Federal Register: July 27, 2009 (Volume 74, Number 142)

DOCID: fr27jy09-80 FR Doc E9-17756

OFFICE OF MANAGEMENT AND BUDGET

Management and Budget Office

NOTICE: NOTICES

DOCID: fr27jy09-80

DOCUMENT ACTION: Request for comments.

SUBJECT CATEGORY:

Proposed Revision of the Policy on Web Tracking Technologies for Federal Web Sites

DATES: Comments must be received by August 10, 2009.

DOCUMENT SUMMARY:

The Office of Management and Budget (OMB) is considering options for revising the current prohibition on Web tracking technologies (such as persistent cookies) and invites public comments on the policy that would govern the use of such technologies. The goal of this review is for the Federal Government to continue to protect the privacy of people who visit Federal Government Web sites while at the same time making these Web sites more userfriendly, providing better customer service, and allowing for enhanced Web analytics.
[[Page 37063]]

SUMMARY:

Proposed Revision of Policy on Web Tracking Technologies for Federal Websites

SUPPLEMENTAL INFORMATION

On June 22, 2000, OMB issued memorandum M- 0013, which was later updated by memorandum M0322, prohibiting the use of Web tracking technologies unless the agency head approves the use of these technologies due to a compelling need.

During the past nine years, Web tracking technologies have become a staple on most commercial Web sites with widespread public acceptance of their use. Technologies such as persistent cookies enable Web sites to remember a visitor's preferences and settings, allowing for a more personalized, userfriendly experience. Moreover, such technologies are necessary for accurate analytics of Web traffic, which helps to inform decisions about how to improve a Web site so that it can better serve the public.

While the benefits of using Web tracking technologies are clear, OMB is acutely aware of, and sensitive to, the privacy questions raised by the use of such technologies. Any evaluation of revisions to the current prohibition must consider, and address, potential risks to privacy.

Under a framework that we are considering, any Federal agency using Web tracking technologies on a Federal Government Web site would be subject to basic principles governing the use of such technologies and would be required to:

  • Adhere to all existing laws and policies (including those designed to protect privacy) governing the collection, use, retention, and safeguarding of any data gathered from users;
  • Post clear and conspicuous notice on the Web site of the use of Web tracking technologies;
  • Provide a clear and understandable means for a user to optout of being tracked; and
  • Not discriminate against those users who decide to opt out, in terms of their access to information.

    OMB is currently considering the application of a threetiered approach to the use of Web tracking technologies on Federal Government Web sites. A set of tiers that we are considering would be:

    1st Singlesession technologieswhich track users over a single session and do not maintain tracking data over multiple sessions or visits;

    2nd Multisession technologies for use in Web analyticswhich track users over multiple sessions purely to gather data to analyze Web traffic statistics; and

    3rd Multisession technologies for use as persistent identifiers which track users over multiple visits with the intent of remembering data, settings, or preferences unique to that visitor for purposes beyond what is needed for Web analytics.

    It is anticipated that there would be more stringent restrictions or review of the uses of such technologies within the tiers that have higher privacy risks associated with them.

    OMB invites public comment on the framework that should govern Federal agency use of Web tracking technologies, including such topics as:

  • The appropriate tiers;
  • The acceptable use and restrictions of each tier;
  • The basic principles governing the use of such technologies;
  • The degree of clear and conspicuous notice on each Web site that Web tracking technologies are being used;
  • The applicability and scope of such a framework on Federal agency use of thirdparty applications or Web sites;
  • The choice between an optin versus optout approach for users;
  • Unintended or nonobvious privacy implications; and
  • Any other general comments with respect to this issue. Kevin F. Neyland,
    Acting Administrator, Office of Information and Regulatory Affairs. [FR Doc. E917756 Filed 72409; 8:45 am]
    BILLING CODE 311001P

    FOR FURTHER INFORMATION CONTACT

    Mabel Echols, Office of Information and Regulatory Affairs, Records Management Center, Office of Management and Budget, Room 10102, NEOB, 725 17th Street, NW., Washington, DC 20503. Telephone: (202) 3956880.

    Copies of OMB memoranda M0013 and M0322 are available on OMB's Web site at http://www.whitehouse.gov/omb/memoranda_default/.