Year: 2021

22 Jan 2021

UK resumes privacy oversight of adtech, warns platform audits are coming

The UK’s data watchdog has restarted an investigation of adtech practices that, since 2018, have been subject to scores of complaints across Europe under the bloc’s General Data Protection Regulation (GDPR).

The high velocity trading of Internet users’ personal data can’t possibly be compliant with GDPR’s requirement that such information is adequately secured, the complaints contend.

Other concerns attached to real-time bidding (RTB) focus on consent, questioning how this can meet the required legal standard with data being broadcast to so many companies — including sensitive information, such as health data or religious and political affiliation and sexual orientation.

Since the first complaints were filed the UK’s Information Commissioner’s Office (ICO) has raised its own concerns over what it said are systemic problems with lawfulness in the adtech sector. But last year announced it was pausing its investigation on account of disruption to businesses from the COVID-19 pandemic.

Today it said it’s unpausing its multi-year probe to keep on prodding.

In an update on its website, deputy commissioner, Simon McDougall, ICO, who takes care of “Regulatory Innovation and Technology” at the agency, writes that the eight-month freeze is over. And the audits are coming.

“We have now resumed our investigation,” he says. “Enabling transparency and protecting vulnerable citizens are priorities for the ICO. The complex system of RTB can use people’s sensitive personal data to serve adverts and requires people’s explicit consent, which is not happening right now.”

“Sharing people’s data with potentially hundreds of companies, without properly assessing and addressing the risk of these counterparties, also raises questions around the security and retention of this data,” he goes on. “Our work will continue with a series of audits focusing on digital market platforms and we will be issuing assessment notices to specific companies in the coming months. The outcome of these audits will give us a clearer picture of the state of the industry.”

It’s not clear what data the ICO still lacks to come to a decision on complaints that are approaching 2.5 years old at this point. But the ICO has committed to resume looking at adtech — including at data brokers, per McDougall, who writes that “we will be reviewing the role of data brokers in this adtech eco-system”.

“The investigation is vast and complex and, because of the sensitivity of the work, there will be times where it won’t be possible to provide regular updates. However, we are committed to publishing our final findings, once the investigation is concluded,” he goes on, managing expectations of any swift resolution to this vintage GDPR complaint.

Commenting on the ICO’s continued reluctance to take enforcement action against adtech despite mounds of evidence of rampant breaches of the law, Johnny Ryan, a senior fellow at the Irish Council for Civil Liberties who was involved in filing the first batch of RTB GDPR complaints — and continues to be a vocal critic of EU regulatory inaction against adtech — told TechCrunch: “It seems to me that the facts are clearly set out in the ICO’s mid 2019 adtech report.

“Indeed, that report merely confirms the evidence that accompanied our complaints in September 2018 in Ireland and the UK. It is therefore unclear why the ICO requires several months further. Nor is it clear why the ICO accepted empty gestures from the IAB and Google a year ago.”

“I have since published evidence of the impact that failure to enforce has had: Including documented use of RTB data to influence an election,” he added. “As that evidence shows, the scale of the vast data breach caused by the RTB system has increased significantly in the three years since I blew the whistle to the ICO in early 2018.”

Despite plentiful data on the scale of the personal data leakage involved in RTB, and widespread concern that all sorts of tangible harms are flowing from adtech’s mass surveillance of Internet users (from discrimination and societal division to voter manipulation), the ICO is in no rush to enforce.

In fact, it quietly closed the 2018 complaint last year — telling the complainants it believed it had investigated the matter “to the extent appropriate”. It’s in the process of being sued by the complainants as a result — for, essentially, doing nothing about their complaint. (The Open Rights Group, which is involved in that legal action, is running this crowdfunder to raise money to take the ICO to court.)

So what does the ICO’s great adtech investigation unpausing mean exactly for the sector?

Not much more than gentle notice you might be the recipient of an “assessment notice” at some future point, per the latest mildly worded ICO blog post (and judging its past performance).

Per McDougall, all organizations should be “assessing how they use personal data as a matter of urgency”.

He has also committed the ICO to publishing “final findings” at some future point. So — to follow, post-pause — yet another report. And more audits.

“We already have existing, comprehensive guidance in this area, which applies to RTB and adtech in the same way it does to other types of processing — particularly in respect of consentlegitimate interestsdata protection by design and data protection impact assessments (DPIAs),” he goes on, eschewing talk of any firmer consequences following should all that guidance continue being roundly ignored.

He ends the post with a nod to the Competition and Markets Authority’s recent investigation of Google’s Privacy Sandbox proposals (to phase out support for third party cookies on Chrome) — saying the ICO is “continuing” to work the CMA on that active antitrust complaint. You’ll have to fill in the blanks as to exactly what work it might be doing there — because, again, McDougall isn’t saying.

If it’s a veiled threat to the adtech industry to finally ‘get with the ICO’s privacy program’, or risk not having it fighting adtech’s corner in that crux antitrust vs privacy complaint, it really is gossamer thin.

22 Jan 2021

Apple reportedly planning thinner and lighter MacBook Air with MagSafe charging

Apple is said to be working on a new version of the MacBook Air with a brand new physical case design that’s both thinner and lighter than its current offering, which was updated with Apple’s M1 chip late last year, per a new Bloomberg report. The plan is to release it as early as late 2021 or 2022, according to the report’s sources, and it will also include MagSafe charging (which is also said to be returning on Apple’s next MacBook Pro models sometime in 2021).

MagSafe would offer power delivery and charging, while two USB 4 ports would provide data connectivity on the new MacBook Air. The display size will remain at its current 13-inch diagonal measurement, but Apple will reportedly realize smaller overall sizes by reducing the bevel that surrounds the screen’s edge, among other sizing changes.

Apple has a plan to revamp its entire Mac lineup with its own Apple Silicon processors over the course of the next two years. It debuted its first Apple Silicon Macs, powered by its M1 chip, late last year, and the resulting performance benefits vs. their Intel-powered predecessors have been substantial. The physical designs remained essentially the same, however, prompting speculation as to when Apple would introduce new case designs to further distinguish its new Macs from their older models.

The company is also reportedly working on new MacBook Pros with MagSafe charging, which could also ditch the company’s controversial TouchBar interface – and, again according to Bloomberg, bring back a dedicated SD card slot. All these changes would actually be reversions of design changes Apple made when it introduced the current physical notebook Mac designs, beginning with the first Retina display MacBook Pro in 2012, but they address usability complaints by some of the company’s enthusiast and professional customers.

22 Jan 2021

Privacy complaint targets European parliament’s COVID-19 test-booking site

The European Parliament is being investigated by the EU’s lead data regulator over a complaint that a website it set up for MEPs to book coronavirus tests may have violated data protection laws.

The complaint, which has been filed by six MEPs and is being supported by the privacy campaign group noyb, alleges third party trackers were dropped without proper consent and that cookie banners presented to visitors were confusing and deceptively designed.

It also alleges personal data was transferred to the US without a valid legal basis, making reference to a landmark legal ruling by Europe’s top court last summer (aka Schrems II).

The European Data Protection Supervisor (EDPS), which oversees EU institutions’ compliance with data rules, confirmed receipt of the complaint and said it has begun investigating.

It also said the “litigious cookies” had been disabled following the complaints, adding that the parliament told it no user data had in fact been transferred outside the EU.

“A complaint was indeed filed by some MEPs about the European Parliament’s coronavirus testing website; the EDPS has started investigating it in accordance with Article 57(1)(e) EUDPR (GDPR for EU institutions),” an EDPS spokesman told TechCrunch. “Following this complaint, the Data Protection Office of the European Parliament informed the EDPS that the litigious cookies were now disabled on the website and confirmed that no user data was sent to outside the European Union.”

“The EDPS is currently assessing this website to ensure compliance with EUDPR requirements. EDPS findings will be communicated to the controller and complainants in due course,” it added.

MEP, Alexandra Geese, of Germany’s Greens, filed an initial complaint with the EDPS on behalf of other parliamentarians.

Two of the MEPs that have joined the complaint and are making their names public are Patrick Breyer and Mikuláš Peksa — both members of the Pirate Party, in Germany and the Czech Republic respectively.

We’ve reached out to the European Parliament and the company it used to supply the testing website for comment.

The complaint is noteworthy for a couple of reasons. Firstly because the allegations of a failure to uphold regional data protection rules look pretty embarrassing for an EU institution. Data protection may also feel especially important for “politically exposed persons like Members and staff of the European Parliament”, as noyb puts it.

Back in 2019 the European Parliament was also sanctioned by the EDPS over use of US-based digital campaign company, NationBuilder, to process citizens’ voter data ahead of the spring elections — in the regulator’s first ever such enforcement of an EU institution.

So it’s not the first time the parliament has got in hot water over its attention to detail vis-a-vis third party data processors (the parliament’s COVID-19 test registration website is being provided by a German company called Ecolog Deutschland GmbH). Once may be an oversight, twice starts to look sloppy…

Secondly, the complaint could offer a relatively quick route for a referral to the EU’s top court, the CJEU, to further clarify interpretation of Schrems II — a ruling that has implications for thousands of businesses involved in transferring personal data out of the EU — should there be a follow-on challenge to a decision by the EDPS.

“The decisions of the EDPS can be directly challenged before the Court of Justice of the EU,” noyb notes in a press release. “This means that the appeal can be brought directly to the highest court of the EU, in charge of the uniform interpretation of EU law. This is especially interesting as noyb is working on multiple other cases raising similar issues before national DPAs.”

Guidance for businesses involved in transferring data out of the EU who are trying to understand how to (or often whether they can) be compliant with data protection law, post-Schrems II, is so far limited to what EU regulators have put out.

Further interpretation by the CJEU could bring more clarifying light — and, indeed, less wiggle room for processors wanting to keep schlepping Europeans’ data over the pond legally, depending on how the cookie crumbles (if you’ll pardon the pun).

noyb notes that the complaint asks the EDPS to prohibit transfers that violate EU law.

“Public authorities, and in particular the EU institutions, have to lead by example to comply with the law,” said Max Schrems, honorary chairman of noyb, in a statement. “This is also true when it comes to transfers of data outside of the EU. By using US providers, the European Parliament enabled the NSA to access data of its staff and its members.”

Per the complaint, concerns about third party trackers and data transfers were initially raised to the parliament last October — after an MEP used a tracker scanning tool to analyze the COVID-19 test booking website and found a total of 150 third-party requests and a cookie were placed on her browser.

Specifically, the EcoCare COVID-19 testing registration website was found to drop a cookie from the US-based company Stripe, as well as including many more third-party requests from Google and Stripe.

The complaint also notes that a data protection notice on the site informed users that data on their usage generated by the use of Google Analytics is “transmitted to and stored on a Google server in the US”.

Where consent was concerned, the site was found to serve users with two different conflicting data protection notices — with one containing a (presumably copypasted) reference to Brussels Airport.

Different consent flows were also presented, depending on the user’s region, with some visitors being offered no clear opt out button. The cookie notices were also found to contain a ‘dark pattern’ nudge toward a bright green button for ‘accepting all’ processing, as well as confusing wording for unclear alternatives.

A screengrab of the cookie consent prompt that the parliament’s COVID-19 test booking website displayed at the time of writing – with still no clearly apparent opt-out for non-essential cookies (Image credit: TechCrunch)

The EU has stringent requirements for (legally) gathering consents for (non-essential) cookies and other third party tracking technologies which states that consent must be clearly informed, specific and freely given.

In 2019, Europe’s top court further confirmed that consent must be obtained prior to dropping non-essential trackers. (Health-related data also generally carries a higher consent-bar to process legally in the EU, although in this case the personal information relates to appointment registrations rather than special category medical data).

The complaints allege that EU cookie consent requirements are not being met on the website.

While the presence of requests for US-based services (and the reference to storing data in the US) is a legal problem in light of the Schrems II judgement.

The US no longer enjoys legally frictionless flows of personal data out of the EU after the CJEU torpedoed the adequacy arrangement the Commission had granted (invalidating the EU-US Privacy Shield mechanism) — which in turn means transfers of data on EU peoples to US-based companies are complicated.

Data controllers are responsible for assessing each such proposed transfer, on a case by case basis. A data transfer mechanism called Standard Contractual Clauses was not invalidated by the CJEU. But the court made it clear SCCs can only be used for transfers to third countries where data protection is essentially equivalent to the legal regime offered in the EU — doing so at the same time as saying the US does not meet that standard.

Guidance from the European Data Protection Board in the wake of the ruling suggests that some EU-US data transfers may be possible to carry in compliance with European law. Such as those that involve encrypted data with no access by the receiving US-based entity.

However the bar for compliance varies depending on the specific context and case.

Additionally, for a subset of companies that are definitely subject to US surveillance law (such as Google) the compliance bar may be impossibly high — as surveillance law is the main legal sticking point for EU-US transfers.

So, once again, it’s not a good look for the parliament website to have had a notice on its COVID-19 testing website that said personal data would be transferred to a Google’s server in the US. (Even if that functionality had not been activated, as seems to have been claimed.)

Another reason the complaint against the European Parliament is noteworthy is that it further highlights how much web infrastructure in use within Europe could be risking legal sanction for failing to comply with regional data protection rules. If the European Parliament can’t get it right, who is?

noyb filed a raft of complaints against EU websites last year which it had identified still sending data to the US via Google Analytics and/or Facebook Connect integrations a short while after the Schrems II ruling. (Those complaints are being looked into by DPAs across the EU.)

Facebook’s EU data transfers are also very much on the hook here. Earlier this month the tech giant’s lead EU data regulator agreed to ‘swiftly resolve’ a long-standing complaint over its transfers.

Schrems filed that complaint all the way back in 2013. He told us he expects the case to be resolved this year, likely within around six to nine months. So a final decision should come in 2021.

He has previously suggested the only way for Facebook to fix the data transfers issue is to federate its service, storing European users’ data locally. While last year the tech giant was forced to deny it would shut its service in Europe if its lead EU regulator followed through on enforcing a preliminary order to suspend transfers (which it blocked by applying for a judicial review of the Irish DPC’s processes).

The alternative outcome Facebook has been lobbying for is some kind of a political resolution to the legal uncertainty clouding EU-US data transfers. However the European Commission has warned there’s no quick fix — and reform of US surveillance law is needed.

So with options for continued icing of EU data protection enforcement against US tech giants melting fast in the face of bar-setting CJEU rulings and ongoing strategic litigation like this latest noyb-supported complaint pressure is only going to keep building for pro-privacy reform of US surveillance law. Not that Facebook has openly come out in support of reforming FISA yet.

22 Jan 2021

Didi to subsidize trips for vaccinations with $10M fund

As countries around the world prepare to vaccinate people against the coronavirus, tech companies are rushing to demonstrate their willingness to help fight the deadly virus. China’s ride-hailing leader Didi Chuxing is pledging a $10 million fund to support COVID-19 vaccination efforts in 13 markets outside its home country China, the company said on Friday.

The multi-purpose fund will be used to reduce fees for passengers going to vaccination appointments and frontline healthcare workers traveling to vaccination locations. It will also sponsor future measures based on a market’s local needs, Didi said, adding that it will continue working with the respective governments. It’s unclear how the company plans to allocate the funds across the dozens of markets.

Like other tech firms, Didi has responded swiftly to the COVID-19 outbreak by offering relief measures. It said it has so far funded more than six million free or discounted rides and meals for frontline healthcare workers and distributed more than six million masks and sanitation kits to driver and courier partners in its international markets.

In China, the ride hailing company has made similar efforts, including financial assistance like insurance plans for drivers with confirmed cases or those undergoing quarantine.

“The vaccination support initiative is a crucial step in our local recovery effort across the world,” said Jean Liu, president of Didi.

“The incredible commitment and agility of Didi teams, together with a safety system built for complex mobility scenarios, play a critical role in protecting our people and ensuring essential services throughout these challenging times. We will continue to stand by our partners and communities to get our cities moving again.”

The SoftBank-backed company took a hit when it temporarily suspended its popular and lucrative carpooling service following two passenger incidents. The startup remains one of China’s most valuable private tech companies and rumors have swirled for a few years that it is planning an initial public offering, which the company has denied.

Didi has garnered over 550 million users across the Asia Pacific, Latin
America and Russia by offering taxi hailing, private car hailing, rideshare, buses, bikes and e-bikes, and it enables over 10 billion passenger trips a year as of late. It has a nascent autonomous driving arm backed by SoftBank and is among a group of Chinese upstart AI companies aggressively developing and testing autonomous vehicles. It’s also working with China’s electric carmaking giant BYD to co-design a model tailored for ride-hailing.

22 Jan 2021

China’s draft payments rules put Ant, Tencent on notice

A string of recent events in China’s payments industry suggests the duopoly comprising Ant Group and Tencent may be getting a shakeup.

Following the abrupt call-off of Ant’s public sale and a government directive to reform the firm’s business, the Chinese authorities sent another message this week signaling its plan to curb concentration in the flourishing digital payments industry.

The set of draft rules, designed to regulate non-bank payments and released by the People’s Bank of China (PBOC) this week, said any non-bank payments processor with over one-third of the non-bank payments market or two companies with a combined half of the market could be subject to regulatory warnings from the anti-monopoly authority under the State Council.

Meanwhile, a single non-bank payments provider with over one half of the digital payments market or two companies with a combined two-thirds of the market could be investigated for whether they constitute a monopoly.

The difference between the two rules is nuanced here, with the second stipulation focusing on digital payments as opposed to non-bank payments in the first.

Furthermore, the rules did not specify how authorities measure an organization’s market share, say, whether the judgment is based on an entity’s total transaction value, its transaction volume, or other metrics.

Alipay processed over half of China’s third-party payments transactions in the first quarter of 2020, according to market researcher iResearch, while Tencent handled nearly 40% of the payments in the same period.

 

As China heightens scrutiny over its payments giants, it’s also opening up the financial market to international players. In December, Goldman Sachs moved to take full ownership of its Chinese joint venture. This month, PayPal became the first foreign company with 100% control of a payments business in China after it bought out the remaining stake in its local payments partner Guofubao.

Industry experts told TechCrunch that PayPal won’t likely go after the domestic payments giants but may instead explore opportunities in cross-border payments, a market with established players like XTransfer, which was founded by a team of Ant veterans.

Ant and Tencent also face competition from other Chinese internet firms. Companies ranging from food delivery platform Meituan, e-commerce platforms Pinduoduo and JD.com, to TikTok’s parent firm ByteDance have introduced their own e-wallets, though none of them have posed an imminent threat to Alipay or WeChat Pay.

The comprehensive proposal from PBOC also defines how payments processors handle customer data. Non-bank payments services are to store certain user information and transaction history and cooperate with relevant authorities on data checks. Companies are also required to obtain user consent and make clear to customers how their data are collected and used, a rule that reflects China’s broader effort to clamp down on unscrupulous data collection.

22 Jan 2021

JustKitchen is using cloud kitchens to create the next generation of restaurant franchising

JustKitchen operates cloud kitchens, but the company goes beyond providing cooking facilities for delivery meals. Instead, it sees food as a content play, with recipes and branding instead of music or shows as the content, and wants to create the next iteration of food franchises. JustKitchen currently operates its “hub and spoke” model in Taiwan, with plans to expand four other Asian markets, including Hong Kong and Singapore, and the United States this year.

Launched last year, JustKitchen currently offers 14 brands in Taiwan, including Smith & Wollensky and TGI Fridays. Ingredients are first prepped in a “hub” kitchen, before being sent to smaller “spokes” for final assembly and pickup by delivery partners, including Uber Eats and FoodPanda. To reduce operational costs, spokes are spread throughout cities for quicker deliveries and the brands each prepares is based on what is ordered most frequently in the area.

In addition to licensing deals, JustKitchen also develops its own brands and performs research and development for its partners. To enable that, chief operating officer Kenneth Wu told TechCrunch that JustKitchen is moving to a more decentralized model, which means its hub kitchens will be used primarily for R&D, and production at some of its spoke kitchens will be outsourced to other food vendors and manufacturers. The company’s long-term plan is to license spoke operation to franchisees, while providing order management software and content (i.e. recipes, packaging and branding) to maintain consistent quality.

Demand for meal and grocery deliveries increased dramatically during the COVID-19 pandemic. In the United States, this means food deliveries made up about 13% of the restaurant market in 2020, compared to the 9% forecast before the pandemic, according to research firm Statista, and may rise to 21% by 2025.

But on-demand food delivery businesses are notoriously expensive to operate, with low margins despite markups and fees. By centralizing food preparation and pickup, cloud kitchens (also called ghost kitchens or dark kitchens) are supposed to increase profitability while ensuring standardized quality. Not surprisingly, companies in the space have received significant attention, including former Uber chief executive officer Travis Kalanick’s CloudKitchens, Kitchen United and REEF, which recently raised $1 billion led by SoftBank.

Wu, whose food delivery startup Milk and Eggs was acquired by GrubHub in 2019, said one of the main ways JustKitchen differentiates is by focusing on operations and content in addition to kitchen infrastructure. Before partnering with restaurants and other brands, JustKitchen meets with them to design a menu specifically for takeout and delivery. Once a menu is launched, it is produced by JustKitchen instead of the brands, who are paid royalties. For restaurants that operate only one brick-and-mortar location, this gives them an opportunity to expand into multiple neighborhoods and cities (or countries, when JustKitchen begins its international expansion) simultaneously, a new take on the franchising model for the on-demand delivery era.

One of JustKitchen's delivery meals, with roast chicken and vegetables

One of JustKitchen’s delivery meals

Each spoke kitchen puts the final touches on meal before handing them to delivery partners. Spoke kitchens are smaller than hubs, closer to customers, and the goal is to have a high revenue to square footage ratio.

“The thesis in general is how do you get economies of scale or a large volume at the hub, or the central kitchen where you’re making it, and then send it out deep into the community from the spokes, where they can do a short last-mile delivery,” said Wu.

JustKitchen says it can cut industry standard delivery times by half, and that its restaurant partners have seen 40% month on month growth. It also makes it easier for delivery providers like Uber Eats to stack orders, which means having a driver pick up three or four orders at a time for separate addresses. This reduces costs, but is usually only possible at high-volume restaurants, like fast food chain locations. Since JustKitchen offers several brands in one spoke, this gives delivery platforms more opportunities to stack orders from different brands.

In addition to partnerships, JustKitchen also develops its own food brands, using data analytics from several sources to predict demand. The first source is its own platform, since customers can order directly from Just Kitchen. It also gets high-level data from delivery partners that lets them see food preferences and cart sizes in different regions, and uses general demographic data from governments and third-party providers with information about population density, age groups, average income and spending. This allows it to plan what brands to launch in different locations and during different times of the day, since JustKitchen offers breakfast, lunch and dinner.

JustKitchen is incorporated in Canada, but launched in Taiwan first because of its population density and food delivery’s popularity. Before the COVID-19 pandemic, food delivery penetration in the U.S. and Europe was below 20%, but in Taiwan, it was already around 30% to 40%, Wu said. The new demand for food delivery in the U.S. “is part of the new norm and we believe that is not going away,” he added. JustKitchen is preparing to launch in Seattle and several Californian cities, where it already has partners and kitchen infrastructure.

“Our goal is to focus on software and content, and give franchisees operations so they have a turnkey franchise to launch immediately,” said Wu. “We have the content and they can pick whatever they want. They have software to integrate, recipes and we do the food manufacturing and sourcing to control quality, and ultimately they will operate the single location.”

22 Jan 2021

Elon Musk is donating $100M to find the best carbon capture technology

Elon Musk said Thursday via a tweet that he will donate $100 million towards a prize for the best carbon capture technology.

Musk, who recently surpassed Amazon’s Jeff Bezos to become the world’s richest person, didn’t provide any more details except to add in an accompanying tweet the “details will come next week.” It’s unclear if this is a contribution to another organization that is putting together a prize such as the Xprize or if this is another Musk-led production.

 

The broad definition of carbon capture and storage is as the name implies. Waste carbon dioxide emitted at a refinery or factory is captured at the source and then stored in an aim to remove the potential harmful byproduct from the environment and mitigate climate change. It’s not a new pursuit and numerous companies have popped up over the past two decades with varying means of achieving the same end goal.

The high upfront cost to carbon capture and storage or sequestration (CCS) has been a primary hurdle for the technology. However, there are companies that have found promise in a carbon capture and utilization — a cousin to CCS in which the collected emissions are then converted to other more valuable uses.

For instance, LanzaTech has developed technology that captures waste gas emissions and uses bacteria to turn it into useable ethanol fuel. A bioreactor is used to convert into liquids captured and compressed waste emissions from a steel mill or factory or any other emissions-producing enterprises. The core technology of LanzaTech is a bacteria that likes to eat these dirty gas streams. As the bacteria eats the emissions it essentially ferments them and emits ethanol. The ethanol can then be turned into various products. LanzaTech is spinning off businesses that specialize in a different product. The company has created a spin-off called LanzaJet and is working on other possible product such as converting ethnaol to ethylene, which is used to make polyethylene for bottles and PEP for fibers used to make clothes.

Other examples include Climeworks and Carbon Engineering.

Climeworks, a Swiss startup, specializes in direct air capture. Direct air capture uses filters to grab carbon dioxide from the air. The emissions are then either stored or sold for other uses, including fertilizer or even to add bubbles found in soda-type drinks.  Carbon Engineering, is Canadian company that removes carbon dioxide from the atmosphere and processes it for use in enhanced oil recovery or even to create new synthetic fuels.

22 Jan 2021

Chinese esports player VSPN closes $60M Series B+ round to boost its international strategy

Esports “total solutions provider” VSPN (Versus Programming Network) has closed a $60 million Series B+ funding round, joined by Prospect Avenue Capital (PAC), Guotai Junan International and Nan Fung Group.

VSPN facilitates esports competitions in China, which is a massive industry and has expanded into related areas such as esports venues. It is the principal tournament organizer and broadcaster for a number of top competitions, partnering with more than 70% of China’s eSports tournaments.

The “B+” funding round comes only three months after the company raised around $100 million in a Series B funding round, led by Tencent Holdings.

This funding round will, among other things, be used to branch out VSPN’s overseas esports services.

Dino Ying, Founder, and CEO of VSPN said in a statement: “The esports industry is through its nascent phase and is entering a new era. In this coming year, we at VSPN look forward to showcasing diversified esports products and content… and we are counting the days until the pandemic is over.”

Ming Liao, the co-founder of PAC, commented: “As a one-of-its-kind company in the capital market, VSPN is renowned for its financial management; these credentials will be strong foundations for VSPN’s future development.”

Xuan Zhao, Head of Private Equity at Guotai Junan International said: “We at Guotai Junan International are very optimistic of VSPN’s sharp market insight as well as their team’s exceptional business model.”

Meng Gao, Managing Director at Nan Fung Group’s CEO’s Office said: “Nan Fung is honored to be a part of this round of investment for VSPN in strengthening their current business model and promoting the rapid development of emerging services and the esports streaming ecosystem.”

22 Jan 2021

Google’s parent firm is shutting down Loon connectivity project

Google’s parent firm Alphabet is done exploring with the idea of using giant balloons to beam high-speed internet in remote parts of the world.

The firm said on Thursday evening that it was winding down Loon after it could not find a sustainable business model and willing partners. This is the second major connectivity effort Google has killed in recent years. The Android-maker last year ended Google Station, a project through which it provided internet at hundreds of railway stations and several other public places.

“We talk a lot about connecting the next billion users, but the reality is Loon has been chasing the hardest problem of all in connectivity — the last billion users,” said Alastair Westgarth, chief executive of Loon, in a blog post.

“The communities in areas too difficult or remote to reach, or the areas where delivering service with existing technologies is just too expensive for everyday people. While we’ve found a number of willing partners along the way, we haven’t found a way to get the costs low enough to build a long-term, sustainable business. Developing radical new technology is inherently risky, but that doesn’t make breaking this news any easier.”

More to follow…

 

21 Jan 2021

Telehealth startup Hims fell in its public trading debut — and that’s fine with its CEO

Hims & Hers, a San Francisco-based telehealth startup that sells sexual wellness and other health products and services to millennials, began trading publicly today on the NYSE after completing a reverse merger with the blank-check company Oaktree Acquisition Corp.

Its shares slipped a bit, ending the day down 5% from where they started, but the company, which was founded in 2017 and now claims nearly 300,000 paying subscribers for its various offerings, has never been focused on a splashy headline about its first-day performance, cofounder and CEO Andrew Dudum told us earlier today.

On the contrary, Dudum says that while Hims might have once imagined a traditional IPO, it decided to go the special purpose acquisition company route after being approached by a SPAC led by renowned money manager Howard Marks, the founder of the global alternative investment firm Oaktree Capital Management. (“We fell in love with the Oaktree team and the capital market experience and deep resources they have.”)

We talked with Dudum about that SPAC’s structure; the lockups involved now that Him’s shares are trading; and how much of the business still centers around one if its first offerings, which was generic versions of erectile dysfunction pills. Our conversation has been edited lightly for length and clarity.

TC: You’re a Bay Area-based company selling to a mostly U.S. audience. How are you thinking about expanding that footprint geographically?

AD: We do have a small operation selling in the U.K.; we’re getting our feet wet in that market and building out a team and infrastructure and fulfillment. If you look at the regulatory landscape, there’s a huge amount of room [to grow] in Europe, Australia, Canada, the Middle East and Asia, and so in that order, we’ll start to [move into those markets].

TC: What is your average customer cost? 

AD: It has come down from $200 when we first launched, to roughly $100 last year, and we make, on average, close to $300 in the first couple of years in terms of a patient’s lifetime value.

TC: How quickly do customers churn?

AD: We break down lifetime value projections by quarter cohorts, and quarter over quarter, year over year, we’re monetizing each of these cohorts better, with high margin profiles.

As of last quarter, the business was growing 90% year-over-year, with 76% gross margins and greater cash efficiency, and that’s because as we provide more offerings, there is more cross purchasing. Also, word of mouth is becoming more of a dynamic, with more than 50% of the traffic to the site free at this point because we have built a brand with a young demographic.

TC: When are you projecting that you’ll turn profitable?

AD: We’ve reduced our annual burn and increased our margin efficiency and organic growth, so on a quarterly basis, we think in the next couple of years is a real possibility.

Image Credits: Hims & Hers

TC: Hims’s first wellness offerings included pills for male pattern hair loss and erectile dysfunction. How much revenue does that ED business account for?

AD: What we’ve disclosed is that roughly half [of our revenue] is that sexual health category — which includes [medicines for] generic erectile dysfunction, birth control, STDs, UTIs and premature ejaculation. The other half is predominately dermatology, including hair care [to address hair loss] and acne, and we’ve more recently moved into primary care and behavioral health.

TC: For retail investors, how do you differentiate the business from that of your rival Ro, which heavily promotes its ED products?

AD: There are a number of core differences between us and public and private players. First is our real focus on diversifying our offerings. With our focus on sexual health, dermatology, primary care and behavioral health, it’s in our DNA to quickly expand into new businesses.

We also think we’re different from most [rivals] in that we really invest time in building deep relationships with [those who represent] the future of healthcare markets — people in their teens, 20s and 30s. This demographic has a different set of tech expectations and consumer expectations than people in their 40s, 50s and 60s, and if we want to build for the future, that means building for largest body of payers in the future.

Traditional healthcare companies monetize only the sick, but optimizing around that demographic precludes you from understanding what the next generation really needs and wants. I’ve never seen such a divergence between a patient population and legacy experience, and that’s a real advantage to us as a business.

TC: Hims just went public through a SPAC in a deal that gives the company around $280 million in cash – $205 million of that from Oaktree’s blank-check company and another $75 million through a private placement deal. How much runway does that give you?

AD: The company doesn’t burn a tremendous amount — between $10 million and $20 million a year — so a relatively long runway if we keep operating the business as is. But it does allow us to expand and grow into new businesses, too, including into big categories like sleep, infertility, diabetes and other chronic conditions.

TC: What about acquisitions?

AD: We’ll keep an eye open for strategic opportunities and consolidation opportunities. More than a dozen businesses a month come to us to be consolidated into the brand, but generally speaking, we’ve had the belief that so much is in front of us that we don’t want to be distracted.

TC: Is there a lockup period for anyone?

AD: There’s a traditional lock-up for executives and employees and the board.

TC: Did your SPAC sponsors get a board seat?

AD: No.

TC: How much do they now own of the company, and can they sell?

AD: Oaktree owns a couple percent and [the syndicate they brought to do the private placement] [owns] 12% But the very reason we went with them was the quality of the team and the organization . . . and they have the added incentive for the next year or two from a compensation standpoint for the company to succeed and to prove [out their thesis that Hims is a smart investment].

TC: Do you think the traditional IPO process is broken?

AD: The traditional IPO market hasn’t changed. It takes 12 to 18 months of preparation, which is a crazy amount of time for management to be distracted, then there’s this one-day PIPE that gives institutions a tremendous amount of money instantaneously. Maybe it makes for a good CNBC headline but at tremendous cost to the company. It’s atrocious. If you were a founder or employee and getting diluted twice as much as you have to be, you’d be really upset. It’s no surprise to me that founders like myself are looking at other modalities with better pricing and better structures.