Quantcast StorefrontBacktalk » Blog Archive » Retailers Should Follow Costco’s Loyalty Card-Based Recall Example, Says Consumer Group
advertisement
advertisement

Retailers Should Follow Costco’s Loyalty Card-Based Recall Example, Says Consumer Group

Written by Fred J. Aun
February 10th, 2009
Like this story? Share it
To share this story with people in your social network, please click on the network icons below.

Image-conscious food retailers might be squeamish about using loyalty card information to telephone customers who bought recalled products, but a consumer advocacy lawyer argues that public safety should trump brand protection.

Retailers have an obligation to follow the lead of Costco and use loyalty card information to alert their customers about salmonella-tainted peanut products, and anything else they sell that turns out to be dangerous, said Center for Science in the Public Interest (CSPI) staff attorney Sarah Klein.

Earlier this month, CSPI published an “Open Letter to Food Retailers” in which it praises retailers such as Costco and Wegman’s that mined their loyalty card data to find out, and make phone calls to, customers who bought recalled peanut-based products.

Retailers didn’t exactly jump on that bandwagon, Klein said. “Safeway said they were going to take a hard look at doing it now,” she said. “That’s a step in the right direction. We don’t necessarily have to get into why they hadn’t thought of it before.” PriceChopper is another food seller that does loyalty card-based alerting.

That said, Klein did suggest a reason or two behind retailer reluctance about using loyalty card databases to determine the names of customers who buy recalled products. “The problem is, most retailers don’t want to be associated with a recall in any way,” Klein said. “Their concern is that when you get a call, it is going to cast a bad light on them. But this peanut situation shows that’s incorrect. This kind of contamination gets into everything. There are over 1,000 products implicated. The likelihood you didn’t purchase one is pretty slim.”

Other Implications

Aside from a fear of looking bad, food retailers might be fretting the legal implications. If it becomes a food store’s job to warn people about tainted products, should those stores be expected to contact every customer, including the shoppers who do not have loyalty cards? Costco doesn’t have this concern because anybody who shops at one of the chain’s warehouse stores must be a card-carrying member.

Or, what happens if the customers who purposely avoid signing up for the cards contend they’re being coerced — through fear of being left in the dark about potentially deadly purchases — into becoming cardholders? Los Angeles-based blogger T. J. Sullivan told the L.A. Times he appreciated the peanut-related call he received from Costco. However, Sullivan still worries about the long-term risks of loyalty card information dissemination, pointing to a not-so-unrealistic scenario in which Costco is acquired by a health insurance company that bases policy premiums on the type of food its customers eat.

In lieu of taking the loyalty card-based phone call route, some food retailers are printing recall notices on receipts. Klein said she finds this reaction to be underwhelming at best. “We don’t think that’s sufficient,” she said. “Most consumers don’t look at that gobbledegook at the bottom of a receipt. Nobody’s scanning all that.”

Others, such as Kroger, have empowered their POS systems to flash alerts to cashiers when a recalled item that somehow missed being removed from the store shelves is scanned at the checkout. That system, while great for preventing new cases of disease and/or death, does nothing to help people who bought the potentially poisonous food prior to the discovery of its toxicity. Kroger has also experimented with loyalty card-based phone calls and with store receipt notifications.

Although loyalty cards seem to be an ideal method of dealing with widespread recalls, Klein said it is unlikely the federal Food and Drug Administration (FDA) can require retailers to follow Costco’s lead. “The thing that’s hard is that most customer loyalty programs fall within state contract law,” she said. “It’s hard for the federal government to say retailers should be doing this. They’re governed by the states. However, we are looking at legislation that would modernize the FDA and would work on these kinds of issues from the inception point, not the reaction point.”


advertisement

One Comment | Read Retailers Should Follow Costco’s Loyalty Card-Based Recall Example, Says Consumer Group

  1. Bob Says:

    They should, but will not—they can’t make money doing something honorable. The companies already track your every purchase via the cards and then SELL the info to other companies. Why should they do something good for the customer? COSTCO better be warned that in the USA, no good deed goes unpunished.

Leave a Reply

Newsletter

Quickly catch-up on the latest in E-Commerce and Retail Tech with our free weekly newsletter, with urgent bulletins as news merits.
advertisement

Most Recent Comments

Kill All The Passwords

This article does mention, but does not give enough attention to, the fact that the attacks discussed are only feasible when the encrypted password file can be copied and subjected to an offline attack. The trick is to have authentication performed on a separate, much more strongly secured host - such as an Active Directory Domain Controller, or a Kerberos server, or a NIS+ server, or even using something as banal as an LDAP-over-SSL authentication dialog. In these environments, the odds of the "password file" being stolen and subjected to an offline attack go to near zero, and only online attacks may be carried out by the attacker. With sensible exponential backoff between failed password attempts, lockout after a modest number of failed attempts on a single account, and pattern detection, that minimum 7 character password is quite secure enough. Passwords aren't dead yet for security purposes, and they will be with us for a very long while to come for practical purposes. The trick is to employ them correctly. Read more...
The possibilities you describe are years away from being implemented at best, so for the moment passwords are an ugly reality. Luckily, password managers can easily manage hundreds of passwords of any length. The only thing a user needs to remember is the master password. It seems like an easier task to educate users on how to use password managers rather than implement complex security technology on a global basis. Read more...