ChoralWiki talk:Privacy policy

to have or not to have... a privacy policy

Posted by: Vaarky 06:14, 29 August 2008 (PDT)

Help

I've spoken with a couple of people about this project. One person suggested we reexamine whether CPDL should have a privacy policy, and what we would be trying to accomplish by it. My thoughts about this are that we want to inform Internet users, who may not be as aware about what personally-identifiable information about them is captured. However, this goal can be accomplished via a general informational page that talks about wikis or when you visit a web page generally, and does not necessarily have to be done via a Privacy Policy. A Privacy Policy may create additional legal obligations, so some care should be taken. I am not a lawyer, but I believe that CPDL in its current or foreseeable state is not required to post a privacy policy. California has an [http://www.leginfo.ca.gov/cgi-bin/displaycode?section=bpc&group=22001-23000&file=22575-22579 Online Privacy Protection Act] that went into effect July 1 2004. Here is a [http://www.americanbusinessmedia.com/images/abm/pdfs/government/CAprivacy.pdf summary]. I am not a lawyer, but my understanding is that although it requires a Privacy Statement in some cases, I believe the requirement would not apply to CPDL for the following reasons: It is my understanding that CPDL is not "operated for commercial purposes". Section (c): The term "operator" means any person or entity that owns a Web site located on the Internet or an online service that collects and maintains personally identifiable information from a consumer residing in California who uses or visits the Web site or online service if the Web site or online service is operated for commercial purposes. It does not include any third party that operates, hosts, or manages, but does not own, a Web site or online service on the owner's behalf or by processing information on behalf of the owner. Consumers do not purchase or lease anything from CPDL. "The term "consumer" means any individual who seeks or acquires, by purchase or lease, any goods, services, money, or credit for personal, family, or household purposes." So my thinking is that we should hold off on developing a privacy policy for the present, especially given the Transition committee's discussions and the more urgent priorities such as back-ups. I'll plan to pause this indefinitely but would appreciat hearing other thoughts.