Three Things We Don’t Know About Obama’s Massive Voter Database
by Lois Beckett
ProPublica, March 27, 2012, 4:48 p.m.
President Obama's re-election campaign is reportedly [1] building [2] a massive database [3] of information about potential supporters.
The database seems to bring together information about supporters gathered from all branches of the campaign [3] — everything from an individual's donation records to volunteer activity to online interactions with the campaign — aimed at allowing the campaign to personalize every interaction [4] with potential supporters.
Earlier this month, we built an interactive graphic showing how different Obama supporters received different variations of the same email [5] — one way that the campaign may be using data to personalize messages.
We can't describe the Obama campaign's database with certainty because the campaign won't talk about it. Citing concerns about letting Republicans learn its tactics, the campaign declined our request for comment — as it has with other outlets — about what data the campaign collects and what it's doing with the data. The campaign did emphasize that, regardless of what information it gathers, it has never sold voter data or shared its voter database with other candidates.
Here's a guide to what we know — and don't know — about the information Obama is collecting about voters.
1. What information is the campaign collecting about individual supporters?
We know only some of the data it's collecting, but it is clearly collecting a lot.
The Obama campaign has hired a corporate data-mining expert, Rayid Ghani [6], to serve as its "chief scientist [7]." Ghani has previously researched how to use a retailer's record of customer purchases to predict what a particular customer will buy [8] during a given shopping trip — the same kind of data crunching that Target has apparently used to predict whether shoppers are pregnant [9]. The campaign is continuing to hire "analytics engineers [10]" and other data experts.
Some of the most important data that campaigns need are already public [11]. State voter files include voters' names, addresses and voting histories. Campaigns don't know whom you voted for. But they know when you voted, when you didn't and, in some states, your race and party registration.
The Obama campaign website [12] asks supporters for basic information, starting with your email address and ZIP code. If you sign up for an account on the site or register as a volunteer, you may also be asked for your mailing address, phone number and occupation.
But the campaign's privacy policy [13] says the campaign has the right to gather far more — information about how you use the campaign website, such as what you click on and which pages you view; data about how you interact with campaign email messages; and personal information you submit as part of blog comments, interactive forums or contests and games on the campaign's websites.
Logging on to BarackObama.com using Facebook gives the campaign permission to access your name, profile picture, gender, networks, list of friends and any other information you have made public.
How much information is the campaign tracking and connecting back to you? The campaign won't give an overarching answer to that.
That doesn't mean it is tracking everything. For instance, the campaign website features an interactive graphic that allows users to see how the health-care reform law [14] might benefit them. To do so, users click through several options, selecting whether they have private health insurance, Medicare, Medicaid or no insurance at all, how many people are in their families, and what their annual household incomes are.
According to the campaign's privacy policy, the campaign may track how individual users interact with the campaign website. But the campaign said that none of the information entered into the health-care interactive site was linked back to individual supporters.
It's worth noting that, as many websites do, the campaign also works with third-party ad vendors that use web cookies to track your browsing online. This enables them to serve you ads on different sites — and to target their ads based on the sites you visit.
2. What will happen to all this personal information once the campaign is over?
It's hard to know.
According to the privacy policy [13], the campaign reserves the right to share the personal information it collects "with candidates, organizations, groups or causes that we believe have similar political viewpoints, principles or objectives."
The campaign wouldn't comment about any future plans but said its track record demonstrated its approach to privacy protection.
After the 2008 election, Obama's list of 13 million email addresses was not given to other candidates or used by the White House. Obama launched "Organizing for America," a Democratic National Committee outreach program that drew on Obama's wide network of supporters to generate support for the president's agenda.
"This campaign has always and will continue to be an organization that respects and takes care to protect information that people share with us," spokeswoman Katie Hogan said.
But the privacy policy shows the campaign is reserving the right to share its increasingly rich database. And some experts are wondering what Obama will do with it once the campaign ends.
"As a voter, I would feel a lot more comfortable if campaigns gave voters the option of whether or not they could pass their information on to other groups," said Andrew Rasiej, founder of Personal Democracy Forum [15] and TechPresident [16], a site focusing on how technology affects politics.
From a voter's perspective, "the fact that I gave the Obama campaign $10 for six months, or emailed the campaign 10 times, may not be information that I want anyone else to know," Rasiej said.
Lillie Coney, associate director of the Electronic Privacy Information Center [17], said she's "never heard anyone complain" about Obama's 2008 campaign giving away personal information.
"The success of the Obama campaign in 2008 in getting millions of people to log on to their website to give personal information and volunteer and do all sorts of things for the campaign hinged on trust," she said. "People did not believe that that information was going to go anywhere."
Any choice to share supporters' information should take their preferences into account, Coney said. A campaign could easily create a checklist of politicians and organizations, allowing users to grant permission to share with some groups and not with others.
3. Is there any way to erase yourself from the campaign's database?
As far as we can tell, no.
President Obama's "Consumer Privacy Bill of Rights [18]," released last month, says that consumers' right to control their personal data "includes a right to withdraw consent to use personal data that the company controls."
The Obama campaign does make it easy to unsubscribe from email, text messages or newsletters. But we couldn't find any way to take yourself off its database — and the campaign wouldn't comment. There's also no apparent way to see what information the campaign is storing about you.
In a report on consumer privacy [19] released March 26, the Federal Trade Commission called on companies to "provide consumers access to the data collected about them."
Both the "Consumer Privacy Bill of Rights" and the FTC's report are meant to serve as guidelines for future legislation regulating companies' use of consumer data. How any laws will apply to political campaigns isn't clear.
A White House official said the Privacy Bill of Rights "applies to how businesses handle consumers' personal data online, and will impact all organizations using personal information collected through commercial means," including campaigns.
Obama's privacy policy notes that users, just as they can at any website, can disable cookies if they don't want their browsing tracked. And to the campaign's credit, EPIC's Lillie Coney said, the privacy policy also includes a link to the Network Advertising Initiative [20], which allows users to control which digital advertisers are tracking them.