Texas Sues Allstate For Collecting Driver Data To Raise Premiums (gizmodo.com) 56
An anonymous reader quotes a report from Gizmodo: Texas has sued (PDF) one of the nation's largest car insurance providers alleging that it violated the state's privacy laws by surreptitiously collecting detailed location data on millions of drivers and using that information to justify raising insurance premiums. The state's attorney general, Ken Paxton, said the lawsuit against Allstate and its subsidiary Arity is the first enforcement action ever filed by a state attorney general to enforce a data privacy law. It also follows a deceptive business practice lawsuit he filed against General Motors accusing the car manufacturer of misleading customers by collecting and selling driver data.
In 2015, Allstate developed the Arity Driving Engine software development kit (SDK), a package of code that the company allegedly paid mobile app developers to install in their products in order to collect a variety of sensitive data from consumers' phones. The SDK gathered phone geolocation data, accelerometer, and gyroscopic data, details about where phone owners started and ended their trips, and information about "driving behavior," such as whether phone owners appeared to be speeding or driving while distracted, according to the lawsuit. The apps that installed the SDK included GasBuddy, Fuel Rewards, and Life360, a popular family monitoring app, according to the lawsuit.
Paxton's complaint said that Allstate and Arity used the data collected by its SDK to develop and sell products to other insurers like Drivesight, an algorithmic model that assigned a driving risk score to individuals, and ArityIQ, which allowed other insurers to "[a]ccess actual driving behavior collected from mobile phones and connected vehicles to use at time of quote to more precisely price nearly any driver." Allstate and Arity marketed the products as providing "driver behavior" data but because the information was collected via mobile phones the companies had no way of determining whether the owner was actually driving, according to the lawsuit. "For example, if a person was a passenger in a bus, a taxi, or in a friend's car, and that vehicle's driver sped, hard braked, or made a sharp turn, Defendants would conclude that the passenger, not the actual driver, engaged in 'bad' driving behavior," the suit states. Neither Allstate and Arity nor the app developers properly informed customers in their privacy policies about what data the SDK was collecting or how it would be used, according to the lawsuit. The lawsuit violates Texas' Data Privacy and Security Act (DPSA) and insurance code by failing to address violations within the required 30-day cure period. "In its complaint, filed in federal court, Texas requested that Allstate be ordered to pay a penalty of $7,500 per violation of the state's data privacy law and $10,000 per violation of the state's insurance code, which would likely amount to millions of dollars given the number of consumers allegedly affected," adds the report.
"The lawsuit also asks the court to make Allstate delete all the data it obtained through actions that allegedly violated the privacy law and to make full restitution to customers harmed by the companies' actions."
In 2015, Allstate developed the Arity Driving Engine software development kit (SDK), a package of code that the company allegedly paid mobile app developers to install in their products in order to collect a variety of sensitive data from consumers' phones. The SDK gathered phone geolocation data, accelerometer, and gyroscopic data, details about where phone owners started and ended their trips, and information about "driving behavior," such as whether phone owners appeared to be speeding or driving while distracted, according to the lawsuit. The apps that installed the SDK included GasBuddy, Fuel Rewards, and Life360, a popular family monitoring app, according to the lawsuit.
Paxton's complaint said that Allstate and Arity used the data collected by its SDK to develop and sell products to other insurers like Drivesight, an algorithmic model that assigned a driving risk score to individuals, and ArityIQ, which allowed other insurers to "[a]ccess actual driving behavior collected from mobile phones and connected vehicles to use at time of quote to more precisely price nearly any driver." Allstate and Arity marketed the products as providing "driver behavior" data but because the information was collected via mobile phones the companies had no way of determining whether the owner was actually driving, according to the lawsuit. "For example, if a person was a passenger in a bus, a taxi, or in a friend's car, and that vehicle's driver sped, hard braked, or made a sharp turn, Defendants would conclude that the passenger, not the actual driver, engaged in 'bad' driving behavior," the suit states. Neither Allstate and Arity nor the app developers properly informed customers in their privacy policies about what data the SDK was collecting or how it would be used, according to the lawsuit. The lawsuit violates Texas' Data Privacy and Security Act (DPSA) and insurance code by failing to address violations within the required 30-day cure period. "In its complaint, filed in federal court, Texas requested that Allstate be ordered to pay a penalty of $7,500 per violation of the state's data privacy law and $10,000 per violation of the state's insurance code, which would likely amount to millions of dollars given the number of consumers allegedly affected," adds the report.
"The lawsuit also asks the court to make Allstate delete all the data it obtained through actions that allegedly violated the privacy law and to make full restitution to customers harmed by the companies' actions."
Sometimes the right and corporates aren't buddies (Score:4, Insightful)
Always good to see. Let's hope for a far larger settlement than 'millions'.
Re: (Score:3)
Health Insurance isnt any different, same gag, same ploy, same game.
Re:Sometimes the right and corporates aren't buddi (Score:4, Informative)
My old employer "offered" yearly blood tests. A strictly optional service for your benefit, but if you opt out you are fined a "unhealthy employee" surcharge that is deducted from each paycheck, and it was substantial. You could allegedly submit results from your doctor to avoid the surcharge, but it turns out that was a lie, there was no process for doing that.
But the results were strictly private, right? No, they were shared with insurer and sold into the insurance database, plus they were used by the employer for its own "quality of life" recruiting propaganda. That was the whole point, to extort the workforce to submit to blood testing for their own recruitment benefit.
Needless to say, National Instruments is a shitty company to work for.
Also, all car insurance companies are doing this. State Farm makes monitoring optional, but if you don't accept monitoring your rate goes way up. The only difference is WHEN your rates are increased. Tesla sells insurance for its customers, you think they don't continuously monitor how their cars are driven? Try opting out of surveillance from a Melonia Musk company.
Re: (Score:2)
My old employer "offered" yearly blood tests. A strictly optional service for your benefit, but if you opt out you are fined a "unhealthy employee" surcharge that is deducted from each paycheck, and it was substantial. You could allegedly submit results from your doctor to avoid the surcharge, but it turns out that was a lie, there was no process for doing that.
I dropped company insurance years ago, and at the time I still had my own doctor I got "confronted" by our head of HR about not accepting the forced yearly company provided blood test + exam. I told her I trusted my own doctor to do my exams and was told, flat out, "Your doctor doesn't know the right things to test for!" Since I wasn't on company insurance, I pretty much laughed in her face, but there's some serious brainwashing going on in some direction or another with these scams.
Re:Sometimes the right and corporates aren't buddi (Score:5, Insightful)
The only thing that's anti-consumer is if this is done deceptively or the companies do not tell consumers what is affecting their premiums so that they can adjust their own behaviors or make changes that might lower their premiums. Incentivizing people to engage in healthy behaviors is a good thing. If someone wants to smoke that's their business, but why shouldn't they also pay higher premiums corresponding to the greater expectation of future costs? Not doing that is just externalizing the cost of their poor decisions on everyone else and does less to dissuade them from the unhealthy behavior.
I wouldn't have an issue with this in general if the implementation didn't have the problems described in the summary where people could be unfairly punished or rewarded.
Re: (Score:3)
If you think insurance companies are hurting on profit, you either havent been looking at their reports OR you are making dividends off them and have a reason to be disingenuous.
Only if competition isn't working (Score:2, Insightful)
The internet has allowed customers to seek out the best quotes, with the result that, at least on a good day, those profits will be competed away as lower prices for customers.
Re: (Score:1)
HAHAHAHAHAA
Oh, you were serious... Oh my.
Let me guess, trickle down economics works too?
Re: (Score:2)
HAHAHAHAHAA
Oh, you were serious... Oh my.
Let me guess, trickle down economics works too?
You could actually open the most recent annual reports for a few large insurers and see for yourself where most of the income over time actually comes from.
Instead of embarrasing yourself in public.
Re: (Score:3)
Insurance companies have a profit margin of about 3% of revenue.
Higher rates don't automatically mean higher profit.
Often, the best way to increase profits is to lower prices, gain market share, and spread overhead costs across more customers.
In California, Geico has the lowest prices and healthy margins.
The same is true in retail. Walmart has the best profit margin of major retailers, the lowest prices, and the highest volume.
Re: (Score:1)
lol, no, you must be an insurance stakeholder to be so misleading. Insurance generally falls into the "market failure" category: although there are thousands of insurance brands out there they are actually only controlled by a few large entities. Druissi and Collins pegged the after-tax profit margins of the top tier insurance entities at rates ranging from 10% to 18%.
Re: (Score:2)
Re: (Score:2)
The ACA requires that health insurance have a gross margin of no more than 15%.
Correct. And "gross margin" is not the same as "profit".
Gross margin = premiums - payouts
Profit = premiums - payouts - overhead (salaries, rent, utilities, interest, depreciation, etc.)
Re: (Score:2)
the after-tax profit margins of the top tier insurance entities at rates ranging from 10% to 18%.
Bullcrap. That is wildly inaccurate.
Feel free to prove me wrong by providing a citation.
Re: (Score:2)
I love the slashdot discussions every time insurance comes up. Most of it is nonsense because 90% of the people here don't understand the fundamental profit model of the insurance industry.
Hint: premiums in vs causality cost out is NOT it.
Insurance operates much more like banking. It is about having a big pool of money they can mange for investment. Having the proper mix of growth vs near cash to cover the casualty payments. Generally speaking more customers means more cash flow which means more overall f
Re: (Score:2)
Insurance operates much more like banking. It is about having a big pool of money
Indeed. Geico is owned by Berkshire Hathaway, which uses it as a cash cow.
One reason Berkshire is so profitable is cheap capital from Geico's reserves.
Re: (Score:2)
No, thats how they make MORE money.
If you think insurance companies are hurting on profit, you either havent been looking at their reports OR you are making dividends off them and have a reason to be disingenuous.
If you think insurance underwriting is how insurers make most of their money, you have absolutely zero idea about how insurance actually works and where the profits are coming from.
Re: (Score:2)
I think we all remember ads such as this one from AllState for their DriveWise app [youtube.com]. That's upfront and they're not getting sued for it.
The issue here is that GasBuddy etc w
Re: (Score:2)
Re:Sometimes the right and corporates aren't buddi (Score:4, Informative)
>"That's how insurance companies make a profit though. They find factors that reduce or increase risk to adjust price accordingly.
They can do this now based on number of accidents, claims, tickets, what kind of vehicle, how many miles you drive, where you live, how long you have been a driver, etc. What they have always done. This "new" way is utter speculation by guessing how good or bad a driver you are based on poor, low-resolution data of "braking", "accelerating", and "cornering" with zero context.
The problem I have with the latter is not only can it be extremely unfair, you don't really know what/when/how they are collecting, you can't defend yourself against their conclusions, you don't know who it is being shared with or how. Plus you are punished if you refuse to share your whereabouts with them.
>"I wouldn't have an issue with this in general if the implementation didn't have the problems described in the summary where people could be unfairly punished or rewarded."
But there is no way to implement it without those problems. So that becomes the problem with the whole concept. I can't blame them for trying, but consumers need to stand up against this type of thing. Insurance used to be mostly about risk sharing against extraordinary events. And it has mutated into life-dictating, privacy-invading, nanny crap.
Re: (Score:2)
They can do this now based on number of accidents, claims, tickets, what kind of vehicle, how many miles you drive, where you live, how long you have been a driver, etc. What they have always done. This "new" way is utter speculation by guessing how good or bad a driver you are based on poor, low-resolution data of "braking", "accelerating", and "cornering" with zero context.
Actually that is false. Insurance companies are clamoring to the "new way" precisely because it provides them more accuracy. The old way is horrendously inaccurate at best, and at worst starts the insurance company from a negative (you need to have an accident before someone can judge your risk based on accidents, you need to have driven for years before someone can make a judgement on whether you're likely to cause an accident). Why should a 21 year old who drives carefully, follows the speed limit, doesn'
Re: (Score:2)
Well, I beat THAT system. (Score:2)
I carry a dumbphone. No apps on it!
Hah! Take THAT Allstate!
Re: (Score:2)
The interesting part of this case will likely be that the Terms of Service of both (a) Allstate's policies and (b) the hosting apps' policies likely both have consent for this. In order to argue
Re: (Score:2)
"That's how insurance companies make a profit though. "
Actual insurance returns a profit by re-investing the income stream from premiums. You even say so yourself that if the customer take the incentive to reduce their risk them the premium goes down.
Re: (Score:2)
I don't know why Allstate needs to track it. I'm from Kansas and my wife is from Oklahoma, and all of I-35 is just normal people driving reasonable speeds and Texans in large vehicles going 125mph past them. Being from Texas *should* cost you more because even if you're not driving like that, you're on the road with lunatics constantly. Allstate's program is opt-in. You get a discount if you do, so maybe "bribe-in" is more accurate. But if people are opting in, great. That's their choice. If the data is sho
First time for everything (Score:2, Troll)
Re: (Score:1, Troll)
There is another shoe to drop, everyone on the planet knows that Ken Paxton would never help the average Texan.
Re: (Score:2)
He probably isn't doing it for the average Texan, he cares not about them. He's merely shaking down the insurance company for a payoff; follow the money, he's just another Maggot.
Now do Progressive (Score:2)
Who else is doing this shady crap?
Nuked (Score:2)
Thanks for this.
Immediately nuked Gas Buddy from my devices.
Hell has frozen over (Score:2)
I actually agree with a lawsuit brought by Ken Paxton...
And I still won't enter a GM sales room until Mary Barra backs down from "only GM software on a GM vehicle" spyware initiative. Looks like I'll keep my '16 Frontier until it rusts away.
Re: (Score:2)
Re: (Score:2)
A friend of mine said "a broken clock ......"
Texas has privacy laws? (Score:1, Flamebait)
That's the real news here. Keep in mind this is the state that thinks it's okay for complete strangers to be able to sue medical staff for providing an abortion.
Re: (Score:2)
What surprised me is that they need to justify raising premiums. Are they regulated?
No context, bad data, bad conclusions (Score:3)
>"For example, if a person was a passenger in a bus, a taxi, or in a friend's car, and that vehicle's driver sped, hard braked, or made a sharp turn,"
And even if they ARE they driver, this is JUNK DATA without context. Pedestrian jumps out in front of me- hard brake and avoid KILLING him- somehow I am a "bad driver". Idiot beside me doesn't look over shoulder and starts turning into me, I know there is nobody to my left and jerk over a lane and avoid being hit- somehow I am a "bad driver." Someone runs a light coming at me from the side and I am mostly clear, slam on accelerator to avoid being hit- somehow I am a "bad driver."
People who allow these companies to collect this low-resolution data with zero context on them are setting themselves up for discrimination and punishment and without even knowing it. And even if you saw the data a month later, no way to defend yourself from it.
Re: (Score:2)
If pedestrians are jumping in front of you more often than they jump in front of another driver, you're much likelier to file a claim. They don't give a shit how well you do or don't drive, what they care about is whether you will cost them money. They also don't give a shit whether they might be unfairly raising prices on passengers as long as they earn more than they spend on the data collection.
Since I'm not a fan of universal stalking, making stalker data just a bit less valuable is a step in the right
Re: (Score:2)
False. For any singular incident this is junk data, but for determining risk over time it is real data. The context is irrelevant. If you brake more often or swerve more often than someone else it really doesn't matter who is at fault or the context of why it was done. Purely in a numbers game you are taking action more aggressively meaning that in a situation where your attention lapses you're more likely to cause an expense for the insurance company. You are a higher risk.
Maybe that's because you drive li
Re: (Score:1)
The Profit Prophets praise Fox Jesus!
isn't this what Tesla Insurance is all about? (Score:2)
Re: isn't this what Tesla Insurance is all about? (Score:2)
And (Score:3)
The CEOs of these companies should be facing jail time as well. Send a real message if you want real results.
Re: (Score:2)
I'd settle for a good, old-fashioned flogging in the town square, with the sentence enforced over two separate events. Let the bastards think about what they've still got coming to them.
Re: (Score:2)
I'd settle for a good, old-fashioned flogging in the town square, with the sentence enforced over two separate events. Let the bastards think about what they've still got coming to them.
Careful. After that CEO got Mangioned, take it as a given the Three Letter Agencies have been instructed to assemble lists of people who make comments like that about the C-suite overlords.