Sent: Monday, March 06, 2000 5:25 PM

Dear FTC,

I have a very simple five-step solution for protecting the privacy of Internet consumers, while preserving the ability of Internet based companies and marketers to conduct their business without hindering legislation.

1. Any company engaged in active data collection must post a visible and accurate privacy policy.
 
2. Any active data collection must include a visible "Opt-Out" capability for the consumer.
 
3. Any active data collection for THIRD-PARTY use must be preceded by an informative "Opt-In".
 
4. Any company engaged in linking personal data must receive approval by an informative "Opt-In".
 
5. It should never be legal under any circumstance to read or transmit data from a consumer's PC.

Notes:

I would define "active data collection" as collecting any personal information beyond the server log files.
 
I would define "visible" as a home page link for a privacy policy and Opt-In or Out from the privacy page.
 
I would define "linking personal data" as any cross-reference to other public or private third-party data.
 
I would define "informative opt-in" as listing any and all uses of the consumer's personal data.
 
I would define "data from a consumer's PC" as anything except a cookie generated by the requester.

Please feel free to contact me with any questions or comments.

Bret Frohlich
Information Systems Manager
Gradco (USA) Inc.

bretf@gradco.com
(949) 206-6156