Privacy-focused Mozilla faces backlash for tracking Firefox users without consent
Mozilla, the company behind the popular Firefox browser, is facing allegations of tracking users' online behavior without their consent. The accusations have been leveled by NOYB (None Of Your Business), a European digital rights organization. The group has lodged a privacy complaint with the Austrian data protection authority (DSB), citing concerns over a feature in Firefox known as Privacy-Preserving Attribution (PPA).
PPA feature: A tool for tracking or privacy protection?
The PPA feature, a collaboration between Mozilla and Meta, was introduced in February 2022. It became automatically active for all users with the launch of Firefox version 128 in July. NOYB alleges that despite its name suggesting privacy protection, this feature is used by Mozilla to monitor user behavior across various websites. The group argues that "the browser is now controlling the tracking, rather than individual websites."
NOYB criticizes Mozilla's lack of user consent
NOYB has criticized Mozilla for activating the PPA feature without seeking user consent. The group contends that while this may be a step up from more intrusive cookie tracking, it was wrong for Mozilla to enable it by default following a recent software update. According to NOYB, the PPA feature allows Firefox to collect data on users' ad interactions and compile this information for advertisers.
Mozilla defends PPA feature amid privacy concerns
In response to the allegations, Mozilla maintains that the PPA system enhances privacy by measuring ad performance without individual websites gathering personal data. The company insists that PPA does not share browsing details with third parties or Mozilla itself. Advertisers only receive aggregated data about ad performance, according to the company's statement in a July support document.
NOYB challenges Mozilla's compliance with GDPR
NOYB argues that some of the tracking conducted by the PPA feature occurs within Firefox, potentially violating user rights under the EU's General Data Protection Regulation (GDPR). Felix Mikolasch, a data protection lawyer at NOYB, stated that "Mozilla has just bought into the narrative that the advertising industry has a right to track users by turning Firefox into an ad measurement tool." He further expressed skepticism about whether 'privacy preserving attribution' could replace cookies and other tracking tools.