That is a good point. Perhaps the way we've worded it is giving an incorrect impression.
It's tough, most policies look something like this
In the event that XXXXXXX is involved in a bankruptcy, merger, acquisition, reorganization or sale of assets, your information may be sold or transferred as part of that transaction
From what I gather, the example above implies that the company considers your data an asset and it "may be sold" as part of the transaction or bankruptcy.
Help me come up with a better way to describe this situation succinctly! =)
This may be OT, but I'd like to know more about organizational practices (and corresponding contractual language) that mitigate this risk.
My vague impression is that unless one takes deliberate steps to remove such information from the available... "asset pool", when bankruptcy strikes, all bets are off (in the U.S., at least).
Any effective limits after that point seem more often to be PR-based (bad PR decreasing, negating, or even outweighing the value of the information) than due to legal stricture. Or else a matter of getting a "one-off" restriction from a court proceeding.
This is just my impression from the news. I would welcome any clarification.
How about requiring the word "bankruptcy" to appear somewhere in the privacy policy before you put the word "bankruptcy" in big red letters next to the name of somebody else's website?
Err on the side of caution when you've got somebody else's reputation in your hands.
Comments
That is a good point. Perhaps the way we've worded it is giving an incorrect impression.
It's tough, most policies look something like this
In the event that XXXXXXX is involved in a bankruptcy, merger, acquisition, reorganization or sale of assets, your information may be sold or transferred as part of that transaction
From what I gather, the example above implies that the company considers your data an asset and it "may be sold" as part of the transaction or bankruptcy.
Help me come up with a better way to describe this situation succinctly! =)
This may be OT, but I'd like to know more about organizational practices (and corresponding contractual language) that mitigate this risk.
My vague impression is that unless one takes deliberate steps to remove such information from the available... "asset pool", when bankruptcy strikes, all bets are off (in the U.S., at least).
Any effective limits after that point seem more often to be PR-based (bad PR decreasing, negating, or even outweighing the value of the information) than due to legal stricture. Or else a matter of getting a "one-off" restriction from a court proceeding.
This is just my impression from the news. I would welcome any clarification.
How about requiring the word "bankruptcy" to appear somewhere in the privacy policy before you put the word "bankruptcy" in big red letters next to the name of somebody else's website?
Err on the side of caution when you've got somebody else's reputation in your hands.