E-LOANposted its privacy statement online, became a founding member of the Online Privacy Alliance, joined TRUSTE and funded a staff position to manage privacy actions and policies. To further E-LOAN's commitment to online privacy, it is signing up with the American Institute of CPA's WebTrust program, which will perform an audit of E-Loan's privacy and security standards to obtain the WebTrust seal. E-LOAN will undergo audits every 90 days to retain the seal. Through frequent speaking engagements nationwide, E-LOAN has challenged the online industry to take a more aggressive posture in self-regulation, explain how consumer information is being used and provide general consumer education related to privacy in cyberspace.

Engage in the past year has established on its Web site a comprehensive new privacy statement which includes Privacy FAQs and a procedure to opt out. In addition to membership in the OPA, Engage is a sponsor of TRUSTe, an active participant in the Platform for Privacy Project (P3P) of the World Wide Web Consortium, and a co-author of the P3P Protocol. Engage authored an Internet Draft, submitted to the HTTP Working Group of the Internet Engineering Task Force (IETF), that allows Web servers to inform users of their privacy practices with regard to HTTP cookies. To assure its commitment to consumer privacy, Engage recently hired a privacy expert to help guide its policies. The Company's commitment extends to its customers, who are required to post a privacy statement disclosing their collection and use of visitor data.

Equifax has integrated its privacy policy into company practices by incorporating privacy policy materials in new employee orientation materials, allowing access to its privacy policy through links on every page of the Web site and creating a staff position focusing on the execution of Equifax's privacy policy and procedures. Equifax also has undergone two independent assurance reviews of its privacy policies, and reviews by an outside consultant of several Equifax products and online services. Equifax is a member of the BBBOnLine Steering Committee and recently was awarded a BBBOnLine Privacy Seal.

Ernst & Young’s initiated several programs to assist United States companies to improve their compliance to Privacy legislation. These activities include the formation of the Center for Trust Online (CTO), an Ernst & Young organization dedicated to advancing informed debate on Trust in the online economy through research and development. Ernst & Young has also launched the Global Commerce & Privacy Service which combines business consulting, information technology, assurance, and legal practices in the delivery of privacy consulting to clients in the US and Europe. Ernst & Young developed an e-Privacy Service available to clients to assist in addressing specific enforcement issues for corporate privacy policies. Ernst & Young has joined the ISPTA, strongly supported the Online Privacy Alliance, and provided support to Mary Culnan's Georgetown Privacy Survey. Proposing a discussion framework for Privacy Enforcement in industry, Ernst & Young drafted the Certified Compliance white paper, which reviews the current state of privacy protection and proposes alternative views on self-regulatory framework for Internet information management. By integrating privacy services in its offerings to clients, Ernst & Young works with clients internationally to respond to the need for privacy policies. In closed-door sessions with European privacy regulators, Ernst & Young has promoted actions consistent with the OPA mission. Ernst & Young has implemented a privacy policy on its Web site.

European-American Business Council >Encirq is an online marketing services company that delivers personalized marketing in a way that protects consumer privacy. Encirq's unique data engine relies on encrypted profiles that sit on consumers' own computers, not in a centralized data warehouse, so the data is safe, secure and private. All the data processing, management and analysis occur on the consumer's personal computer. No one has access to the consumer's personal data, not even Encirq. Consumers can opt-in and opt-out of the service whenever they choose. Founded in San Francisco, Calif., in March 1998, Encirq can be found on the Internet at www.encirq.com.

The European-American Business Council (EABC) continues to facilitate a constructive dialogue between companies, the European Commission and the U.S. Government on data privacy issues. Over the past year, the EABC has hosted meetings in Washington and Brussels with the chief negotiators and leaders in the US Congress and European Parliament. The EABC keeps its members informed about privacy developments through its weekly newsletter and monthly meetings with the Washington representatives of its member companies. The organization has posted a privacy statement on its Web site and has encouraged its companies to do the same.

Experian’s Consumer Advisory Council, formed in 1992, has been the benchmark in consumer/industry privacy dialogue. The Council has included consumer advocates, industry leaders, and government policy makers among its members. Experian’s consumer education materials have helped many consumers understand information use. During the 1990’s Experian has been a corporate leader in encouraging market self-regulation, including helping to lead the Direct Marketing Association, Individual Reference Services Group, and Software and Information Industries Association.

Gateway has drafted, implemented and posted three new privacy policy documents that serve as pages on their Web site. These are linked in all areas of Gateway’s Web site and are written in easy-to-understand language. Gateway has institutionalized the protection of personal information by limiting access to client information databases, communicating its privacy policy to all employees and establishing and enforcing penalties for violations of the privacy policy.

IBM adopted a global online privacy policy in 1997. As an early evangelizer of privacy policies, the company has organized or sponsored a number of customer briefings, hosted a privacy policy conference with Secretary of Commerce William Daley, co-sponsored a series of workshops on Web privacy policies with the Software and Information Industry Association, and formed a dedicated team in its Global Services division to guide organizations through the process of creating and implementing practices that comply with applicable privacy policies or regulations. IBM is a founding sponsor of both the TRUSTe and BBBOnline Privacy Seal programs. The company also supported other outreach efforts, such as Call For Action’s Consumer Education Initiatives and a CEO education project through the Computer Systems and Policy Project. As the second largest advertiser on the Web, IBM recently announced that it would no longer advertise on U.S. and Canadian Web sites that did not post privacy policies.

The Information Technology Association of America (ITAA) promotes OPA’s principles with its 11,000 direct and affiliate members through its network of 35 regional information technology associations. At its industry trade shows and other events, as well as through its free electronic publications, ITAA funnels information about privacy policy to its members.

The Information Technology Industry Council (ITI) has adopted a set of principles in the past year for the protection of personal data and posted the principles, along with a privacy policy, on their Web site. It helped its affiliated standards secretariats, the American National Standards Institute, and its member companies, develop and post effective privacy statements. ITI worked with other information technology associations to develop a High-Tech Industry Self-Regulatory Privacy Plan, which includes a commitment to promote widespread adoption and implementation of privacy policies by July 1999. ITI’s President, Rhett Dawson, has authored several op-eds and spoken at industry forums on the importance of the private sector taking an active leading role in protecting personal information in electronic commerce.

InsWeb posts a privacy policy on its Web site and holds the TRUSTe Privacy Seal.

Intel maintains a multi-faceted privacy program. The recently strengthened privacy policy provides full disclosure to the user, including how personal information is collected, used, and stored. As a corporate sponsor of TRUSTe, Intel displays the TRUSTe seal along with our privacy policy. Moreover, Intel continues to be a consulting sponsor for the BBBOnLine seal program. In an effort to promote the development of technologies needed to solve the complex security and privacy issues of electronic commerce, Intel joined forces with other leading technology and financial organizations to form the International Security, Trust, and Privacy Alliance (ISTPA). Additionally, Intel is extending its privacy practices into its advertising activities. Effective September 1, 1999, Intel will only purchase advertising space on web sites posting a comprehensive privacy policy that meets the guidelines of the Online Privacy Alliance. Cooperative advertising licensees are being urged to follow a similar policy, which will become a U.S. program requirement as of January 1, 2000. Similar requirements will be implemented in other countries as local guidelines are established by similar regional organizations.

The Interactive Digital Software Association (IDSA) adopted Principles and Guidelines for Fair Information Practices last year to guide its members in developing business practices to protect the privacy of consumers. As a result, nearly 20 IDSA members, representing the vast majority of the entertainment software market, had posted privacy policies as of March 1999. In the future, entertainment software Web sites will be able to assure the privacy of visitors through the privacy seal program being developed by the Entertainment Software Ratings Board. In addition to posting its own policy, IDSA has persuaded several entities with which it has relationships to post privacy policies.

The Internet Alliance founded the first consumer Internet education program, Project OPEN (the Online Public Education Network), in 1996 with partners including the National Consumers League, the National Center for Missing & Exploited Children, and U.S. Office of Juvenile Justice and Delinquency Prevention. The IA participates in the Privacy Partnership, and conducts many programs to inform its members, other companies and decision-makers in Washington and the 50 states to engage and report on developments in privacy policy. The Internet Alliance has recently expanded its scope of policy concern to address broader consumer issues on the Internet such as fraud and unsolicited commercial email. It has also taken a lead role in the states by tracking the 2,000 Internet related bills that are expected to appear in state legislatures this year. The IA was a principal contributor to the creation of the OPA, and provided staff for the Alliance. IA's CyberBriefs, sent by email to its members and policymakers, provide daily updates on news worldwide about online privacy and other Internet issues.

Kodak has a privacy policy that informs Web site visitors of how personal online information is protected. The company ensures that employees are aware of these policies through seminars and other systems. A member of the steering committee of BBBOnLine, Kodak has applied for the BBBOnLine Privacy Seal. Kodak executives have actively participated in industry forums and spoken in various venues to encourage other businesses to adopt privacy policies and programs.

LEXIS-NEXIS has a privacy policy posted on its Web site that informs users about how the company acquires and distributes information products. The policy includes recommendations on how consumers can access information about themselves that is contained in LEXIS-NEXIS information products and how consumers can opt-out of these information products. The company has applied for a BBBOnline Privacy Seal, is a member of the Board of BBBOnline and the BBBOnline Privacy Steering committee, and chairs the Individual Reference Services Group, an industry self-regulatory effort. As part of a company-wide educational campaign promoting the responsible use of information products, the company has conducted consumer privacy awareness training programs for all of its employees, and has spoken at more than twenty industry, bar and policy events on various aspects of consumer privacy protection and industry self-regulation in the past year.

Microsoft has mobilized a company wide campaign to put consumers in control of their online personal information, and has continued widespread education of its business partners and the industry at large about the need to protect consumer privacy online. Recent privacy initiatives include the company's plan to purchase advertising space only on Web sites that have comprehensive privacy policies posted by the year 2000, and launching and promoting the Privacy Wizard, a free online tool that allows people to easily create and post comprehensive privacy policies on their privacy.linkexchange.com Microsoft is also leading the development of a standard industry platform for privacy, the Platform for Privacy Preferences (P3P) Project, and is working to incorporate P3P protocols into its products and services, eventually enabling customers to express their privacy preferences and visit sites based only on those preferences. Microsoft Passport, a service that will provide customers with a single, sign-in registration and "wallet" for use across a large number of Web sites, demonstrates our commitment to protecting consumer privacy and data security. Microsoft is also a founding member and active participant in GetNetWise, a children's online safety initiative, and participates in programs with other industry organizations to educate a broad range of consumers about effective ways to use the Internet safely and protect personal data online.

The Motion Picture Association of America (MPAA) and its seven members are committed to protecting individuals online and all MPAA member Web sites have posted privacy policies. As a strong advocate of protection of children on the Internet, MPAA member companies have been leading the way in implementing the Children’s Online Privacy Protection Act.

NCR has adopted corporate-wide privacy principles for the personal data protection of consumers and employees. NCR is looking to enable other companies to more easily and effectively meet OPA’s principles by making available data protection software, such as Teradata, and services, such as Privacy Discovery, that will allow businesses to manage consumer choice, facilitate consumer access, and provide security, accountability, and anonymity. NCR also created a "Privacy Center" dedicated to assisting businesses in meeting consumer data protection guidelines in Europe, the United States and other world markets. NCR ran an advertisement that appeared in American airports that read: "If you want your customers' TRUST, you have to respect your customers' PRIVACY." NCR privacy executives have also participated in industry events and forums worldwide concerning consumer privacy and industry self-regulation.

Netscape continuously updates its privacy policy, which has been posted on its Web site since August 1997. Founding sponsor of both BBBOnLine and TRUSTe privacy certification programs, Netscape’s Web site is certified by TRUSTe. Their Kids and Family Channel was the second site to carry TRUSTe’s Kid Seal.

Verizon Communications produced a videotape featuring FTC Commissioner Mozelle Thompson speaking on protecting online privacy. It was broadcast to Verizon employees to educate them on the company's privacy policies. Verizon displays the TRUSTe Privacy Seal, and has been active in advocating to companies about adopting privacy policies and posting them on their Web sites. Recently, Verizon introduced a Bill Viewing Service that allows customers to access the information the company maintains on them.

Viacom’s Nickelodeon Online launched a series of online safety vignettes featuring Nickelodeon’s animated characters in February. In March, Nick.com was voted one of the Web’s safest sites by Cyber Angels, the largest online safety and educational program on the Internet. Holding advertisers to its guidelines, Nickelodeon’s standards department reviews all prospective ad links for kid-appropriate content and safety. Nick.com will not link with an advertiser who has a chat room unless it can prove that the room is monitored by an employee of the advertiser’s company. At its own chat events, Nickelodeon always monitors in real-time with company monitors. Viacom is a member of the steering committee of BBBOnLine, and has worked with the FTC in its implementation of the Child Online Privacy Protection Act. Nick.com was the first children’s Web site to receive a special Kid’s Privacy Seal from the BBBOnLine, demonstrating the site's commitment to protecting the privacy of children.

Novell audits its Web site to ensure that all company privacy guidelines are followed. Novell is a sponsor of TRUSTE and carries the seal. In addition, Novell has taken the pledge to limit web advertising to those with a TRUSTe or equivalent privacy policy in place. In March, Novell demonstrated a new product called DigitalMe, which gives individuals the ability to manage their Internet identity. By leveraging the power of Novell Directory Services (NDS), DigitalMe enables users to share different kinds of information about themselves with different sites according to their personal preferences. It will be available as a free download from the Internet in a few months. Novell has made online privacy a priority over the past year. They have an extensive privacy policy designed to educate consumers about Internet use, their rights of choice, and access to personally identifiable information. Novell has established an inter-departmental privacy team to review all aspects of the company's online privacy activities. Novell continues as a premier sponsor of TRUSTe, carries the TRUSTe seal, and works closely with them to promote industry self regulation. Novell is also developing products and tools that can empower users to control their personal information online.

PricewaterhouseCoopers LLP was one of the first professional services firms to post a privacy statement on its Web site and now is revising the statement in line with current international standards. PricewaterhouseCoopers LLP is a member of the TRUSTe Board of Directors, and is one of the official auditors for TRUSTe. PricewaterhouseCoopers also sponsors various surveys and projects with Privacy and American Business and participated in the 1998 Department of Commerce symposium on online privacy. In May 1999, the company released a white paper, "Privacy . . . A Weak Link in the Cyber-Chain," examining the impact of privacy issues on the growth of E-Business. Articles on web privacy, children's privacy online, and privacy and software agents can be found on www.pwcglobal.com/privacy/. In addition to helping U.S. industry implement self-regulation processes, PricewaterhouseCoopers also assisted Hong Kong Data Protection Commissioners in developing and implementing verification processes for its Personal Data Protection Ordinance.

Procter and Gamble was an early participant in the Online "Privacy" Alliance (OPA) and a charter member of BBBOnLine. P&G serves on the BBBOnLine Board and chaired the multi-industry Steering Committee that oversaw the successful development of BBBOnLine's self-regulatory program. P&G also chaired the International Chamber of Commerce (ICC) Task Force that developed that organization's self-regulatory policy. P&G continues to actively promote self-regulatory approaches to managing online privacy, a recent example being a presentation entitled "Self Regulation of Interactive Media: The New Millennium Challenge" given to the 46th World Congress of the World Federation of Advertisers (WFA) in Seoul, Korea (Edwin L. Behrens: May 1999). P&G posts its privacy policy on all U.S. corporate and brand Web sites to inform consumers how their data will be used and managed. P&G's Privacy Policy and associated guidelines have been broadly communicated both internally and also to all interactive advertising agencies and key internet technology vendors with which P&G does business. P&G makes it a practice to only advertise on sites that have a posted privacy policy.

Back to Top

The Software and Information Industry Association (SIIA) has developed a comprehensive approach to assisting companies in developing privacy practices. This includes creating educational materials to help companies, working with enforcement mechanisms to reach SIIA member companies and developing a seminar series to help companies develop privacy policies that will be offered in cities throughout the country through 1999. These three-hour, interactive seminars provide an overview of the legal environment, explain self-regulation, outline what a privacy policy should contain, provide a checklist for companies to use in auditing their own practices, identify who in a company should be involved, suggest methods for communicating with customers and define different types of third-party enforcement mechanisms. In addition, SIIA has developed an aggressive member-to-member outreach program to ensure that all of its member companies implement the fair information practices adopted by the association.

Unilever has linked a comprehensive consumer privacy policy to each of its brands' Web sites in the past year. To ensure ongoing compliance with the policy, Unilever retained an outside firm to monitor its efforts and to highlight any other potential privacy-related issues. Unilever intends to seek the TrustE and/or BBBOnLine seals for each of its sites.

The United States Council on International Business (USCIB) hosted an inter-association meeting on effective privacy protection that issued a call-to-action for associations to work with member companies to post privacy policies. To assist USCIB members in the internal review process during the development of a privacy policy, the association developed a Privacy Diagnostic that has been widely disseminated. USCIB co-sponsored the SIIA Privacy Policy Workshops and is currently developing a program to encourage member companies that have not yet posted privacy policies to do so. USCIB through its international affiliations with the International Chamber of Commerce (ICC) and the Business and Industry Advisory Committee to the OECD, has taken an active role in promoting effective self-regulation based on the OECD privacy guidelines. Through the ICC, a model contract for privacy protection has been developed and submitted to the European Commission.

WebSideStory a provider of the HitBox audience measurement service, launched on its Web sites a comprehensive Privacy Center that includes (1) detailed disclosures for Internet users, (2) on-line viewing for Internet users wishing to see what information about their computers is available to Web sites they visit, (3) a list of all HitBox and other cookies received at WebSideStory sites, along with their purpose, (4) an opt-out for HitBox cookies that works across 150,000 sites using the HitBox service, (5) detailed FAQs, and (6) resource links enabling an Internet user to answer privacy related questions. WebSideStory revised its data collection techniques and privacy policies to stop collecting IP addresses of Internet users, either at WebSideStory sites or any sites using the HitBox service. WebSideStory participates in the Internet Advertising Bureau's Chief Privacy Officer Council and is a member of the Privacy Partnership. The company has its own Chief Privacy Officer, an expert on Internet legal issues. WebSideStory contractually requires its customers using the HitBox service to post privacy policies, disclose that the service is being used and link to the WebSideStory Privacy Center. WebSideStory also launched a detailed FAQ for Webmasters, providing links to valuable resources. WebSideStory has been awarded both the TRUSTe and BBBOnline seals for each of its sites.

WorldCom has a strong history of commitment to consumer privacy. The company's policies for protecting personally identifiable information exceed OPA guidelines, and its practices have been validated by the BBBOnLine, one of the leadership organizations in online privacy protection. Further, WorldCom takes special care to protect the privacy of children and does not collect personally identifiable information from anyone under 18. WorldCom is united in ensuring privacy online and its intra-corporate privacy task force upholds the strictest of privacy protection standards in handling its customers' personal data.

Xerox Corporation had a robust privacy policy posted online since early 1997 covering the entire xerox.com domain.  As a founding sponsor of BBBOnline, Xerox currently serves on the BBBOnline Board and is in the process of applying for the BBBOnline seals.   Xerox is also a sponsor of the Online Privacy Alliance and currently upholds all online privacy guidelines set forth by the OPA.

Yahoo!'s and Yahooligans!, Yahoo!'s Web guide for kids, are both TRUSTe licensees. Yahooligans! was the first children's site to display the TRUSTe Children's Privacy Seal. Last October, Yahoo! co-founded the Privacy Partnership to raise consumer awareness of online privacy.