http://www. activistpost http://www.activistpost.com/2016/06/ny-electronic-communications-privacy-act-passed.html Being connected to the largest information database in the world does come at a price. Presenter: Gloria Lau – Client Relations Manager 1 of 16

This is what we’ll be discussing: More access, less privacy. Recipients’ Perception. VPN use in 2017 Data Privacy Programs CAN-SPAM Privacy Shield Third Party Arbitration Penalty Examples: Germany and China http://www.gettyimages.com/detail/photo/business-people-meeting-at-table-in-conference-room-royalty-free-image/147205273 2 of 16

More access, less privacy. As of January 2017, 50 percent of the global population has access to the internet. While some see loss of privacy as a necessary evil, other internet users see it as an abuse which they are trying to eliminate, or at least minimize through different approaches. http://www.trustarc.com/blog/2011/12/05/what-companies-can-learn-from-ftc-privacy-cases-in-2011/ 3 of 16

Recipients’ Perception More than 95% of consumers surveyed in a recent poll said they were either somewhat concerned or very concerned about how companies use their data. This is troublesome because trust is the base of your relationship with your prospective students. https://www.vpnmentor.com/blog/vpn-use-data-privacy-stats/ 4 of 16

VPN use in 2017 VPN use and data privacy have strong correlations. VPNs make it much more difficult for hackers and/or 3rd parties to track online activities. They also make it harder for you to track your recipients’ habits. https://www.vpnmentor.com/blog/vpn-use-data-privacy-stats/ 5 of 16

Data Privacy Programs CAN-Spam Privacy Shield http://www.ovrdrv.com/12-ways-to-avoid-the-spam-folder/ https://github.com/auth0/blog/blob/master/_posts/2016-10-06-announcing-auth0-eu-us-privacy-shield-certification.markdown 6 of 16

CAN-SPAM: What is it? CAN-SPAM (Controlling the Assault of Non-Solicited Pornography And Marketing) is an act that was passed in 2003. That's right, they looped us in with pornographers. That act is a law that establishes the rules for commercial email and commercial messages, gives recipients the right to have a business stop emailing them, and outlines the penalties incurred for those who violate the law. http://startupselling.com/alanblume/what-is-the-can-spam-act-and-what-does-it-mean-to-brokers-and-agents/ 7 of 16

CAN - SPAM Include your valid physical postal address. DOs Include your valid physical postal address. Provide a clear and obvious way to opt out of every email you send. Honor the unsubscribe within 10 business days. Do use clear "From," "To," and "Reply to" language that accurately reflects who you are. http://picphotos.net/two-thumbs-up/ 8 of 16

CAN - SPAM Sell or transfer any email addresses to another list. DON’Ts Sell or transfer any email addresses to another list. Make it hard to unsubscribe from emails. Use deceptive subject lines in your emails that misrepresent the contents of your message. https://modernborefare.com/2012/12/29/booo-2012-four-thumbs-down/ 9 of 16

Privacy Shield: What is it? The Privacy Shield Framework operates as a set of rules governing US businesses with European operations. It allows businesses to do two things: Self-certify that they are agreeing to the Privacy Shield Framework Promote themselves and their adherence to the Privacy Shield Principles https://www.dmxzone.com/go/32386/microsoft-privacy-shield-is-good/ 10 of 16

Privacy Shield Program – Legal Rights Bring a complaint directly to a Privacy Shield participant and have a response within 45 days. Privacy Shield participants must provide, an independent recourse mechanism by which each individual’s complaints and disputes can be investigated and expeditiously resolved. Department of Commerce has committed to receive, review and undertake best efforts to facilitate resolution of the complaint and to respond to the DPA within 90 days. The U.S. Federal Trade Commission (FTC) has committed to work closely with the DPA to provide enforcement assistance. http://pfeifferlaw.com/entertainment-law-blog/post/what-privacy-rights-do-we-have 11 of 16

Privacy Shield program – Legal Rights The FTC has committed to vigorous enforcement of the Privacy Shield Framework. EU individuals are able to pursue legal remedies through private causes of action in U.S. state courts, including private causes of action for misrepresentation and similar types of claims. Privacy Shield participants must also commit to binding arbitration at the request of the individual to address any complaint that has not been resolved by other recourse and enforcement mechanisms.  http://articles.courant.com/2012-05-01/news/hc-op-christian-citizens-must-guard-privacy-0501-20120501_1_national-security-letters-gag-order-library-patron 12 of 16

Third Party Arbitration - DMA DMA (Data & Marketing Association) self-regulatory guidelines are an effective alternative to needless or restrictive regulation. Flexible enough to address ongoing changes in technology, markets, consumer interest and new business practices. The DMA Ethics Policy and Ethics Operating Committees regulate data privacy complaints. http://galleryhip.com/mediation.html 13 of 16

Penalties: Germany Penalties are steep for those who don’t comply: €50,000 for small violations, and from €250,000 per violation to €300,000 for more serious violations of the law. A company that makes a profit that exceeds the fines it would typically pay from a violation of this law will now have to pay higher penalties in direct relation to the gains. https://graafix.blogspot.com/2011/05/germany-flag-wallpapers.html 14 of 16

Penalties: China Penalties of Up to $4,500 per Email The act of violation of these regulations is subject to a penalty of more than $1,500 or 10,000 Yuan. The amount of fine is increased thrice, which amounts for over $4,500 if the act of violation involves ‘unlawful proceeds’ according to the Chinese definition. Thus, a tobacco site forwarding one million emails in China would be a subject to the penalty of more than US $4.5 billion. https://3dprint.com/7016/china-3d-printing-plan/ 15 of 16

Bottom Line Thank you and safe Marketing!! The cost of non-compliance is high. Do your homework, and know that you are responsible for working with complying companies. Thank you and safe Marketing!! Presented by: Gloria Lau – Client Relations Manager Gloria.lau@frescodata.com https://mybroadband.co.za/news/columns/95195-privacy-metaphors.html 16 of 16