Privacy webshop

1
(No Transcript)
2
hp privacy strategy p3p implementation
Barbara Lawler HP Privacy Manager November 16,
2001
3
hp privacyguiding principles

• customers control their own data
• give choices that enhance trust and enhance the
  business
• put the customer in the lead to determine their
  relationship
• highest integrity in practices, responses and
  partners

4
consumer trust

• Consumers information belongs to them.
  Consumers should be empowered to use their own
  property -- that is their personal information --
  the way that they choose.
• - Carly Fiorina, hp CEO
• Joint Economic Committee High Tech Summit,
  6/7/2000

5
part of a holistic privacy strategy

• national privacy principles and baseline
  legislation requiring notice and choice
• customer-empowering privacy technology
• self-regulatory foundation with broad involvement
  in high-trust organizations
• consumer and stakeholder awareness and education

6
p3p addresses two of the fair information
practices

• 1 notice
• 2 choice
• 3 access and accuracy
• 4 security
• 5 oversight/enforcement

the foundation of hps universal privacy policy
7
hp supports p3p

• customer empowerment
• based on global standards
• complementary to BBBOnLine
• framework for consumer education
• compatible with baseline legislation
• active support of P3P outreach efforts and events

8
hp.com implicationsand approach

• hp.com is a large, distributed web environment
• obtained management support from hp.com council
  to implement P3P policies
• identified high-priority, high-traffic customer
  destination points
• - hpshopping.com
• - u.s. business store
• - hp customer care driver updates, subscribers
  choice
• - IT resource center
• communicated hp and P3P strategy and priorities
  to regional hp.com councils and web owners
• create classes of P3P policies based on
  approximately a dozen data collection scenarios
• minimize work for web owners once most complex
  P3P policy created, easy to leverage to other
  sites
• target U.S. sites first, key sites in Europe and
  Japan next

9
hp.com implementation steps

• Stage 1
• reviewed P3P specification and evaluated based on
  universal hp online privacy statement
• developed baseline p3p policy for www.hp.com
  entry point using IBM policy generator tool
• placed in hp.com directory
• demod at June 2000 P3P Interop
• updated www.hp.com p3p policy to current
  specification August 2001

10
hp.com implementation steps

• Stage 2
• www.hpshopping.com selected as first strategic
  destination
• - using privacy as a differentiator
• - well-known marketplace
• - holiday-season ready
• used simple technology tools and site review to
  create first draft P3P policy
• joint review of policy elements and cookie
  definitions with hpshopping.com technical and
  marketing teams reps
• evaluated policy for customer experience and
  functionality in test environment for each
  browser privacy setting
• in production October 17, 2001

11
implementation realities

• Resources
• - hp privacy manager- hp.com summer intern and
  web program manager- needs day-to-day owner
  long-term
• Time
• - up front-- understand the P3P spec, P3P
  purpose, privacy policy and policy generator
  tool(s) - organizational selling- a few hours
  of the web site owner for review and test
• Maintenance
• - create regular update and review cycles-
  respond to customer feedback- need technology to
  fully manage broad deployment

12
(No Transcript)