installed on my computer, thought it was a worm or something, but when I looked in it, it had a list of all EA titles on my computer. The worst was that when I installed the CoD expansion pack, it tried to phone home w/o even telling me, it just went ahead and opened up a dial-up connection running as Network Service. To me, that sounds like they infiltrated my computer. Games should not (and most do not) require administrator rights to install, but EA games do. If a game requires admin rights, that's a red flag. If only CoD2 wasn't so freaking good...

This, to me, is spyware, and customer data collection needs to be conspicuously disclosed (not buried in an EULA*), and it needs to be opt-in only, by law.

* The most infuriating part is that I read the EULA for CoD/CoD2, and I didn't see anything about them collecting my data and sending it home. They didn't disclose it at all.

Re:What's the problem?

[NoMaster]

You wouldn't buy a product that says "Insecure!" on the box, would you?

Not unless the box contained a 16 year old nymphomaniac with a thing for middle-aged men...

Here. If you don't like it do something.

[gsn]

Section 5 of the FTC Act

The Commission has also used its unfairness authority to challenge information practices that cause substantial consumer injury.

Heres an information practice that could cause substantial consumer injury. EA is collecting my address, phone number, birth date, name, credit card information - usually the only other piece of information you need to charge the card is the three digit number at the back of the card. Some websites don't even require that. If you win a prize you also get to give them your SSN!!!

Do you trust your security to a three digit number? Do you trust a giant company to not have any disgruntled employees with access to the database? And a paper and pencil to circumvent the copy restrictions on the data (if they have that even). I trust EA to publish (mostly crappy sports) games and thats all. None of the other information they collect is necessary to run EA online. The very fact that they are collecting data they do not need makes me actively distrust them. This entire implictly agreeing to hand your data over smells fishy.

See that "File a complaint" link on the top of the FTC webpage. Ten minutes. Slashdot the damn thing - I'm sure the FTC will take notice. At very least they should be able to contact Microsoft and EA and be able to change what data is collected. Seriously the best way to deal with a stupid bunch of corporate lawyers is have a government agency snarl at them.