dido:public:ra:1.3_gov:1_legaldocs:3_pp
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
dido:public:ra:1.3_gov:1_legaldocs:3_pp [2021/05/03 17:41] nick |
dido:public:ra:1.3_gov:1_legaldocs:3_pp [2022/03/26 10:01] (current) nick |
||
|---|---|---|---|
| Line 2: | Line 2: | ||
| [[dido:public:ra:1.3_gov:1_legaldocs|return to Legal Documents]] | [[dido:public:ra:1.3_gov:1_legaldocs|return to Legal Documents]] | ||
| - | [[dido:public:ra:xapend:xapend.a_glossary:p:p_p]] | + | One of the [[dido:public:ra:1.3_gov:1_legaldocs |legal documents]] required for the formal incorporation of an ecosphere [[dido:public:ra:xapend:xapend.a_glossary:c:coi|community of interest (CoI)]] is the [[dido:public:ra:xapend:xapend.a_glossary:p:p_p]]. The P&P establishes a set of principles and policies that serve these principles, in order to achieve the CoI's long-term goals (i.e, the purpose as stated in its [[dido:public:ra:xapend:xapend.a_glossary:c:charter|charter]]). The P&P defines specific methods/procedures employed to express these policies in action: detailed rules and guidelines to control the activities and [[dido:public:ra:xapend:xapend.a_glossary:d:data_retention_policy]] of the organization. In the US, some policies are concerned with human resources (HR) issues (e.g., [[dido:public:ra:xapend:xapend.a_glossary:h:hippa]], or [[dido:public:ra:xapend:xapend.a_glossary:d:data_protection|data protection]](( |
| - | + | **NOTE:** From [[https://iclg.com/practice-areas/data-protection-laws-and-regulations/usa]], | |
| - | One of the [[dido:public:ra:1.3_gov:1_legaldocs |legal documents]] required for the formal incorporation of an ecosphere [[dido:public:ra:xapend:xapend.a_glossary:c:coi|community of interest (CoI)]] is the [[dido:public:ra:xapend:xapend.a_glossary:p:p_p]]. The P&P establishes a set of principles and policies that serve these principles, in order to achieve the CoI's long-term goals (i.e, the purpose as stated in its charter). The P&P defines specific methods/procedures employed to express these policies in action: detailed rules and guidelines to control the activities of the organization. In the US, some policies are concerned with human resources (HR) issues (e.g., [[dido:public:ra:xapend:xapend.a_glossary:h:hippa]], or data protection(( | + | |
| - | * **NOTE:** From [[https://iclg.com/practice-areas/data-protection-laws-and-regulations/usa]], | + | |
| * //There is no single principal **Data Protection** legislation in the United States. Rather, a jumble of hundreds of laws enacted on both the federal and state levels serve to protect the personal data of U.S. residents. At the federal level, the **Federal Trade Commission Act (15 U.S. Code § 41 et seq.)** broadly empowers the U.S. Federal Trade Commission (FTC) to bring enforcement actions to protect consumers against unfair or deceptive practices and to enforce federal privacy and data protection regulations. The FTC has taken the position that "deceptive practices" include a company's failure to comply with its published privacy promises and its failure to provide adequate security of personal information, in addition to its use of deceptive advertising or marketing methods. As described more fully below, other federal statutes primarily address specific sectors, such as financial services or health care.In parallel to the federal regime, state-level statutes protect a wide range of privacy rights of individual residents. The protections afforded by state statutes often differ considerably from one state to another, and cover areas as diverse as protecting library records to keeping homeowners free from drone surveillance.// | * //There is no single principal **Data Protection** legislation in the United States. Rather, a jumble of hundreds of laws enacted on both the federal and state levels serve to protect the personal data of U.S. residents. At the federal level, the **Federal Trade Commission Act (15 U.S. Code § 41 et seq.)** broadly empowers the U.S. Federal Trade Commission (FTC) to bring enforcement actions to protect consumers against unfair or deceptive practices and to enforce federal privacy and data protection regulations. The FTC has taken the position that "deceptive practices" include a company's failure to comply with its published privacy promises and its failure to provide adequate security of personal information, in addition to its use of deceptive advertising or marketing methods. As described more fully below, other federal statutes primarily address specific sectors, such as financial services or health care.In parallel to the federal regime, state-level statutes protect a wide range of privacy rights of individual residents. The protections afforded by state statutes often differ considerably from one state to another, and cover areas as diverse as protecting library records to keeping homeowners free from drone surveillance.// | ||
| - | * //Although there is no general federal legislation impacting data protection, there are a number of federal data protection laws that are sector-specific, or focus on particular types of data. By way of example, // | + | * //Although there is no general federal legislation impacting data protection, there are a number of federal data protection laws that are sector-specific, or focus on particular types of data. By way of example, // \\ |
| - | * //The **Driver's Privacy Protection Act of 1994 (DPPA) (18 U.S. Code § 2721 et seq.)** governs the privacy and disclosure of personal information gathered by state Departments of Motor Vehicles, including photographs, Social Security Number (SSN), Driver Identification Number (DID), name, address (but not the five-digit ZIP code), telephone number, medical information and disability information.// | + | o [[dido:public:ra:xapend:xapend.a_glossary:d:dppa]] \\ |
| - | * //The Children's information is protected at the federal level under the **Children's Online Privacy Protection Act (COPPA) (15 U.S. Code § 6501)**, which prohibits the collection of any information from a child under the age of 13 online and from digitally connected devices, and requires publication of privacy notices and collection of verifiable parental consent when information from children is being collected.// | + | o [[dido:public:ra:xapend:xapend.a_glossary:c:coppa]] \\ |
| - | * //The **Video Privacy Protection Act (VPPA) (18 U.S. Code § 2710 et seq.)** restricts the disclosure of rental or sale records of videos or similar audio-visual materials, including online streaming.// | + | o [[dido:public:ra:xapend:xapend.a_glossary:v:vppa]] \\ |
| - | * //The **Cable Communications Policy Act of 1984** includes provisions dedicated to the protection of subscriber privacy (47 U.S. Code § 551).// | + | o [[dido:public:ra:xapend:xapend.a_glossary:c:cablesubscriber]] |
| )) and security), a direct response to the [[dido:public:ra:xapend:xapend.a_glossary:g:dgpr]], [[dido:public:ra:xapend:xapend.a_glossary:d:dpa]], or the [[dido:public:ra:xapend:xapend.a_glossary:c:ccpa]]. | )) and security), a direct response to the [[dido:public:ra:xapend:xapend.a_glossary:g:dgpr]], [[dido:public:ra:xapend:xapend.a_glossary:d:dpa]], or the [[dido:public:ra:xapend:xapend.a_glossary:c:ccpa]]. | ||
| The intent of the P&P is to influence and help formulate all the major decisions and actions of the organization. All activities within the organization are to take place within the boundaries set by the P&P. (( | The intent of the P&P is to influence and help formulate all the major decisions and actions of the organization. All activities within the organization are to take place within the boundaries set by the P&P. (( | ||
| - | Difference Between Policies and Procedures, Key Differences, accessed 21 May 2020,[[https://keydifferences.com/difference-between-policies-and-procedures.html]])) Procedures are specific methods outlining the steps required to fulfill the policies on a day-to-day basis within the organization. Together, policies and procedures help the governing body of an organization meet its mission and goals.((Policies and Procedures, Business Dictionary, [[http://www.businessdictionary.com/definition/policies-and-procedures.html]])) | + | Difference Between Policies and Procedures, Key Differences, accessed 21 May 2020,[[https://keydifferences.com/difference-between-policies-and-procedures.html]])) Procedures are specific methods outlining the steps required to fulfill the policies on a day-to-day basis within the organization. Together, policies and procedures help the [[dido:public:ra:xapend:xapend.a_glossary:g:gov_body]] of an organization meet its mission and goals.((Policies and Procedures, Business Dictionary, [[http://www.businessdictionary.com/definition/policies-and-procedures.html]])) |
| - | One of the larger policies that is often required by the governing body granting incorporation are the human resources policies, especially those concerning health and human safety. | + | One of the larger policies that is often required by the [[dido:public:ra:xapend:xapend.a_glossary:g:gov_body]] granting incorporation are the human resources policies, especially those concerning health and human safety. |
| - | * **Note** The Policies and Procedures (P&P) serve as part of the Regulatory Aspect within the Governing Model. See [[dido:public:ra:1.4_req:00_aboutreq:03_combreqmdl | Governing Roles]] and the [[dido:public:ra:xapend:xapend.j_gov_model | Governing Model]] for more information. | + | * **Note** The Policies and Procedures (P&P) serve as part of the Regulatory Aspect within the Governing Model. See [[dido:public:ra:1.4_req:00_aboutreq:03_combreqmdl | Governing Roles]] and the [[dido:public:ra:xapend:xapend.j_gov_model:start| Governing Model]] for more information. |
| ===== Standards ===== | ===== Standards ===== | ||
| Line 30: | Line 29: | ||
| ===== Tools ===== | ===== Tools ===== | ||
| * Rocket Lawyer, Health and Safety Policy Document Maker, Accessed 21 may 2020, [[https://www.rocketlawyer.com/gb/en/documents/health-and-safety-policy]] | * Rocket Lawyer, Health and Safety Policy Document Maker, Accessed 21 may 2020, [[https://www.rocketlawyer.com/gb/en/documents/health-and-safety-policy]] | ||
| - | * Rocket Lawyer, Data Protection and Data Security Document Maker, Accessed 21 May 2020, [[https://www.rocketlawyer.com/gb/en/documents/data-protection-and-data-security-policy]] | + | * Rocket Lawyer, Data Protection and [[dido:public:ra:xapend:xapend.a_glossary:d:datasecurity|Data Security]] Document Maker, Accessed 21 May 2020, [[https://www.rocketlawyer.com/gb/en/documents/data-protection-and-data-security-policy]] |
| ===== References ===== | ===== References ===== | ||
| * Health and Safety, Rocket Lawyer, accessed 21 May 2020. [[https://www.rocketlawyer.com/gb/en/quick-guides/health-and-safety]] | * Health and Safety, Rocket Lawyer, accessed 21 May 2020. [[https://www.rocketlawyer.com/gb/en/quick-guides/health-and-safety]] | ||
| * Overview of the Data protection and data security policy, Rocket Lawyer, accessed 21 May 2020. [[https://www.rocketlawyer.com/gb/en/documents/data-protection-and-data-security-policy]] | * Overview of the Data protection and data security policy, Rocket Lawyer, accessed 21 May 2020. [[https://www.rocketlawyer.com/gb/en/documents/data-protection-and-data-security-policy]] | ||
| + | |||
| + | <color darkred><todo @char>Review </todo></color> | ||
| /**=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- | /**=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- | ||
dido/public/ra/1.3_gov/1_legaldocs/3_pp.1620078098.txt.gz · Last modified: 2021/05/03 17:41 by nick
