Internet Privacy Policies

1
Internet Privacy Policies

• Presented byPaul FrenkenPresident, COLAIP

2
Why a Privacy Policy

• The Children's Online Privacy Protection Act of
  1998 ("COPPA"), which was enacted October 21,
  1998, requires commercial Web sites directed to,
  or which knowingly collect personal information
  from, children under 13 to post a notice on the
  Web site explaining that they collect personal
  information and how it will be used.
• Gramm-Leach-Bliley Financial Modernization Act of
  1999 The GLB Act requires companies to give
  consumers privacy notices that explain the
  institutions' information-sharing practices.

3
Why a Privacy Policy

• California State Law
• As of July 1, 2004, California requires any
  commercial web site operator (located anywhere)
  collecting personally identifiable information
  from consumers in California to post a Privacy
  Policy in a noticeable location that meets
  minimum privacy standards. The Privacy Policy
  must identify what personal information is
  collected, how it is used, the categories of
  third parties with whom it might be shared and a
  description of any available process for
  consumers to review or request changes to the
  information collected, a description of the
  process for notifying consumers of changes in the
  Privacy Policy and the effective date of the
  Privacy Policy, among other things.

4
Why a Privacy Policy

• If you sell to a government entity and you have a
  web site
• If you want to be a member of the US Chamber of
  Commerce

5
What to Include

• Email Usage
• Cookie Usage
• Advertiser Usages
• Special Relationships
• Server Logging
• Contact Information

6
Now What

• First, the privacy policy should be posted
  prominently on the Web site.
• Second, the privacy policy must be adhered to by
  the company.
• Third, the policy must also be communicated to
  everyone in the company so that employees don't
  inadvertently violate the policy.

7
Trust is a Must Seal Programs

• 81 of customers are concerned about privacy
  invasion. Business 2.0
• Privacy mark programs function much like the Good
  Housekeeping Seal of Approval program.
• Getting a Mark

8
Third Party Companies

• TRUSTe
• BBB OnLine
• WebAssurance
• WebTrust
• PrivacyBot.com
• PrivacyAffiliates.com
• Online Privacy Alliance

9
Industry Organizations

• International association of Privacy
  Professionals www.iapp.org
• Network Advertising Initiative www.networkadvertis
  ing.org
• The Direct Marketing Association www.the-dma.org
  
• Web Consortiumwww.w3.org

10
What is New

• P3P StandardP3P is a standardized set of
  multiple-choice questions, covering all the major
  aspects of a Web site's privacy policies. It
  present a clear snapshot of how a site handles
  personal information about its users. P3P-enabled
  Web sites make this information available in a
  standard, machine-readable format. P3P enabled
  browsers can "read" this snapshot automatically
  and compare it to the consumer's own set of
  privacy preferences.

11
Questions

• Contact Info
• Paul Frenkenpfrenken_at_colaip.orgwww.colaip.org