WPC  z*$R tŋ~jS j R Lfņ}wyr1rc>me_tW:k D;&tF)9MD5]yZ{{_ "?/pC Zb.$^76'.^9y{ 'O{MQ׫} חV]mW?Xv9:~;ڳ!)"u]/r^um(Jڸ8@~iv$;ǾI] 1xq~hP.]#Xo31~[S>cPYS ͆#JQ&+[g_8$QkV-'4wh&B6T מ-k^ f8.&v/ְWx\c% [6z[6_]1 !QqIs+|Ĭ||n ,[`iKa#!UN %k 0qU:^ 9w@E4 m 1 1u 0b 0 yg 0Xp HP LaserJet 6L PCL,,88,,0(9 Z6Times New Roman RegularX(f#$UKUS.,TRX6&A4X3' Letter6&A43'T,rAZ"Arial RegularUq, EeDfn,:i+003|xUS4O37;CO_s11.11.1.11.1.1.11.1.1.1.11.1.1.1.1.11.1.1.1.1.1.11.1.1.1.1.1.1.13#37=CIQYag1.a.i.(1)(a)(i)1)a)(:$24O  0  3  0  (Ql$24O  0  .  0  3  0  (hچ$24O  0  .  0  .  0  3  0   Ponemon xmlproactiveTrustPage #!UKUS.,TRX6&A4X3' Letter6&A43'T  _XXXX   DONTDELAYCOMPLIANCEWITHPLATFORMFORPRIVACYPREFERENCES  (P3P)     ByDrLarryPonemon,CEO,PrivacyCouncilandKevinRobertson,StoneInvestmentsCompaniesthathavebeenputtingoffdealingwiththePlatformforPrivacyPreferences(P3P)standardscandosonolonger.MicrosoftsOctoberlaunchofInternetExplorer6(IE6),whichincludesP3P,andtheNovemberlaunchofWindosWindowsXP,incorporatingIE6,aretakingprivacyonthewebtoanewlevelandforcingcompaniestotakeP3Pstandardsseriously.Moreover,duringthenextfewmonths,tensofmillionsofusersareexpectedtoadoptIE6,creatingarealurgencyforcompaniestomaketheirwebsitesP3PcompliantorfacecostlyinterruptionsintheirInternetbusinessandpossiblelitigation. P3PBASICS   Cookies,personalinformationcollectionandlackofregulationpromptedtheWorldWideConsortium(W3C)tospendthreeyearsinthedevelopmentoftheP3Pstandardstoensurethatconsumerprivacyisrespectedandadheredtoontheweb.ThegoalofP3Pistoprovideasimpleframeworkthatautomatesthewayindividualscontroltheirpersonalinformationwhenvisitingwebsites.Inaddition,P3Penableswebsitestopublishtheirprivacypolicesinastandardsyntax.MicrosoftsIE6doesnotusethefullextentofP3Ppoliciesbutworkswithasmallersubsetofpreferencescalleda compactpolicy.Italsoshipswithaprivacypreferencesfeaturethatallowsuserstosettheirownprivacytoleranceandthedefaultis Medium.IE6crossreferencesthis MediumsettingagainstthewebsitesP3PCompactPrivacyPolicyandwillblockwebsitesthatusecookiesanddonothavea compactprivacypolicy.Consequently,unlessanewIE6userspecificallyturnsofforlowersitsdefaultprivacysettingsitwillencounterwarningsonamultitudeofsitesusingthirdpartycontent.Inshort,awebsitemaynotalwaysworkforauser,whomayquicklyclickonacompetitorswebsitetomakehisorherdesiredpurchases. ANACTIONPLANFORCOMPANIES   %\ # WerecommendthatyouadoptthefollowingproceduresinordertobecomeP3Pcompliant:L 4OS3 L     24O  1  3  0    mostimportantly,haveanaccurateandcompletewrittenprivacypolicythat )%( meetslegislativeandindustrystandards.Itmustbeaccessiblefromanypageonthesite; 2 ݌ "" Ќ       24O  2  3  0    makethepagesandcookiesconsistentwiththeprivacypolicy; ݌`-(,"" Ќ       24O  3  3  0    selectapolicygeneratoranddeterminethe: ݌8/*."" Ќ     l     l24O  3  .  1  3  0 `   legalentityrelatedtoeachcookie;l݌1`,0` "` " Ќ   l     l24O  3  .  2  3  0 `   sitesandpageswhereyourprivacydisclosureshouldreside;l݌` "` " Ќ   l     l24O  3  .  3  3  0 `   partiesorlawsthatdetermineyourprivacystatements;l݌t` "` " Ќ   l     l24O  3  .  4  3  0 `   type(s)ofdatayourcompanycollectsandhoweachtypeisused;l݌L ` "` " Ќ      24O  4  3  0    enterthenecessarydataintotheprivacygenerator;makesuretouselonghand $ t titleswheneverpresentedwiththeoption;/݌ "" Ќ      P24O  5  3  0    savethepolicyfileasP3P.xmlandloadtoyourrootdirectory.Saveindividual  8  policyfilesasPolicy1.xml,Policy2.xml,etc;P{݌ "" Ќ      24O  6  3  0    validateyourpolicytomakesurethecontentsarereadableandaccessible;݌ "" Ќ      24O  7  3  0    obtainthirdpartyverificationtodeterminethatthewrittenpolicyandXMLorP3P   CompactPolicyisfunctionallyequivalent.݌ "" Ќ  TISTHESEASONFORTRUST  H Withtheholidayshoppingseasonhere,retailanalystsarepredictingthatmanymoreconsumerswillbefillingSantasstockingswithvisitstotheInternetratherthanthemallsthisyear.Companiesthatareproactiveineasingshoppersanxietyaboutmakingpurchasesontheirsiteswillhaverealreasonstocelebrateinthecomingyear.AtPrivacyCouncil,wehavedevelopedanapproachtoachievingP3Pcompliancethatcombinestechnologywithathoroughunderstandingofthetypicalproblemscompaniesarefacing.Oneofthebiggestproblemsismakingsuretheprivacypolicyfitsthecompanysactualpracticesandcapabilities.Alltoooften,thecompanyswebprofessionalsarechargedwithensuringthatprivacyandcompactpoliciesareconsistent.Teamsofmanagementandlegalpersonnelwritethebestandmostcompetentpoliciesafterathoroughassessmentofnotonlythecompanysbusinesspractices,butalsothoseoftheindustryandrelatedbusinesses.Thesewrittenpolicydisclosuresmustbeconsistentacrosstheentirewebsiteandlinkstoalldomains.TheP3PorXML/compactpolicymustbefunctionallyequivalent.Thatis,actualwordsmaydifferbecausethewrittenpolicywasnotbasedonP3Pspecifications.Ifmajordifferencesexist,thewrittenpolicyneedstoberevised.Finally,theXMLandwrittenpolicymustbe frozentomakesurethedocumentremainsstableandinadvertentchangesarentmadewithoutproperapprovaloreffectivenotice.Oncethesestepshavebeentaken(andthepolicyhasbeenapprovedbyyourcompanyslegaldepartment),wepublishthepolicyandarchiveitwithotherpoliciesonPrivacyCouncilsserver.OurTrustPage,withthetrusticon P3P_cCompliant,_Ԁispostedandoneverylinktothewebsitesprivacypolicy.So,whetheryourcompanyissellingdiamondsordogfood,youhavetakenanimportantstepforwardinearnigngthetrustofyourcustomers.