Organizations w/Ethical Privacy Policies INDEX with description of why some are better than others

What makes a privacy policy more "human" than others? What to include if you want a good privacy policy?

1. LIABILITY-ORIENTD. If the "template" you are using and/or the person constructing your privacy policy is mostly interested in "the liability" to your company, please use something/someone else, who is more concerned with serving the community of stakeholders, rather than just one company. Yes, of course, businesses must protect their liability, but what better way to protect your liability than to do no harm? "Companies that focus too much on protecting their own liability tend to do more harm than they do good" [quote from Business Consultant Terra Friedrichs, co-founder/designer of this online database you're looking at]]

2. CHANGE-NOTICE. If the privacy policy reserves the right to change the policy "at any time" and/or says, "check this website" to see if there are any changes, this is not considered "good". Notice MUST be given by email, and prominent on ALL user pages. Notice MUST have a delay, where people can choose to delete data that they do not want subject to the new proposed policy. Even Google gives people 30 days notice (or is it 90 now?) whereby people will be notified BOTH via email AND on their website (we want it on your search too, Google!) before the policy is officially en force. Then if people do NOT agree with the proposed policy, they can eliminate all their data and have the data subject to the OLD privacy policy, which respects the right to have the data deleted and no longer used. Also, a good policy must give at least 30 days notice, so people can object, and an email to send in objections ON THE CHANGE NOTICE.

3. GUARANTEED DELETION. If the policy does not guarantee "clear deletion" end-to-end, of any user data you want deleted, this is not considered "good".

4. SELL/SHARE DATA. If the privacy policy reserves the right to sell or share your data to "third party affiliates", this is not considered "good". If you are a company that feels like they "need" to sell/share, because selling/sharing is part of the business model, please do it in a stake-holder-focused manger. Please be very very clear that using the site involves sharing of data, and please have a LOT of options for people to choose from. Please make every choice "opt-in". Most people don't understand what they are giving away,and making people choose each function as "opt-in" helps ensure that they know what they are doing.

5. SELLING DATA w/ACQUISITION. If the privacy policy reserves the right to tell your data in the event of the acquisition or sale or merger of the company, this is not considered "good". IF the company offers "good" privacy policy change-notice, (see #2 above), then that's considered "acceptable", but the right to sell the data in the event, at the company's discretion, is not good enough, unless there's "notice" [See #2 CHANGE-NOTICE] above.

See the separate orgs that we believe have better privacy policies than others https://ccc.haghy.com/items/5018

LIST UNDER CONSTRUCTION, we intend to put all URLs for all the companies in the above list on a single page. If you want to help, let us know.

LIST:

Web Hosting/Site Builder: http://www.webstarts.com/privacyPolicy.php Grade: B