e3

Fair information practices at a glance

Site Genre: Pattern Group e

magnify imageFigureE3.1 The Safe Harbor Web site provides a great deal of information about the safe harbor privacy agreement between the United States and the European Union. Safe harbor compliance is crucial for companies wishing to do business with citizens and companies in the European Union.

Background

It’s not always clear how a company should handle and manage the personal information of its customers. Web companies often collect this information on SIGN-IN/NEW ACCOUNT (H2) and E-MAIL SUBSCRIPTION (E2) pages. This pattern describes fair information practices, which provide guidelines for the kinds of policies and procedures that Web sites should have to ensure that customers’ personal information is collected and handled equitably and securely.

Close

PROBLEM

Privacy is a serious concern for many people using the Web. However, it is not always clear what policies and procedures a Web site should have to collect and handle personal information in a fair and secure manner.

buy the book to find out more

SOLUTION

magnify image FigureE3.2 Make your privacy policy clear, keep your customers’ information secure, and make it easy for customers to manage and update their information.

Have a clear privacy policy, and make it conspicuous on key Web pages. Let your customers choose how their information is used. Provide account management tools to let them review and correct their information. Protect your customers’ personal information. Be certified as a safe harbor Web site if you‘re doing business with customers or companies in European Union nations.

Other Patterns to Consider

One way of maintaining openness and transparency is by stating a PRIVACY POLICY (E4) on all Web pages. At a minimum, post privacy policies on key Web pages, such as the HOMEPAGE PORTAL (C1) and other major entry points, the QUICK-FLOW CHECKOUT (F1) page, and any Web page where substantial personal information is collected, such as SIGN-IN/NEW ACCOUNT (H2). Give people the choice of specifying PRIVACY PREFERENCES (E8) stating how their e-mail addresses are used, especially for E-MAIL SUBSCRIPTIONS (E2). An alternative is to let customers use one-time GUEST ACCOUNTS (H3). Use SECURE CONNECTIONS (E6) for any transactions involving sensitive information, including passwords, personal finances, and e-commerce purchases. Provide an ACCOUNT MANAGEMENT (H4) facility, letting people see what information your Web site currently has about them.

Close

 

Pattern Resources

PATTERN COMMENTS

POST A COMMENT and/or EXAMPLE WEBSITE

You must be logged in to post a comment.