Collected User Information... What can be made "Public"?
 

If you own a site that users register on and pay you. You can collect a fairly significant amount of information about this person.

First Name
Last Name
Email
Street Address
City, State, Zip
Phone
Username
Password
IP Address
etc...

How much of this information is considered "Private"? What I'm getting at is, what information is "forbidden" to post in public areas deemed under privacy laws? What info is Fair Game?

Inquiring Minds Want To Know.

Fight This Chargeback.

Umm none of it.

all of it!


just send your records over tomorrow :winkwink:

So, posting someone's username & IP address is a NoNo?

Here's the pieces of info I'm interested in:
Username
First / Last
IP Address
City & State

What is your public privacy policy for the site... there in lies your answer.

Any information you've let people know you will be collecting, and might possibly make public or use in various manners... well you get the picture.

ding ding ding we have a winnar :thumbsup

So, if I tell them, that I will share their billing and contact information with the public, I can post it anywhere I wish?

lol @ this privacy policy i made years ago

:thumbsup:thumbsup

I wouldn't go throwing cc numbers into the wind or anything, but if you've made it public policy... you are free to do as you let people know you are doing, (double checks in head real quick... i think that made sense) if they willingly gave you information.

I think your privacy policy just made me cum a lil... :pimp:pimp

All of it is private and cannot be disclosed without a valid court order.

The only exception is that you can disclose this information to law enforcement without a subpoena if you say that you will in your Privacy Policy.

As you are certainly aware, the vast majority of your visitors do not read your Privacy Policy or Terms of Service. If you tell your users that you will disclose all of their personal information and then do it, you will likely NOT get away with it. This is because a Court is likely to consider such a provision invalid and unreasonable in light of privacy laws and the general expectation of privacy.

First Name/Last Name/Address/Phone seem like information that may be in a telephone book, most of which are accessible/searchable online. But some people have opted-out of telephone book listings. Moreover, such a disclosure in connection with your website provides a second link, and that would be unacceptable. It's no longer a listing of "this person's information", but "this person's information and this person uses this site". This could also bring up defamation suits - how many people want the world to know that they are paying for porn?

I'm only interested in:
First Name
Last Name
Username
City / State
IP Address

Interesting question, but we really have an access to a lot of private info!
I wonder, if a site is hacked, would you still be responible for all that private data?