Evaluation Concern Questions
Navigate the Privacy Evaluation Concerns
Each privacy concern category is organized by the most important and easy-to-understand privacy practices in order to quickly evaluate how an application or service compares to similar products. Each privacy evaluation concern is comprised of ten related evaluation questions to provide a comprehensive analysis of the most important strengths and weaknesses of a product. Depending on the type of privacy evaluation, either all of the ten evaluation questions below are used, or only the most critical basic evaluation questions, indicated below with ("BASIC"), are used to comprise a concern score. The link below contains all of the evaluation concern questions with background references and citations for more information.
-
Data Collection: Responsible data collection practices limit the type and amount of personal information collected about people to only what's necessary to provide the application or service.
-
Data Sharing: Data sharing best practices protect a person's personal information from being shared with third-party companies and advertisers.
-
Data Security: Data security best practices protect the integrity and confidentiality of a person's data.
-
Data Rights: A person's data rights include the ability to review, access, modify, delete, and export their personal information and content.
-
Individual Control: A person has a right to exercise control over what personal data companies collect from them and how they use it.
-
Data Sold: Best practices include not sharing, renting, or selling a person's personal information to third parties for financial gain.
-
Data Safety: Data safety best practices limit the visibility of a person's information and their interactions with others to protect their physical and emotional well-being.
-
Ads & Tracking: Responsible advertising practices limit the use of personal information for any third-party marketing, targeted advertising, tracking, or profile generation purposes.
-
Parental Consent: For children age 13 or under, a parent or guardian's verifiable consent is required before the collection, use, or disclosure of the child's personal information to an application or service.
-
School Purpose: Data collection from K–12 students or teachers must abide by the legal obligations for the privacy and security of that educational information.