Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Complexity is the Enemy of Secure, Stable Systems | Main | Who Can You Trust? Hacker/Security Expert Busted for Credit Card Theft »

Microsoft Patents Privacy Policy Notification Mechanism

InformationWeek is reporting on a new patent awarded to Microsoft for notifying users when the privacy policy of an service changes. The article notes that Microsoft won't user personal data if you don't accept the new policy. What it doesn't say is how your service might degrade if you don't. Will we lose features that "require" higher levels of disclosure?

Here's the description of the process:

The patented system automatically informs users if there is a change to the way in which Microsoft intends to use personal data embedded in the application, and then prompts them to consent to the change. It also prevents the application from accessing the user's personal information or data unless the consent is given.

Unless there are overarching agreements about how policy agreements can change and how those changes can affect services, I'd be hesitant to adopt any Microsoft software-as-a-service pitch.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/424

Comments

And in related news: Microsoft patent the act of breathing in.

Either I'm missing something (wouldn't be the first time), or this is just absurd...

I'm not sure what the patent office found innovative and unique about this. The bigger question in my mind is why did Microsoft even bother? What do they have planned for this?

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net