What is personal information (or personally identifiable information)?
In the context of U.S. privacy laws, for example, it’s information that can be used to identity an individual; that is information either used on its own or with other type of information.
The number one personal information collected by most websites is the email addresses. Then follows the phone numbers, the names (first and last name) and so on.
1. What personal information do you collect?
Your policy must clearly specify what type of information you collect. This usually includes the following:
- email address
- date of birth
- billing information
- phone number
- first and last name
- and so on
2. What do you do with the information?
3. Do you allow access to children under 13?
The Children’s Online Privacy Protection Act, or COPPA, has a list of detailed requirements of websites that are collecting personal data from users under the age of 13.
Among the list of requirements, a business must obtain verifiable parental consent before collecting (collecting, use and/or disclosure) any kind of personal data from a children under 13.
If your website is not intended for children under 13, make sure your policy includes a statement for this.
4. Do you cover a merger or acquisition event?