Best Practices

1. The privacy policy should be easy to find and understand. 
2. The privacy policy should be available prior to or at the time customer information is collected or requested.
3. Legal council should review the privacy policy.
4. Customer contact to an agency should be transmitted in a secure manner, such as through a secure form as opposed to providing an email address.
5. The privacy policy should state that using email is not typically secure. Email can be secured using digital certificates.
6. Contact pages should contain a sentence referring the customer to the privacy policy.
7. Identify what and how survey information will be used.
8. The policy should state whether information or questions received might be reviewed by another agency.
9. The privacy policy should include any necessary disclaimer information.

Additional Information

• Sample Privacy Policy
• E-Services Privacy Standard