...
CONSENT AND ANTI-PATTERNS
Proposal is that P3 collect examples of consent anti-patterns... i.e. if we see real instances of poor practice in the collection of user data, or presumed consent, or making service provision conditional on acceptance of privacy-hostile terms, etc to record these instances (not with the intent of alienating the service provider concerned).
In the first instance, we will need to collect some examples of policies which are not necessarily "poor", but which serve as discussion points for the topic.
Hopefully out of the process of collection and categorization would come a list of common mistakes. P3 could then propose alternatives.
Sample 1:
Note: the example below reflects aspects of a real Privacy Policy statement; for that reason, I have changed some details of the company concerned, and only reproduced those sections of the policy statement which I felt could provide us with a basis for discussion.
...
I make no express or implied comment about whether the policy statement is "good" or "bad", but present it as an illustrative example for discussion.
Context:
Accepting this privacy policy was a condition of completion of an online form for requesting an appointment (in other words, a task which should require no personal data beyond the customer's name, preferred date/time and possibly return contact details).
Excerpts:
2 – Supply of personal information
...