HomeInsightsInformation Commissioner’s Office says affiliate marketing industry needs to clean up its act in terms of privacy law compliance

Article by

The ICO reports that an international operation has found that the affiliate marketing industry has significant issues to overcome in terms of compliance with rules concerning privacy and unsolicited communications.

A global intelligence-gathering operation by the Unsolicited Communications Enforcement Network (UCENet), involving nine agencies from five countries, visited 902 websites and also examined 6,536 consumer complaints related to affiliate marketing in their respective databases. The issues they found included:

  • apparent lack of self-regulation: a majority of participants noted that most of the publicly available terms of services between the affiliates, the merchants, and the affiliate platforms lacked appropriate unsolicited communication guidelines establishing what is permissible;
  • lack of consent: some participating countries that have an opt-in unsolicited communication regime noted that affiliates generally do not possess the consent of the consumer to send electronic communications;
  • misleading advertising: many participants noted the prevalence of misleading advertising in the affiliate marketing ecosystem. Within minutes of beginning their research, sweepers were exposed to some form of misleading advertising; and
  • affiliate marketing platforms: some affiliate marketing platforms, which operate as a third party agent handling interactions and payments between merchants and affiliates, have a short lifespan (often less than a year) and conceal their physical location, potentially making enforcement a challenge.

Of the 902 international websites visited during the sweep, 221 were flagged for further action. The ICO notes, however, that the operation also found many examples of good practice in the industry, demonstrating that compliance with laws on unsolicited marketing can be easily achieved.

The UCENet Sweep 2017 was jointly led by the ICO and the Canadian Radio-Television and Telecommunications Commission (CRTC). To read the ICO’s press release in full, click here.