Privacy White Lists - Don't be Fooled (2009)
3. Summary of findings
Overall the study found that privacy white lists contained a surprising and alarmingly high proportion of inaccurate and out-of-date information. Depending on the trustmark scheme administering the white-list, between 22% and 73% of information is inaccurate or out of date. If a consumer relied on the white lists they would face the risk that they would receive no privacy protection from the trustmark scheme as the organisation’s membership had expired. Similarly the enormous number of missing or broken seals means that consumers are unable to verify membership for a large number of organisations.
Compliance Issue |
Mexico – AMIPCI |
Singapore – CommerceNet |
Thailand – DBD |
USA – Privo (Children) |
USA – TRUSTe (Children) |
Number of organisations in the sample |
278 |
168 |
22 |
9 |
41 |
No working seal |
5% |
45% |
18% |
44% |
22% |
Membership has expired |
5% |
14% |
36% |
44% |
n/a% |
Privacy policy not available |
17% |
26% |
18% |
0% |
2% |
Overall non-compliance |
23% |
54% |
73% |
55% |
22% |
This finding raises concerns about the use of white lists as a privacy protection mechanism and adds to more general concerns regarding privacy trustmarks and self regulation.
It is also alarming that all of the white lists examined in this article received Government approval. The two US white lists were both accredited by the Federal Trade Commission (FTC) and the other lists receive Government funding and high-level endorsement. There are risks for consumers in having Governments lend this type of credibility to trustmark schemes and white lists without adequate quality control and regulation in place.