AT&T has denied using behavioural advertising systems as an ISP, but it does as an advertiser, according to a vendor of such services.

AT&T does not use behavioral advertising or the controversial method of deep packet inspection in its role as an internet service provider, said Dorothy Attwood, AT&T's chief privacy officer and senior vice-president for public policy. She was testifying before the US House of Representatives Subcommittee on Communications, Technology and the Internet.

The hearing focused on ISPs using behavioural advertising and deep packet inspection (DPI), a method of intercepting and examining a user's web traffic. Attwood's testimony did not talk about the company's use of behavioural advertising in its role as an advertiser and its partnership with behavioural advertising vendor AudienceScience.

She seemed to criticise behavioral advertising at the hearing. "Behavioural advertising in its current forms is largely invisible to customers," she told lawmakers. "These new online advertising paradigms must be designed to account for a new set of still-evolving consumer expectations and understandings about how personal information will be used and how personal privacy will be safeguarded."

Attwood told lawmakers AT&T would not use DPI or other behavioural advertising methods without informed customer consent.

AT&T will "avoid thoughtlessly lurching into this realm without proper due diligence", she said. "We will initiate such a program only after testing and validating the various technologies and only after establishing clear and consistent methods and procedures to engage consumers and ensure the protection of, and ultimate consumer control over, consumer information. If AT&T deploys these technologies and processes, it will do so the right way."

But that's not how AT&T partner AudienceScience operates. AudienceScience does not ask for opt-in approval from web surfers, but instead has its website partners disclose their tracking behaviors in their privacy policies. Customers can then opt out of tracking after reading the privacy policy, said Jeff Hirsch, AudienceScience's president and CEO.

"Essentially, there's an implied consent that a consumer is giving, by visiting a site and being able to view that content for free, that they're going to receive advertising," he said. "The idea is to make that advertising more valuable to the advertiser.

AudienceScience does not use deep packet inspection, Hirsch said. Instead, the company uses cookies to track Internet users. AudienceScience doesn't collect personally identifiable information, but it can track internet users across multiple sites using its service, he added.

Hirsch declined to comment on how long AT&T and ad company MEC Interaction have used his company's services, but one report had AT&T using AudienceScience as early as March 2005.

AudienceScience until recently listed AT&T as an advertising partner. AT&T's name was taken off AudienceScience's site after a reporter from pointed it out following Thursday's hearing.

AudienceScience has also taken down a customer testimonial from MEC, which has placed ads for AT&T.