Article: The complex web of regulation in the US: the case of privacy Journal: International Journal of Electronic Business (IJEB) 2004 Vol.2 No.2 pp.205 - 226 Abstract: Privacy regulation involving the internet presently is a complex mix of Federal laws and laws of other countries, mixed with a tangle of self-regulation. With a long queue of bills pending in the Congress, and numerous State Attorneys General looking at adopting some form of privacy legislation, privacy is a hot-button issue among regulators. All of this policy interest, coupled with growing consumer concern over privacy – especially in the aftermath of September 11, 2001 – has led many firms to realise privacy no longer is a topic that can be ignored. In response, many companies have created a new senior level, corporate post to deal with privacy issues: the Chief Privacy Officer (CPO). In 2001, there were thought to be fewer than 100 people with the CPO title, or its equivalent. That number has grown dramatically and may now exceed 1000. The CPO title now exists in organisations across industries as diverse as health care, insurance, high tech, telecommunications, universities, hospitals, and others. Not only in the USA, but around the world, firms are creating this position to sort out the legal, ethiqcal and social issues with privacy. This paper looks at the role CPOs play in establishing both corporate privacy policy as well as public privacy policy. It also examines those industries that have embraced this approach to dealing with privacy concerns, and considers the implications of this new corporate position in the ongoing debate over privacy protections. Inderscience Publishers - linking academia, business and industry through research

Title: The complex web of regulation in the US: the case of privacy

Authors: Catharine M. Curran, Jef I. Richards

Addresses: Marketing Department, Creighton University, 2500 California Plaza, Omaha, NE 68178, USA. ' Advertising Department, The University of Texas, 1 University Station A1200, Austin, TX 78712, USA

Abstract: Privacy regulation involving the internet presently is a complex mix of Federal laws and laws of other countries, mixed with a tangle of self-regulation. With a long queue of bills pending in the Congress, and numerous State Attorneys General looking at adopting some form of privacy legislation, privacy is a hot-button issue among regulators. All of this policy interest, coupled with growing consumer concern over privacy – especially in the aftermath of September 11, 2001 – has led many firms to realise privacy no longer is a topic that can be ignored. In response, many companies have created a new senior level, corporate post to deal with privacy issues: the Chief Privacy Officer (CPO). In 2001, there were thought to be fewer than 100 people with the CPO title, or its equivalent. That number has grown dramatically and may now exceed 1000. The CPO title now exists in organisations across industries as diverse as health care, insurance, high tech, telecommunications, universities, hospitals, and others. Not only in the USA, but around the world, firms are creating this position to sort out the legal, ethiqcal and social issues with privacy. This paper looks at the role CPOs play in establishing both corporate privacy policy as well as public privacy policy. It also examines those industries that have embraced this approach to dealing with privacy concerns, and considers the implications of this new corporate position in the ongoing debate over privacy protections.

Keywords: privacy regulation; CPO; Chief Privacy Officer; HIPAA; health; banking; insurance; safe harbour; internet privacy; privacy protection.

DOI: 10.1504/IJEB.2004.005027

International Journal of Electronic Business, 2004 Vol.2 No.2, pp.205 - 226

Published online: 23 Aug 2004 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article

Title: The complex web of regulation in the US: the case of privacy

Keep up-to-date