Privacy policy

As explained in Data for All

A privacy policy is a statement describing how an organization collects, uses, shares, retains, and protects personal data.

Before handing over your data, ask: what will this organization collect, use, share, retain, and protect? A privacy policy is the organization’s statement of those practices—and a signal of how it views your privacy. section 5.8

Privacy policies turn broad principles such as transparency, control, respect, and trust into an organization’s public position on personal data. Their practical value depends on whether ordinary people can understand them and use them to decide whether to participate. section 5.8

Read a privacy policy as evidence about:

• What kinds of data an organization collects and how it uses or leverages them. section 5.8
• Which organizations may receive the data, including service providers, business partners, government agencies, researchers, or other third parties. section 5.9
• Whether the policy offers understandable explanations and meaningful control, rather than mainly protecting the organization from data-related rights claims. section 5.8
• How stable the promises are when ownership, management, business models, terms of service, or policies change. section 1.2.1

When a policy reveals the real reach of data sharing

A healthcare provider’s policy allowed protected health information to move among a long list of clinical workers, insurers, consultants, regulators, researchers, law enforcement personnel, and other organizations. In genetic genealogy, policies could also change after investment or management changes, leaving people with little lasting control over DNA data they had submitted. section 5.9 section 1.2.1

Figure 5.1 Privacy at University of Michigan²⁹

Use the University of Michigan privacy principles as a compact view of the values that can guide a privacy policy. section 5.8

A policy is not a guarantee that control will last. Once data is handed over, later access, ownership changes, and rewritten policies can alter the practical meaning of the original promise. Reading policies before signing up helps people make more informed choices about whom to trust with their data. section 1.2.1 section 5.8

How Data for All covers it

How deep it goes

Contrasts plain-language principles with lengthy protective statements and examines concrete disclosure and policy-change consequences.

Examples

Uses Microsoft, Dell, University of Michigan, healthcare-provider disclosures, and genetic-genealogy DNA policies.

What it assumes

Assumes awareness of privacy and personal data while teaching readers to connect policy language with practical control and disclosure.

What you can do after

Evaluate organizations by reading their policies for data uses, disclosures, readability, control, and potential future changes.

How it connects

Connects privacy policies with privacy, secrecy, data security, terms of service, corporate ownership, and GDPR.

liveBookmanning.com

Read Data for All on liveBook Get the book at manning.com

Related concepts

• security policycontrasts with · A security policy is a set of rules, requirements, or directives that defines how systems, data, and resources are protected and accessed.
• GDPRconfigured by · The General Data Protection Regulation (GDPR) is a European Union regulation governing the processing of personal data and protecting individuals’ rights concerning that data.
• personal dataconfigures · Personal data is information relating to an identified or identifiable person, directly or indirectly, alone or in combination with other information.
• policykind of · A policy is a rule, strategy, or mapping that governs or determines decisions, actions, permissions, or behavior under specified conditions.

This explainer was generated by Manning's knowledge graph from the text of Data for All. The section links point to the parts of the book it draws on.