- What types of data do organizations gather from users?
- Why do organizations gather the data?
- How do organizations gather the data?
- How do organizations store the data?
- Who will have access to the information?
Organizations may share the information with corporate affiliates and third-party vendors that provide specialized services, such as payment processing, business analytics, and more. Users have the right to know all the affiliates, third-party vendors, and service providers that will be able to access their data.
- Whom do consumers contact for queries?
Types of Consumer Data
Here are the most common types of consumer data that companies collect:
- Personal data
Personal data refers to any form of information that can be used to identify a person. It includes names, home/mailing addresses, home phone numbers, email addresses, financial information, and more.
- Usage and analytics data
Companies may automatically collect data when users visit the website, such as the Internet Protocol (IP) address, operating system, and other server log information. This also covers web browsing habits – from the pages that users view and the links that they click to the way they navigate the website.
Here are a few trade-specific federal laws:
- Health Insurance Portability and Accounting Act
HIPAA sets the national privacy policies that protect medical records and personal health information.
- Fair Credit Reporting Act
FCRA regulates the collection, use, and dissemination of credit information.
- Children’s Online Privacy Protection Act
- Gramm Leach Bliley Act
GLBA is directed towards banks and other financial institutions. It requires them to specify what type of data they gather, how they use the data, and how they protect it.