...
- PII conf - interesting speakers, Esther Dyson called major providers (Google, Yahoo, etc) out re: privacy policies, disconnect.me (icons at disconnect.me/db), Privacy Choice. Others trying to do wholesale analysis of privacy policies, find commonalities. We need to address what others are doing (modalities). ISOC also has a privacy audit tool (isoc.org's Firefox plugin). PDEC (?), personal.com, Shane Green, Drummond, Tara Hunt talked about rating/ranking about personal data ecosystem; 1) mydex's trust index is apropos, and 2) Pdec could form standards/auditor OIX/Kantara model) ranking framework. Alicia Aleecia McDonald's work (?) show people would pay a premium for services whose privacy ratings were higher. There's real marketplace value. Kaliya: inclined to leverage OIX infrastructure; it's a conversation. Mark's also doing work on frameworks, Phil Wolfe too. Mark: there's a level people need to see right away, e.g., who controls the data, like R-Button. Legal compliance & privacy structure, levels of assurance; it's complicated. Iain: trust index was thought through, boiled down to 12 minimum for assessment. Mark: put these together? Joe to Kaliya: IAPP (membership org): 1/2 revenue from events, esp education. Large sponsorship dollars not part of IAPP except for specific research projects.
- Kaliya: sing.ly joined personal data ecosystem, in conversation with reputation.com.
- Iain talked with Drummond/Scott: more detail to be worked out.
5. Information Sharing Agreements
mLast week: at IIW, we outlined first four patterns (see last week's notes), relationship maintenance/transparency was new (missing) pattern but doesn't map to our prior framework, not purpose-bound. Gray area: what, how (channel), when (frequency, duration). "What" is more complicated, e.g., recommendations, special offers and/or events, new products, blacklists & whitelists (was looking for a car, now I've bought one; now new car recs on blacklist). Why are they reaching out and what they know: keywords, purchase history or behavioral data (portable context opportunities). Existing and imagined services?
Data Recipient | Scope: What | Scope: How | Scope: When | Purpose: For What | Purpose: Duration | Comm Output |
|---|---|---|---|---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
6. Action Items Review
- Joe - follow up with Doc re: CRM + VRM conference
...