Ashkan Soltani is the executive director of the California Privacy Protection Agency.[1][2] He has previously been the Chief Technologist of the Federal Trade Commission and an independent privacy and security researcher based in Washington, DC.[3]

Ashkan Soltani
Alma materUniversity of California, San Diego (B.A.)
University of California, Berkeley (M.A.)
Occupation(s)Chief Technologist, Federal Trade Commission; Privacy and security researcher
Websiteashkansoltani.org

Education edit

Soltani attended the University of California, San Diego, where he received a bachelor's degree in cognitive science.[4] Soltani would later receive a master's degree from the University of California, Berkeley School of Information.[5]

Career in government edit

Between 2010 and 2011, Soltani worked for the US Federal Trade Commission as a staff technologist in the Division of Privacy and Identity Protection, where he assisted with the investigations of Google and Facebook. Soltani previously worked as the primary technical consultant to The Wall Street Journal's "What They Know" series investigating online privacy.

In 2011, he testified at two different hearings held by US Senate committees focused on privacy related matters. Julia Angwin, in her 2014 book Dragnet Nation, describes Soltani as 'the leading technical expert on ad tracking technology'.[6] He was part of the team at The Washington Post that shared the 2014 Pulitzer Prize for Public Service with The Guardian US and earned the 2014 Gerald Loeb Award for Large Newspapers[7] for their coverage of the disclosures about surveillance done by the US National Security Agency.[8][9][10][11]

In 2021, Soltani became the executive director of the California Privacy Protection Agency.[1]

Subjects of research edit

Flash cookie research edit

Soltani's first high-profile research project was a 2009 study, supported by the National Science Foundation's Team for Research in Ubiquitous Secure Computing, documenting the use of zombie Flash cookies by several online advertising networks.[12] Soltani and his colleagues at Berkeley revealed that websites were recreating tracking cookies after consumers deleted them by storing the unique tracking identifiers in Flash cookies, which were not automatically deleted when consumers cleared their browser cookies.[13]

After the publication of Soltani's research, class action law firms filed suit against several advertising networks and websites. Quantcast, Clearspring and VideoEgg collectively agreed to pay a total of $3.4 million to settle the lawsuits.[14]

ETag tracking research edit

In 2011, Soltani and Berkeley law professor Chris Hoofnagle published a follow-up study, documenting the use of web browser cache ETags to store persistent identifiers.[15] As with the case of Flash cookies, the identifiers stored in the ETags persisted even after consumers deleted their browser cookies.[16] The ETag tracking issue caught the attention of several members of Congress, who wrote to the Federal Trade Commission in September 2011 and urged the agency to investigate the use of advanced tracking technologies as a potentially unfair or deceptive business practice.[17]

Several companies performing ETag based tracking that were identified by the research team were subsequently sued by class action lawyers. In January 2013, KISSmetrics, an online advertising network, settled its ETag related lawsuit for $500,000.[18]

References edit

  1. ^ a b Merken, Sara (2021-10-04). "Former FTC technologist Soltani to head California privacy agency". Reuters. Retrieved 2021-10-05.
  2. ^ "Ashkan Soltani will lead California's Privacy Protection Agency". Protocol — The people, power and politics of tech. 2021-10-04. Retrieved 2021-10-05.
  3. ^ "Federal Trade Commission Appoints Ashkan Soltani as Chief Technologist". Federal Trade Commission. 21 October 2014. Retrieved 21 October 2014.
  4. ^ "Federal Trade Commission Appoints Ashkan Soltani as Chief Technologist". Benton Foundation. 2014-10-21. Retrieved 2021-10-05.
  5. ^ "Ashkan Soltani | Berkman Klein Center". cyber.harvard.edu. 2020-03-24. Retrieved 2021-10-05.
  6. ^ Angwin, Julia (2014). Dragnet Nation. New York, NY: Times Books, Henry Holt & Company. pp. 178. ISBN 978-0805098075.
  7. ^ "UCLA Anderson School of Management Announces 2014 Gerald Loeb Award Winners". UCLA Anderson School of Management. June 24, 2014. Archived from the original on February 1, 2019. Retrieved January 31, 2019.
  8. ^ Barton Gellman; Craig Timberg & Steven Rich (5 October 2013). "Files show NSA targeted Tor encrypted network" (PDF). The Washington Post. (Contributors: Ashkan Soltani and Julie Tate)
  9. ^ Barton Gellman & Ashkan Soltani (15 October 2013). "NSA collects millions of e-mail address books globally" (PDF). The Washington Post. Retrieved 16 April 2014.
  10. ^ Barton Gellman & Ashkan Soltani (31 October 2013). "NSA taps Yahoo, Google links" (PDF). The Washington Post. Retrieved 16 April 2014.
  11. ^ Barton Gellman & Ashkan Soltani (4 December 2013). "NSA tracking cellphone locations worldwide, Snowden documents show" (PDF). The Washington Post. Retrieved 16 April 2014.
  12. ^ Singel, Ryan (2009-08-10). "You Deleted Your Cookies? Think Again". Wired News. Retrieved 2013-01-21.
  13. ^ Soltani, Ashkan; Canty, Shannon; Mayo, Quentin; Thomas, Lauren and Hoofnagle, Chris Jay, "Flash Cookies and Privacy" (August 10, 2009). Available at SSRN: http://ssrn.com/abstract=1446862
  14. ^ Davis, Wendy (2011-11-23). "Metacafe Promises Not To Use Flash Cookies For Tracking". MediaPost New. Retrieved 2013-01-21.
  15. ^ Ayenson, Mika, Wambach, Dietrich James, Soltani, Ashkan, Good, Nathan and Hoofnagle, Chris Jay, Flash Cookies and Privacy II: Now with HTML5 and ETag Respawning (July 29, 2011). Available at SSRN: http://ssrn.com/abstract=1898390
  16. ^ Singel, Ryan (2011-07-29). "Researchers Expose Cunning Online Tracking Service That Can't Be Dodged". Wired News. Retrieved 2013-01-21.
  17. ^ Lee, Timothy B. (2011-09-27). "Congressmen blast "supercookies" as privacy menace". Ars Technica. Retrieved 2013-01-21.
  18. ^ Davis, Wendy (2013-01-23). "KISSmetrics Finalizes Supercookies Settlement". MediaPost New. Retrieved 2013-01-18.