UK Privacy Law Changes coming

[Brett_Tabke]

Although not specifically about search engines, it does deal with uk ecommerce. I've not seen this mentioned anywhere.

This Wednesday (24 October), the second transitional period of the Data Protection Act takes effect in the UK, meaning that companies are required by law to provide all the personal data they store on anyone, if that person requests it.

Is Wednesday the end for Web bugs and dodgy cookies? [theregister.co.uk]

The question I have about it, is how does this affect those of us that do biz with the UK? That includes those of us with forum systems. While I don't think those of us not in the UK are under any obligation to comply, I think it is wise to do so.

I believe I have all of the board covered with all data stored by the system shown to users under the "show cookies" and "profile" links at the top of the page.

[carlwright]

Is it still a requirement to register? I don't think I have a client that even knows what it is!

[acee]

If you've submitted your details to a web site then you know what information you've given them.

Surely the main issue is what the web site does with that information after that.

I would have thought that making opt-in a choice rather than defaulting to opt-in would be the most practical solution.

From the article it appears that per session tracking is OK, but repeat visit tracking is affected by this transition.

[engine]

The Data Protection Act is primarily intended to protect consumers from abuse and that information held on people is adequately safeguarded. The changes are already in place.

Here are some links to further reading.

data protection act introduction [dti.gov.uk]

And, is it for you? here [dti.gov.uk]

Data protection act contacts [dti.gov.uk]

Data protection registrar. [dataprotection.gov.uk]

PDF reader required for this one [http://www.dpr.gov.uk/downloads/selfassess.pdf]Assessment guide[/url]

Further information - there is no need to Notify for the Data Protection Register if the information collected from your website is for your own purposes and not disclosed to others. In addition, it's worth adding a Privacy Notice to your website, and, allowing users to opt in/opt out from your list.

(edited by: engine at 8:41 am (gmt) on Oct. 23, 2001

[backus]

I think the main issue should be how to reduce credit card fraud. This weekend, someone in Moscow used my girlfriend's credit card. The obviously got the card number. I think a PIN system should be introduced for the internet.

[IanTurner]

backus, I am working on something better than a PIN number which can be found out.

But in addition to this thread there is also a change to direct marketing laws in the pipeline in the UK. Email/Fax marketing information will only be allowed to be sent to opt in lists. Telephone and SMS marketing seems to be different and you have to subscribe to an opt out list to avoid it.

[NFFC]

The biggest impact will probably be that employees have the right to see all records that their employer holds about them, could be fun!

From the e-commerce angle I believe that all information that is held for accounting purposes is exempt.

[FreeBee]

> Using spiders to gather email addresses is very likely to cross the threshold. If a company buys an email marketing list, it will need to ensure those addresses were obtained legally.

We're probably a very long way off enforcement but this is one aspect moving in the right direction.

[IanTurner]

Certainly a long way off from enforcement. There are all sorts of possible workarounds too.

[kapow]

<Email/Fax marketing information will only be allowed to be sent to opt in lists>

Wouldn't it be great if Opt-in lists could be enforced.

I receive several spam emails every day claiming that I subscribed and that they 'object to unsolicited spam' so email [e-mail] I don't bother unsubscribing any more because as soon as I do 'hey-presto' I get some fresh spam from a completely 'different company' that claims I 'subscribed'.

[adamcmoran]

"I think the main issue should be how to reduce credit card fraud."

Has anyone noticed that companies have started to ask for a three digit code off the back of you Credit Card/ Switch card. It is the one on the signature strip. I have noticed this both on the internet and over the phone transactions in the last month. Basically any card holder not present transactions.

So they have started to do something.

Adam

[NFFC]

>"I think the main issue should be how to reduce credit card fraud."

We are currently at 0.002% fraud for the year so far.

[IanTurner]

Talk to me about fraud, I have a site under development which will be able to reduce your 0.002%

All the best
Ian