3 ms·
The difficult part is that Twitter messed up privacy in the past and now they need to be extra careful. The most recent rollout was a mess. https://www.ftc.go
by shagie 4y ago
The difficult part is that Twitter messed up privacy in the past and now they need to be extra careful. The most recent rollout was a mess.
https://www.ftc.gov/sites/default/files/documents/cases/2010/06/100624twitteragree.pdf https://www.ftc.gov/sites/default/files/documents/cases/2010...
> IT IS ORDERED that respondent, directly or through any corporation, subsidiary,
division, website, or other device, in connection with the offering of any product or service, in or affecting commerce, shall not misrepresent in any manner, expressly or by implication, the extent to which respondent maintains and protects the security, privacy, confidentiality, or integrity of any nonpublic consumer information, including, but not limited to, misrepresentations related to its security measures to: (a) prevent unauthorized access to nonpublic consumer information; or (b) honor the privacy choices exercised by users.
> IT IS FURTHER ORDERED that respondent, directly or through any corporation, subsidiary, division, website, or other device, in connection with the offering of any product or service, in or affecting commerce, shall, no later than the date or service of this order, establish and implement, and thereafter maintain, a comprehensive information security program that is reasonably designed to protect the security, privacy, confidentiality, and integrity of nonpublic consumer information. Such program, the content and implementation of which must be fully documented in writing, shall contain administrative, technical, and physical safeguards appropriate to respondent’s size and complexity, the nature and scope of respondent’s activities, and the sensitivity of the nonpublic consumer information, including: ...
I'm going to draw attention to the last sentence of the second one. For any new product (like "Twitter Blue") it must be documented in writing, with a comprehensive security information how it is designed to protect the customer.