Slashdot Mirror

← Back to Stories (view on slashdot.org)

Is This Local Government's Privacy Policy Fair?

Posted by Cliff on from the at-least-they-are-asking! dept.

stinkydog asks: "I though some of the IANALs and privacy experts on Slashdot might have some good input on the following privacy policy for a Parks and Recreation department in a large city. Does it make sense? Would you sign off on it?" Read it below and share your thoughts on this, as always.

"What information do we collect?

Name - Allows us to identify parents, guardians and participants

Address - Provides an exact geographic location

Emergency contacts - Allows us to reach a responsible party in an emergency

Birth Date - Allows us to calculate age of participants

Sex - Provides further information on participants

School - Allows us to better partner with education providers

Waiver - The waiver contains three parts: 1) A liability release 2) Permission to seek treatment in an emergency situation 3) A release of claims against our photographic records of our programming

Some federally funded programs also require:

Household income - Calculated against the poverty line

Household size - Used in conjunction with household income

Ethnicity - Compared with census data

How do we use what we collect?

Although we my use the unique information we collect about participants to inform them of further recreational and cultural opportunities, we will not sell, trade or otherwise release unique information without a court order. Telephone number information will be used for contacts related to programming registered for by a household member (changes, cancellations, emergencies, and satisfaction surveys), Aggregate data, such as the number of participants by zip code or the average age of program participants will be used in marketing literature, in making management decisions, and to better tailor our offerings to the need of our customers. Aggregate data will be striped of all unique names and address before being released. The law protects the unique data we collect, and it can not/will not be released without a court order. The data we collect for the Federal Government is released to them in aggregate form. No unique information is sent to the Federal Government.

Definitions:

Unique information: Able to identify a single person or household (example: John Smith; 2013 W Third St., 333-2100)

Aggregate information: information that is the same for a group of people (example 4-6 years old; 45403)"

6 of 11 comments (clear)

  1. Local nightmare by coyote-san · · Score: 2

    Local rec centers are often nightmares.

    Skipping the details (partly because I've forgotten them :-), the local rec center was very non-responsive to complaints. Eventually there was strong evidence that someone was taking pictures in the women's locker room.

    The response? A rewritten waiver that made it clear that patrons could be photographed ANYWHERE IN THE FACILITY and they gave permission for this. Only people following the news would know that this included the shower, the toilet, and other areas where most people expect privacy.

    Another part of the waiver was an acceptance of all risk on rec center sponsored events. I can accept the need to protect the facility from lawsuits because, e.g., someone felt that they didn't really need to have a physical before joining a high impact aerobics class. But this disclaimer looked like it would also cover an accident on an art gallery tour caused by a drunk driver employeed by the city, someone injured by a lightning strike because a nature hike tour ignored numerous warning signs of an approaching storm, and other clearly negligent acts.

    I doubt you'll get anywhere with the bureaucrat running the Rec Department. You might, but it's unlikely. You should probably expect to speak at city council meetings and hope someone will listen. But the city is dealing with some legitimate concerns (minors need parental contact information, most other people desire emergency contact information, the feds provide a lot of funding and demand proof that the money isn't being used at a de facto country club).

    --
    For every complex problem there is an answer that is clear, simple, and wrong. -- H L Mencken
    1. Re:Local nightmare by stinkydog · · Score: 2

      Actually, I am authoring the policy and I want to achieve the best balance that I can between privacy and meeting the needs and requirements of the department and city.

      The photo waiver is in place because a person wanted to be paid for a photo we took at one of our free events. We need the ability to document programs and events without having to chase down every participant or their parent for a waiver of rights to the photo. By getting sign-off in advance we save the hassle. It is a small price to pay IMHO for a free or subsidized service.

      About the waiver, it only protects us if you do something stupid. If we do something stupid (negligence) no waiver in the world can protect us from the lawsuit. They are of limited value in the best circumstance and utterly worthless the rest of the time.

      I am one of the bureaucrats running the Rec. department. We read Slashdot to!

      As per you local difficulties I can not comment but it sounds pretty wrong to me.

      --
      âoeWho knew something as harmless as willful ignorance could end up having real consequences?â
  2. Mostly reasonable by pubudu · · Score: 2
    Most of the information under What Information Do We Collect? is reasonable, but the information required by the federal government is problematic. The fact that the center will not use that information against me specifically (ensured by the non-use of unique information) is hardly reassuring; there is something objectionable about the idea that there is, somewhere in the ever-secure filing cabinet of a rec center, a piece of paper that lists my name, address, income, family, and race.

    The information that the rec center requests is reasonable and seems to serve legitimate purposes. The federal government, on the other hand, wants data that I, as a citizen, do not want anyone but them to have (at least in conjunction with my name and address). If they need the info, does it have to go on the same form as the other information?

    --
    ~~~~~~

    under-paid karma whore

  3. You've done well.. by technos · · Score: 2

    That's a privacy policy I could live with.

    --
    .sig: Now legally binding!
  4. Missing: Opt-in/Opt-out by ebbe11 · · Score: 2
    Although we my use the unique information we collect about participants to inform them of further recreational and cultural opportunities,

    Add the possibility for participants to decide whether they will accept promotional material, preferably as an opt-in choice. See also Jakob Nielsen's column on "Request Marketing".

    --

    My opinion? See above.
    1. Re:Missing: Opt-in/Opt-out by javagurl · · Score: 2
      Telephone number information will be used for contacts related to programming registered for by a household member (changes, cancellations, emergencies, and satisfaction surveys).

      Unless this rec center enjoys annoying its patrons, I'd consider it essential to give the them the ability to opt-out of survey phone calls. Since survey call-centers are usually blocking caller-id, I think most people would agree that such calls an are, at minimum, suspicious and annoying.

      JavaGurl