Talk:Privacy policy
From Wikipedia, the free encyclopedia
Contents |
[edit] New Article
I've changed this entire article. See the message left on Gabriel Kent's talk page. —OvenFresh☺ 23:10, 28 Dec 2004 (UTC)
[edit] Legally binding?
I was wondering whether privacy policies are actually legally binding. I noticed that my added description of P3P was changed from a guarantee to an offer. I assumed that the point of privacy policies is that they give users additional legal rights, or took them away where relevant, to get out of the uncertainty of implied law. If this is so, it ought to be mentioned in some form or other. --BigBlueFish 10:28, 22 November 2005 (UTC)
- I think you are right - in that the privacy policy will often form part of the terms and conditions and therefore be part of any contract, and also that it might form the basis for any permission for the purpose of privacy laws. I made the change of wording because it fitted better with what the browser is doing. I think common sense suggests that you can't guarantee that an unknown website will be honest about its intended or de facto privacy policy. This is one of the main criticisms of P3P. So I agree with you, but I didn't think the word guarantee was quite accurate in that context. It merits more discussion in the article. zzuuzz (talk) 16:35, 22 November 2005 (UTC)
- Agreed... Although I accept the new wording, it should be noted in this case that privacy policies are guarantees of a sort; legal ones, that is. The theoretical point of P3P is that should someone provide a false privacy policy and you used the site because of it, the site owners could be sued under the Data Protection Act. It's the fact that this kind of legal retribution is only really relevant to big cases that makes it a poor logical guarantee. As you might be able to tell, I'm not a lawyer! Hopefully somebody will be able to approach this in correct terms for the article; I'm leaving it alone for now --BigBlueFish 19:24, 22 November 2005 (UTC)
[edit] Goverment sites
Are goverment sites required to have a privacy policy? —The preceding unsigned comment was added by Frap (talk • contribs) .
- It surely depends on the government. Broadly speaking, in Europe, if personal data is going to be processed then the individual has certain rights to be notified about the purposes it will be used for. This does not usually include IP address (web browsing logs), because they are not usually related to the individual. However if personal information is being gathered then the individual should be notified. The Privacy Policy is the most common means of doing this, but equally valid is to let them know at the point of data entry. In Europe, to the best of my knowledge, there is no additional requirement for government sites. -- zzuuzz (talk) 22:48, 23 June 2006 (UTC)
[edit] Misc
A privacy policy might talk about e-mail spam, mailing-lists, opt-in/opt-out, if use SSL, logs, data retention, links to other sites, etc...? -- Frap
- In my experience, a privacy policy is highly unlikely to mention spam. It is common to mention whether details will be passed to third parties, and/or used for marketing. And to provide information about opt-outs (in some cases this is a legal requirement). Logs and data retention will normally be covered - but not always SSL. Cookies are also mentioned often. -- zzuuzz (talk) 22:50, 23 June 2006 (UTC)
