NEWSLETTERS
 

CIO.com updates, insights and advice on technology, management and your career.

 CIO BlackBerry News and Tips
 CIO Research and Analysis
 CIO Microsoft
 CIO Insider
 
 
 
SUBSCRIBE TO CIO
 
Are you involved in setting the direction for your company's IT budget or strategy?

Apply today for a FREE subscription to CIO Magazine!

 


Tue, Oct 27, 2009 11:26 EDT

Creating a Privacy Policy Part V

final article in writing a privacy policy

Topic: Security

Blog: Bare Knuckles Security

Current Rating: 4 Comment: 1

 בע"ה

Hello and thank you for reading this final installment in the How to Create a Privacy Policy series of mine.

Here is what we accomplished so far:

Sample Privacy Policy

 

Purpose:  To define privacy expectations of visitors to the ArielSilverstone.com website.
What We Collect and HowWe respect the privacy of our visitors.   We generally do not collect personally-identifying information on this website.   We do, however:
a) Employ certain automated tools that collect statistical information visitors to our site.
b) Provide you with the option to leave comments, or contact us, by entering your email address and, optionally, other contact information as you may choose to share with us.
c) From time to time, we may offer you to opportunity to participate in surveys or polls, and we may be provided with such information as you choose to provide us.
Cookies

In general, we do not use persistent cookies, unless you request that our site remember you.   Other cookies that we use are session based and expire or set to be deleted when you close your browser window or restart your computer.  Our cookies are not made to be read by other sites, and maybe refused by setting your browser options to do so.  Refusing some cookies may alter your site experience, and especially movement between pages that require authentication.  We do not use the values stored in cookies for any other purpose beyond those declared above, in the What we collect section.

How Do We Use Information We Collect

We use the privacy-related information we collect solely to deliver the services referenced on the website.  We do not currently, nor do we have plans to, sell or license any of the collected information to any other party, in any form.  From time to time we may evaluate items such as reach, content, theme and language and use statistical information to improve on our content.   We may also use collected privacy-related information to communicate with you, in sole relation to the services provided on and referenced by this website.

The sole exceptions to our policy are if we are ordered by a court of competent jurisdiction, or related law enforcement agency, to reveal such information; or to prevent what, in our sole good-faith discretion, might constitute a credible threat to your life or health or to the life or health of others.

Today, we will end the series by discussing updates to our privacy policies.  I postulate the following rule:

Ariel’s Privacy Rule #6: Decide IF you want to give a "heads-up" before changing your policy and, if so, how you going to achieve that and stick to it.

Currently, very few rules demand prior-notification to your visitors about changes to your privacy policy.  It is also true that policies ought to be revisited, reviewed, and adjusted from time to time.   That said, it would be "wrong" if, for example, we promised our readers to email them before change and then we did not follow through.  I have seen quite a few site that had a "we shall let you know if you only register" policy, only to replace it, post-change, with "come visit us and we will show you" that the privacy policy was changed.   Besides being wrong, it might also put you in hot water legally.

I therefore suggest the (Again, simplest) manner of announcing privacy policy change:

Changes to our privacy policy

From time to time we may change our privacy policy.   The best way to find out about such changes is to visit our site and look at this policy again.  We date our policies, so you can easily ascertain when it was last changed.

And that's it.  We do not ask

You do not have flash or javascript support.
Average (2 votes)
4
 
 
Tue, Oct 27, 2009 12:47 EDT
Anonymous user
Posted by: Diana
Rating: 50

Privacy policies are very important as they express the contract between the web owners and the web users. Learning how to write a good privacy policy that matches our needs and respects the rights of others is totally necessary.

Post new comment

* Subject:
* Username:
* E-mail:
The content of this field is kept private and will not be shown publicly.
Homepage:
* Body:
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <img> <blockquote> <strike> <p> <br>
  • Lines and paragraphs break automatically.
More information about formatting options

* Denotes required field.

About this Blog

A no-holds barred analysis of security and privacy best practices, annoyances, tools, laws, methodologies and frameworks for today's information business.

Start a Conversation
Click to post

Got something to say? We want to hear it! Click the Post button to get started. GO»

EXPERT ADVICE
See our roster of experts.

Advice & Opinion from more than 113 of IT's most insightful thinkers.

  PARTNERS       WEBCASTS    
 

Windows 7 Webcast Series

There's a lot of buzz about Windows 7 out there. Each month in our webcast series, listen to analysts and customers discuss how Windows 7 and the Windows Optimized Desktop is impacting large companies around the world. Learn how they evaluated Windows 7, including the cost of deployment, deployment strategies, and tangible benefits.

Sponsored by Microsoft  Listen to on-demand Recordings »

 

Service Level Management Best Practices Life Cycle Overview - Improve Service Levels

Best practices for Service Level Management (SLM) is a process for consistently meeting customer requirements and delivering on IT's promises. See the steps required to ensure high-quality SLM.

Sponsored by Compuware  Read this White Paper »

 

Keeping Your Members Safe from Online Scams and Predators

In order to keep fraudsters out, romance sites must deploy effective solutions that look at information independent of what is supplied by users. A device fingerprinting solution such as iovation ReputationManager™ provides unique insight into the computers being used to create multiple accounts and exposes hidden device-account relationships that identity-based fraud solutions often miss.

Sponsored by iovation  Read this White Paper »

Resource Alerts

Get instant email notifications by topic when white papers, webcasts, and case studies are added to our library.

Resource Alerts

Get instant email notification when white papers, webcasts, and case studies are added to our library. Don't just be up-to-date—be up to the minute with our new Resource Alerts.

Defend Against Blended Threats: What You Need to Know

Blended Web and email threats are becoming increasingly complex and represent a huge...  View Now »

 

Prescriptive Actions to Reduce Risk

In this Webcast, learn best practices for effective systems management in a heterogeneous environment and keep client systems cost under control.   View Now »

 

Webcast- Vantage 11: Redefining Application Performance Management

Compuware's latest release, Vantage 11, is a major advance in end-to-end application performance management--bringing together proactive issue identification, quantification of business impact and problem resolution into a single solution. Tune in to learn how Vantage 11's top-down approach helps you make better decisions and dramatically lower operations costs.  View Now »

Resource Alerts

Get instant email notification when white papers, webcasts, and case studies are added to our library. Don't just be up-to-date—be up to the minute with our new Resource Alerts.

 
NEWSLETTER

Sign-up for the Blogs & Discussion Newsletter

 
FEATURED SPONSORS
 
 
 
SPONSORED LINKS
 

Return on Information: Google Enterprise Search pays you back. Get the facts.

VMware. The source for Business Infrastructure Virtualization.

ShoreTel tells businesses to untangle from competitors' complexity and turn to its brilliantly simple UC solution

See how AT&T can help protect your network.

Streamline IT Costs. Boost Performance with WAN Optimization.

Build your 1st app FREE with Force.com

TDWI checklist helps define data readiness for analytics. Download report.

A Clear View Toward Virtualization

Virtualization Technology as a Business Solution

The rules of infrastructure management just changed.

A Clear View Toward Virtualization

Interactive Q&A helps you discover key ways to maximize IT assets.

Ready to virtualize tier one applications? Check your virtualization maturity.

Think you can't afford a Cisco Switch? Cisco Catalyst Switches are now more affordable.

Five minute business analytics assessment. Immediate results.

The Case for Investing in Business Analytics Technology. Read white paper.

Upgrading to VMware vSphere with vWire

Top 10 Lessons Learned for Corporate 3G Mobile Broadband Deployments

CRM Built for IT: The Executive Guide to Selecting CRM that Meets IT Needs

Return on Information: Google Enterprise Search pays you back

ROI of Application Delivery Controllers

Making Consumer Two-Factor Authentication Simple and Cost-Effective

Mining the Cloud to Ease the Enterprise Compliance Burden

Solve Five Key IT Security Challenges with Cloud-Based Authentication

White Paper: Right-Sizing Your Power Infrastructure

AT&T Synaptic Storage as a Service. Expand on demand

Trend Micro ranked #1 against real-world malware. Read more.

Webinar: Jump-start your in-house e-discovery with Ringtail QuickCull from FTI Technology

Top Five CIO Challenges

Read the RSA report: Security for Business Innovation

64-page prescriptive guide to security, compliance, and IT operations.

Increase UPS efficiency without sacrificing protection.

eZine: A Roadmap to Reducing IT Complexity

Reduce risk, gain agility. See how Progress can help your business.

Virtualization Technology as a Business Solution

eZine: A Roadmap to Reducing IT Complexity

World-class trading technology solutions from NYSE Technologies.

If You're Paying for Telecom, You're Paying Too Much. Contact Asentinel Today.

Trade-In your old printer and save up to $1,000 plus free recycling!

infoBOOM! - The Mid-Sized Company CIO's Exclusive Community

Live Webinar: Applying Business Analytics. Click here to learn more

Removing Barriers To Better Server Virtualization Efficiency

4G Revisited. The Continued Evolution of Wireless Mobility.

What's Next for Enterprise Resource Planning?

Maximizing website Return on Information with high-quality search

Gartner Magic Quadrant, Application Delivery Controllers 2009

Authentication as a Service by Forrester Research

Cloud-Based Authentication for Next-Generation Extranets

Cut Costs & Green Your IT Operations with PC Power Management

White Paper: 4 Customer Service Myths