Thanks, Sandra -- I'm in Yahoo groups and hadn't heard about this yet.
Did a Google search on web beacons, and found this info:
They've been used for years -- in Feb. 2001, there was a news item about Congress considering legislation -- partly because "Since many e-mail clients can read HTML e-mail, Web bugs can sometimes be inserted in e-mail. That makes it possible for the company that set the Web bug to match up an e-mail address -- considered personally identifiable information -- with a previously-set cookie. Online advertising company DoubleClick raised the ire of privacy advocates by planning to do just that -- to combine previously-anonymous data profiles with personally identifiable information. "
"A Web beacon can be detected by viewing the source code of a Web page and looking for any IMG tags that load from a different server than the rest of the site. Turning off the browser's cookies will prevent Web beacons from tracking the user's activity. The Web beacon will still account for an anonymous visit, but the user's unique information will not be recorded." quote from Webopedia --
Webopedia - Web Beacons EE Times -- guidelines for web beacons
Quick Summary:
The new guidelines announced today require that:
1. Any use of Web beacons, whether through a Web site or e-mail, requires notice.
2. Notice must include a disclosure that Web beacons are being used; the purpose for which the Web beacons are being used; and, if applicable, a disclosure of any transfer of data to third parties.
3. Organizations that use Web beacons to transfer personally identifiable information -- such as an e-mail address -- to a third party, for purposes unrelated to the reason for which the personally identifiable information was initially collected, must provide choice for such transfers.
4. Organizations that use Web beacons to transfer sensitive information associated with personally identifiable information to a third party must obtain explicit consent (opt-in) for such transfers.
The guidelines create a distinction between third parties -- which are companies that gather personally identifiable information through Web beacons for their own purposes -- and agents -- which are companies that gather data only for the purposes of the Web site or marketer for which they are providing services.