Internet Privacy Policies

Presented by:Paul FrenkenPresident, COLAIP

Why a Privacy Policy

The Children's Online Privacy Protection Act of 1998 ("COPPA"), which was enacted October 21, 1998, requires commercial Web sites directed to, or which knowingly collect personal information from, children under 13 to post a notice on the Web site explaining that they collect personal information and how it will be used.[

Gramm-Leach-Bliley Financial Modernization Act of 1999 – The GLB Act requires companies to give consumers privacy notices that explain the institutions' information-sharing practices.

Why a Privacy Policy

California State Law– As of July 1, 2004, California requires any commercial web

site operator (located anywhere) collecting personally identifiable information from consumers in California to post a Privacy Policy in a noticeable location that meets minimum privacy standards. The Privacy Policy must identify what personal information is collected, how it is used, the categories of third parties with whom it might be shared and a description of any available process for consumers to review or request changes to the information collected, a description of the process for notifying consumers of changes in the Privacy Policy and the effective date of the Privacy Policy, among other things.

Why a Privacy Policy

If you sell to a government entity and you have a web site

If you want to be a member of the US Chamber of Commerce

What to Include

Email Usage Cookie Usage Advertiser Usages Special Relationships Server Logging Contact Information

Now What

First, the privacy policy should be posted prominently on the Web site.

Second, the privacy policy must be adhered to by the company.

Third, the policy must also be communicated to everyone in the company so that employees don't inadvertently violate the policy.

Trust is a Must – Seal Programs

81% of customers are concerned about privacy invasion. – Business 2.0

Privacy mark programs function much like the Good Housekeeping Seal of Approval program.

Getting a Mark

                 

Third Party Companies

TRUSTe BBB OnLine WebAssurance WebTrust PrivacyBot.com PrivacyAffiliates.com Online Privacy Alliance

Industry Organizations

International association of Privacy Professionals www.iapp.org

Network Advertising Initiative www.networkadvertising.org

The Direct Marketing Association www.the-dma.org

Web Consortiumwww.w3.org

What is New

P3P StandardP3P is a standardized set of multiple-choice questions, covering all the major aspects of a Web site's privacy policies. It present a clear snapshot of how a site handles personal information about its users. P3P-enabled Web sites make this information available in a standard, machine-readable format. P3P enabled browsers can "read" this snapshot automatically and compare it to the consumer's own set of privacy preferences.

Questions

Contact Info:

Paul Frenkenpfrenken@colaip.orgwww.colaip.org