Regulators to Web startups: Prioritize privacy protection
Failure to do so may put them at risk of litigation, regulatory sanctions and business problems
IDG News Service - Internet companies need to build consumer privacy and data controls into their online services to protect their brands, gain trust from their users, avoid civil lawsuits and prevent government probes, according to two regulators from the U.S. and Canada.
For those reasons, privacy and data protection can't be an afterthought for businesses, even if they are small Web startups without an in-house legal department, the two officials said on Tuesday at Web 2.0 Summit.
"I'm the guy you don't want to see, and frankly I don't want to see you either," said David Vladeck, director of the U.S. Federal Trade Commission's Bureau of Consumer Protection, after jokingly comparing his role to that of a gym teacher at a high school prom.
"You need to be sensitive to privacy and data concerns," he added.
Among his tips: Businesses shouldn't collect data they don't need, and they shouldn't hold on to the data they do collect for longer than they need to. Both mistakes increase the company's vulnerability to data breaches that make them liable to legal and regulatory sanctions and that hurt their customers, he said.
"This is an issue you can't relegate to the back burner," he said.
The FTC is particularly concerned with Internet companies' collection of data from minors, which can be illegal in certain scenarios, and with the commercialization of face recognition software and tools, he said.
Ann Cavoukian, Information and Privacy Commissioner of Ontario, Canada, said that it's wrong to think that privacy controls and data protection diminish the capacity for a company to innovate. "That's a false dichotomy," she said.
The opposite is true, she said. "Privacy is an enabler of innovation." Companies that give consumers tools to manage and control the personally identifiable data collected on them will also get an edge over competitors who don't, she said.
Cavoukian recommended that conference attendees familiarize themselves with a series of best practices, methodology and principles in a website her agency has created called Privacy by Design.
Vladeck and Cavoukian answered questions on stage from Alexander Macgillivray, Twitter's general counsel, and from audience members.


- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Practice Management: Double Billing Rate and Improve Patient Services
- Would you like to double your billing rate and achieve faster payment for services?
Download this customer success story to see how One Health... - Mission Critical Data Explosion and Customer Case Study
- Would you like to double your tier 1 storage capacity while simultaneously reducing your storage footprint?
Download this customer success story to see how... - Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios
- Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.
- Database Activity Monitoring Is Evolving
- Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.
- Establishing a Strategy for Database Security is No Longer Optional
- The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three... All DRM and Legal Issues White Papers
- Distributed Database Security with Real-time Monitoring
- View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with...
- InfoSphere Warehouse Packs Demo
- These flash modules make warehousing more tangible and relevant to business users through detailed explanations of the InfoSphere Warehouse Packs.
- Delivery Management -- Extending Lifecycle Management
- Date: Wednesday, June 20, 2012, 1:00 PM EDT
Siloed organizations continue doing the wrong things and doing things wrong, leading to increased costs,... - Leverage automation today to reduce IT complexity
- Date: Tuesday, June 5, 2012, 2:00 PM EDT
Whether your B2B complexity is caused by multiple technologies due to M&A, business or application specific... - Redefine Expectations in the Data Center
- Need to do more with less? Watch this video to learn how HP ProLiant Gen8 servers can help your business deploy servers three... All DRM and Legal Issues Webcasts