Privacy non-profit None Of Your Business (noyb) has filed a complaint with Austria’s data protection authority (DSB) against Mozilla for enabling the privacy feature Privacy-Preserving Attribution (PPA)<\/a> in Firefox without user consent. Noyb claims that PPA doesn’t prevent Firefox from tracking user behavior, shifting control of tracking from websites to the browser itself.<\/p>\n\n\n\n
“Contrary to its reassuring name, this technology allows Firefox to track user behaviour on websites. In essence, the browser is now controlling the tracking, rather than individual websites.” states noyb<\/a>. “While this might be an improvement compared to even more invasive cookie tracking, the company never asked its users if they wanted to enable it. Instead, Mozilla decided to turn it on by default once people installed a recent software update.”<\/em><\/p>\n\n\n\n
The feature is an experimental feature shipped in Firefox\u00a0version<\/a>\u00a0128 to enhances user privacy by measuring ad performance without collecting personal data. However, noyb discovered that Firefox track users’ activity, potentially violating user rights under the EU’s GDPR. Rather than replacing cookies, this feature adds another method for websites to target ads. Noyb’s data protection lawyer, Felix Mikolasch, suggests that Mozilla has adopted the advertising industry’s view on tracking, turning Firefox into an ad measurement tool, despite good intentions.<\/p>\n\n\n\n
noyb states that enabling PPA feature by default without informing users or seeking their consent violates their privacy. The organization highlights that the tracking feature is not mentioned in Mozilla’s data protection policies, and users can only disable it by navigating to a hidden opt-out option in the browser’s settings. A Mozilla developer explained<\/a> the decision, arguing that users cannot make an informed choice about the feature.<\/p>\n\n\n\n
Follow me\u00a0on Twitter:\u00a0@securityaffairs<\/strong><\/a>\u00a0and\u00a0Facebook<\/strong><\/a>\u00a0and\u00a0Mastodon<\/strong><\/a><\/p>\n\n\n\n
Pierluigi Paganini<\/strong><\/a><\/p>\n\n\n\n
(<\/strong>SecurityAffairs<\/strong><\/a>\u00a0\u2013<\/strong>\u00a0hacking, Mozilla Firefox<\/a>)<\/strong>