A SOCIAL, TECHNICAL, AND LEGAL FRAMEWORK FORPRIVACY MANAGEMENT AND POLICIES

Organizational privacy policies and privacy practices reflect an organization’s perceived trustworthiness to those with which it conducts business. This paper proposes a framework, based upon an in-depth two-year analysis of Internet privacy policies, for examining an organization’s privacy management practices within the context of their respective privacy policies. The framework aids in evaluating privacy from various organizational perspectives: legal, technical, business rules, social norms and contractual norms. It also provides assistance when developing privacy policies for e-commerce Web sites. We discuss a case study in which the framework was employed to analyze 23 Internet health care Web site privacy policies.