The settlement with the FTC said Facebook had to establish a rigorous internal privacy practice, not deceive users about what it does with their data, and undergo 20 years of privacy audits.
When a firm's privacy practices offered control, customers knew they had the ability to change their preferences about what and how they share their information.
Although it is not a complete record of all the Web sites out there, Enonymous.com's analysts have a database rating privacy practices of 30,000 sites at www.privacyratings.org.org
Her book, Privacy on the Ground: Driving Corporate Behavior in the United States and Europe, a study of privacy practices in large corporations in five countries, conducted with UC Berkeley Law Prof. Kenneth Bamberger was recently published by MIT Press.
Some analysts say, however, that the company will face a number of challenges, like managing spam, getting users to change ingrained habits and persuading some to entrust their confidential e-mail to a company whose privacy practices have often drawn scrutiny.
The keynote speeches were delivered by Jeremy Ward from Symantec EMEA on the topic of "Building the Information Assurance Community of Purpose", and by Günter Karjoth from IBM Research - Zurich, with a talk entitled "Privacy Practices and Economics –– From Privacy Policies to Privacy SLAs.
In accordance with 45 CFR 164.520, the covered entity must also communicate how they may use the patient's information and the patient's access rights in a Notice of Privacy Practices.
This is allowed under the regulations because of the public health mandate and because once a patient has received and acknowledged the Notice of Privacy Practices (a document that explains the patient's rights and the actions the provider will take to protect privacy), the PHI can be used and disclosed.
When it comes to shady business or privacy practices, an individual lawsuit might function as "a canary in a coal mine," but if that lawsuit is forced into the shadows under forced arbitration it can take years for the public to find out about it, like in the case of the Wells Fargo fake account scandal.
That referred to an incident in which the FTC fined Google $22.5 million for misstating its privacy practices, a violation of Google's own 2011 consent decree with the FTC.
