Notes from 9-5-2017

[dmleong]

• [ ] @dmleong copy 🍝 article from InfoQ onto blog
• [ ] @TheLucasMoore set up google form for email collection
• [ ] @dmleong @TheLucasMoore What are key takeaways and action items?
  • New user flow audit for consent
  • User profile audit to opt-out of info
  • Audit user privacy
    • Encrypted/hashed information
    • Location data
    • What kind of info should be considered private?
    • Is it being treated as private? (or is it blasted everywhere? i.e. email address on CreativeLive hero banner)
  • Allowed Oauth permissions (i.e. can send email on your behalf) - theory of least permissions
  • ToS audit for changes in privacy
  • Purchasing =/= consent
  • Ownership of information
• [ ] @TheLucasMoore finish the pledge