In a civil complaint (click here for PDF) released Thursday, New York Attorney General Eliot Spitzer accused Washington D.C.-based Gratis Internet of deceptive business practices. The suit requests monetary penalties and an injunction against the activity in question.
In Thursday's filing, the state claims that Gratis violated its own privacy policies by collecting and selling personal information on more than 7 million users, over a period of three and a half years. Gratis sold the information to three independent e-mail marketers, including Datran, in 2004 and 2005, according to the suit. Those marketers went on to fire off tens of millions of unsolicited e-mails to the addresses obtained, the complaint alleged.
The activity allegedly occurred through six Gratis-owned sites: FreeiPods.com and FreeCondoms.com (which it continues to operate), and similar sites offering free DVDs, CDs and video games that were discontinued earlier this year.
In order to secure the "free" goods, visitors must sign up for at least one promotion offered by Gratis' third-party business partners, such as Blockbuster Video, BMG Music Service and CitiBank. They earn freebies by persuading a requisite number of friends to register as well. Gratis receives payments from its partners ranging from $20 to $70 for each participating customer, the court filing said.
The state claims that between 2000 and 2004, Gratis pledged explicitly and repeatedly on its sites to "never" give out, sell or lend its customers' information to anyone, even its business partners.
In a statement sent to CNET News.com, Gratis forcefully denied the allegations, saying the company "at no time in its history ever sold its list to anyone or allowed a company to purchase consumer data, nor has it ever considered doing so, nor will it ever in the future." The company maintained that it has always acted in a responsible and trustworthy manner in its dealings with consumers.
The New York suit drew a chorus of praise from privacy advocates, who said the attorney general's action should send a strong message to companies thinking about putting their client lists up for sale.
"Without strong enforcement, privacy policies are meaningless," said Marc Rotenberg, the executive director of the Electronic Privacy Information Center.