Medical Privacy Policy Requirements Version 4
Table of contents
Anticipated or Demonstrative URI/URL: http://privacycommons.org/us/subjectmatter/m.4
Description: Mock Medical Privacy Policy Requirements Page, as established by a Privacy Commons Working Group or consensus body. This page is a mock/demonstration webpage, intended to demonstrate how Use Case 1 works.
Medical Industry Privacy Policy Subject Matter, Version 4 1
Note: This M.4 is out-dated. The current version is Version M.5 [Link]. 2
Critical Subject Matter (Subject Matter addressed in the Privacy Policy and reported in the PC Statement):
- Representation of Completeness
- Opt-in/Opt-Out
- Legal Rights
- Third-party compliance certification
- Auditability
- Known Risks: Past incidences of breach
- …etc…
Required Subject Matter (Subject Matter addressed in the Privacy Policy): 3
- All Critical Subject Matter
- Enumeration of and Compliance with applicable law
- Use of cookies online
- Staff Training
Information Collected and Protected by Steward - Individuals Protected by the Policy
- Information Processing, Aggregation and Dissemination
- Consent, Choice & Control
- …etc…
Explanation
1 This is where the heavy lifting comes in. Through some sort of consensus process or working groups, Privacy Commons should create a list of subject matter which privacy policies must address, even if they do not provide perfect protection. As the relevant subject matter would vary based on industry (ie, financial industry, medical industry, social networking industry, personal websites), separate Privacy Commons consensus bodies would develop required and optional subject matter.
2 As the needs of each industry, pressures on privacy, and applicable laws change, the working groups or or consensus bodies will develop new versions of Privacy Policy Requirements for each industry. Self-declaration to a prior version will not invalidate the PC Statement, but consumers should be on notice that the company's privacy policy may not be complete.
3 In addition to identifying Critical, Required, and Optional Subject Matter, the working groups will also want to provide resources on model language for each subject.
4 Perhaps there is a law pending in Congress, or a new form of Data Profiling is emerging. This is a great opportunity to reference emerging privacy issues without requiring that every policy address them. The Working Group may then decide later to make the subject matter required in the future, or drop it altogether.
5 Link
5 Note
6 Link
6 Note
7 Link
7 Note
8 Link
8 Note
9 Link
9 Note
10 Link
10 Note
11 Link
11 Note
12 Link
12 Note
13 Link
13 Note
14 Link
14 Note
- Tag page
-
- What links here
