cfpb / sbl-project

Project management repo for the SBL project
Creative Commons Zero v1.0 Universal
1 stars 1 forks source link

[Task] Add a privacy act notice #41

Open billhimmelsbach opened 1 year ago

billhimmelsbach commented 1 year ago

As any visitor to the homepage, I want to understand my rights regarding the privacy act.

Acceptance criteria

Depends on

Context

274596562-9f04ac2b-ed3a-48f1-a82f-9e527cece4bb
natalia-fitzgerald commented 1 year ago

@billhimmelsbach The UI/UX exploration for this task has not yet been completed. Mock-ups are still in progress.

chynnakeys commented 4 months ago

Privacy Notice as approved by Legal + Privacy team @billhimmelsbach @natalia-fitzgerald

Privacy Notice The Consumer Financial Protection Bureau (CFPB) is collecting data to test the functionality of the Small Business Lending system. The testing will help ensure that the system can support the submission of data needed to enforce fair lending laws pursuant to Public Law No. 111-203, Title X, Section 1071, codified at 12 C.F.R. 1002. Participation is voluntary. If you choose to participate, the CFPB will collect your first and last name to test the User Profile page. The CFPB will not use the data for any other purpose besides testing. Please do not submit any live data in the system.

natalia-fitzgerald commented 4 months ago

@chynnakeys @angelcardoz Can we change the first sentence to read: "The Consumer Financial Protection Bureau (CFPB) is collecting data to test the functionality of the small business lending data submission platform."

OR

if we have to use the words small business lending then it should be: "The Consumer Financial Protection Bureau (CFPB) is collecting data to test the functionality of the small business lending system." Still, I don't think this name sounds right.

natalia-fitzgerald commented 4 months ago

@chynnakeys @angelcardoz

Can we also update the way we reference the webpage?

"Participation is voluntary. If you choose to participate, the CFPB will collect your first and last name to test the "Complete your user profile" page. The CFPB will not use the data for any other purpose besides testing."

angelcardoz commented 4 months ago

@chynnakeys, the notice is explicit about first and last name, but we are also testing LEI and other financial institution information tied to LEI. Do we need to mention this as well?

Is LEI or any other institution information considered "live data"?

natalia-fitzgerald commented 4 months ago

@chynnakeys @angelcardoz How's this?

chynnakeys commented 4 months ago

@chynnakeys, the notice is explicit about first and last name, but we are also testing LEI and other financial institution information tied to LEI. Do we need to mention this as well?

Is LEI or any other institution information considered "live data"?

no, this is not considered "live data". that would fall into the FI3 information. Live data = SBLAR data

natalia-fitzgerald commented 1 week ago

@billhimmelsbach I think all work on this launched with beta. Can we go ahead and close this ticket?