GA Resolution: Protecting Consumer Data

[Lenlyvit]

Protecting Consumer Data

A resolution to enact uniform standards that protect workers, consumers, and the general public.

Category: Regulation

Area of Effect: Consumer Protection

Proposed by: Marxist Germany

The World Assembly,

Lauding the previous efforts of this assembly to protect privacy rights through previous legislation such as GA #213 Privacy Protection Act,

Recognising every individual's right to reasonable privacy,

Believing that collecting non-essential data without consent is a violation of the right to privacy,

Noting that most minors are not fully capable of comprehending the risks associated with decisions made on matters of privacy,

Seeking to introduce more restrictions regarding the ability of non-governmental organisations to collect data from their customers without consent,

Hereby,

1. Defines the following for the purpose of this resolution:

a. An "organisation" as an entity that systematically collects data from its members or users, and isn't run by a government;

b. A "minor" as a person under the age of majority;

c. A "guardian" as a legal guardian of a minor or non-legally competent person, or if none exists, a biological parent;

d. "personal data" as data that can be used to identify a sapient individual;

e. A "user" as an adult or a minor going through a transitional period into adulthood, who uses or has used the services of, or is a member of, an organisation;

2. Prohibits:

a. Organisations from collecting or storing the personal data of any minor without the explicit consent of their guardian except when the guardian cannot be contacted or it is not in the best interests of the minor to do so, as determined by national governments, or the business is unable to verify the age of the user;

b. Organisations from collecting or storing personal data from any individual without their explicit consent except for crime prevention, such as CCTV cameras, unless the individual cannot consent and the personal data is required for an emergency, or unless the data is used exclusively for journalistic purposes;

c. Organisations from using personal data collected from any individual to intentionally and maliciously cause harm or severe distress to the individual the data belongs to;

d. Governments of member states from viewing the personal data of a user without explicit prior consent from both the organisation in possession of the personal data and the user to which the data belongs, unless the user has consented to their personal data being shared with authorities as necessary, as a condition to use the services of the organisation, or the personal data was collected for crime prevention;

3. Mandates that:

a. Organisations provide fully detailed information on how they will use or share a user's personal data to the user explicitly when they interact with the organisation for this first time and when a major change to the data collection or usage policy has been made;

b. Organisations enable individuals to view the personal data that the organisation holds on them unless the release of the personal data would compromise the privacy or well-being of others;

c. Personal data processed or stored for any purpose is not kept for longer than is necessary for that purpose unless the user, or non-user, consents to that explicitly and clearly, or unless there is a clear and compelling safety or disciplinary reason to do otherwise such as loans, transactions, or disciplinary records;

d. Organisations allow individuals to request the removal of their personal data, and act upon these requests, unless it falls under an exception mentioned in clause 3c above;

e. Organisations take reasonable measures to ensure the personal data being stored by the orgnisation is not accessed by unauthorised persons;

4. Declares that an organisation can prohibit a person from using the services of or joining the organisation if the individual does not consent to the personal data collection policy of the organisation, or if the user provides falsified personal data.

Co-authored with Kenmoria

This is the discussion thread. To cast your vote, go HERE

[Evil Dictators Happyland]

1. Defines the following for the purpose of this resolution: a. An "organisation" as an entity that systematically collects data from its members or users, and isn't run by a government;

As every clause except 3c refers to 'organizations', and governments are explicitly excluded from that definition, every clause except 3c has no effect on the glorious People's Dictatorship. Therefore, clause 3c is the only part of this WA bill that will be considered.
Clause 3c essentially mandates that data should not be stored for longer than it is useful, and complying with this resolution would harm us little and do much to benefit our international image. Therefore, we have elected to vote FOR this resolution.

[Marxist Germany]

And.. this has been withdrawn, I shall hopefully be submitting this on the first week of October.