How to write a Cloud-Aware Privacy Policy for Your Civic App

[evanwolf]

IANAL

• Four things we hate about privacy policies
• A privacy policy's job is... (user expectations; operator guidelines; liability avoidance)
• Required elements of a privacy policy
• Legal context of your civic app privacy policy (Who are the parties? Jurisdiction?)
• Location and control of data (darned Internet)
• Optional data portability elements (user rights to import, export, inspect, notice, delete, revise)
• Engineering considerations
• Designing policies that build community and trust (data minimization; conservative use)

Workshop activity: What should be in OpenOakland's model app privacy policy?