Wednesday, January 11, 2012

Privacy Principles from Microsoft

Privacy Principles

Recently Microsoft released its Privacy principles based on which it provides privacy protections in software products and Internet services.

Here are they at high level:

  • Accountability in handling personal information within Microsoft and with vendors and partners
  • Notice to individuals about how we collect, use, retain, and disclose their personal information
  • Collection of personal information from individuals only for the purposes identified in the privacy notice we provide
  • Choice and Consent for individuals regarding how we collect, use, and disclose their personal information
  • Use and Retention of personal information in accordance with the privacy notice and the consent that individuals have provided
  • Disclosure or Onward Transfer of personal information to vendors and partners only for purposes that are identified in the privacy notice, and in a security-enhanced manner
  • Quality Assurance steps to ensure that personal information in our records is accurate and relevant to the purposes for which it was collected
  • Access for individuals who want to inquire about and, when appropriate, review and update their personal information in our possession
  • Enhanced Security of personal information to help protect against unauthorized access and use
  • Monitoring and Enforcement of compliance with our privacy policies, both internally and with our vendors and partners, along with established processes to address inquiries, complaints, and disputes

Loughborough University’s study on ‘Privacy Impact Assessments’ is an important work in this field.

image

Microsoft on Privacy

PIA Study

No comments: