{"id":237,"date":"2011-11-28T12:35:22","date_gmt":"2011-11-28T20:35:22","guid":{"rendered":"http:\/\/foundersnetwork.com\/?p=237"},"modified":"2018-11-11T15:55:51","modified_gmt":"2018-11-11T23:55:51","slug":"website-best-practices-%e2%80%93-terms-of-use-and-privacy-policy","status":"publish","type":"post","link":"https:\/\/foundersnetwork.com\/website-best-practices-%e2%80%93-terms-of-use-and-privacy-policy\/","title":{"rendered":"Terms of Use and Privacy Policy"},"content":{"rendered":"<p><em>The following is a guest post from fnBlog Contributor Matthew Faustman, founder of\u00a0<a href=\"http:\/\/blog.upcounsel.com\/\" target=\"_blank\" rel=\"noopener\">UpCounsel<\/a>.<\/em> <a href=\"http:\/\/blog.upcounsel.com\/wp-content\/uploads\/2011\/11\/ugcsocialmedia.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft\" src=\"http:\/\/blog.upcounsel.com\/wp-content\/uploads\/2011\/11\/ugcsocialmedia-300x245.jpg\" alt=\"\" width=\"300\" height=\"245\" \/><\/a><\/p>\n<div>\n<p>In this day and age, user generated content is a large part of our technology products. \u00a0As such, this raises issues like Copyright infringement and privacy, which can expose web and mobile application\u00a0entrepreneurs\u00a0to extensive liability.<\/p>\n<\/div>\n<div>\n<p>There are steps that we can take, however, to limit our exposure to liability. \u00a0Below is a discussion of these preventative steps &#8211; usable by most modern websites that collect user data or host user generated content. By no means is this list exhaustive &#8211; each situation is unique and we highly advise that you consult a seasoned Intellectual Property (&#8220;IP&#8221;) attorney when considering these protections.<\/p>\n<\/div>\n<div>\n<p><strong>1. \u00a0<span style=\"text-decoration: underline;\">Have Users Agree To A &#8220;Terms of Use&#8221; (Terms of Service Agreement)\u00a0<\/span><\/strong><\/p>\n<\/div>\n<div>\n<p>Terms of Use (&#8220;TOU&#8221;) (also known as Terms of Service)\u00a0are terms and conditions that a customer must agree to in order to use a service. \u00a0TOUs can cover a range of issues, including acceptable user behavior online, a company&#8217;s marketing policies,\u00a0and copyright notices.<\/p>\n<\/div>\n<div>\n<p>Really great TOUs are drafted to meet the individual specifications of a website. \u00a0They have powerful implications and should not be taken lightly. For a full appreciation of a TOU, see this\u00a0<a href=\"http:\/\/www.iplawforstartups.com\/website-legal-issues-why-your-terms-of-use-may-be-critical\/\">post<\/a>\u00a0by IP attorney Jill Bowman (its pretty amazing).<\/p>\n<\/div>\n<div>\n<p>Some of the major flaws in TOU agreements are related to the protections that people seek under the\u00a0<a href=\"http:\/\/frwebgate.access.gpo.gov\/cgi-bin\/getdoc.cgi?dbname=105_cong_public_laws&amp;docid=f:publ304.105.pdf\" target=\"_blank\" rel=\"noopener\">Digital Millennium Copyright Act<\/a>\u00a0(&#8220;DMCA&#8221;) as explained by startup guru Dana Shultz in his\u00a0<a href=\"http:\/\/danashultz.com\/blog\/2009\/05\/06\/terms-of-use-and-the-digital-millennium-copyright-act-dmca\/\" target=\"_blank\" rel=\"noopener\">blog post<\/a>\u00a0on the issue.<\/p>\n<\/div>\n<div>\n<p>Here is an example template for a\u00a0<a href=\"https:\/\/docs.google.com\/a\/upcounsel.com\/document\/d\/1UkW2Jxd4Z5-l2vk5xFGflf4ISCauIJI_VFuwveCR57M\/edit?hl=en_US\" target=\"_blank\" rel=\"noopener\">Terms of Use<\/a>\u00a0for a web or mobile application that hosts user generated content. \u00a0<em>This is merely an example and is not intended to be used directly on your website.<\/em>\u00a0\u00a0Use it only as a reference for when you speak to an attorney.<\/p>\n<\/div>\n<div>\n<p>Some major considerations for a TOU &#8211;\u00a0<em>Contributed by\u00a0<a href=\"http:\/\/www.linkedin.com\/profile\/view?id=18638452&amp;locale=en_US&amp;trk=tyah\" target=\"_blank\" rel=\"noopener\">Jessica Hubley, Esq.<\/a><\/em><\/p>\n<\/div>\n<div>\n<ol>\n<li>Limit the site&#8217;s liability to users to some very small dollar amount (e.g., $10 or fees actually paid for services in the past 6 months);<\/li>\n<li>Have the user indemnify the site for any third party claims arising from their use of the site; and<\/li>\n<li>Include an arbitration clauses to reduce class action suits.<\/li>\n<\/ol>\n<\/div>\n<div>\n<p><strong>2. \u00a0<span style=\"text-decoration: underline;\">Comply With The DMCA<\/span><\/strong><\/p>\n<\/div>\n<div>\n<p>The Digital Millennium Copyright Act (\u201cDMCA\u201d) provides web and mobile application owners protection against liability for copyright infringement resulting from content uploaded by third party users. \u00a0Providers, however, must comply with the DMCA to be eligible for such Safe Harbor. \u00a0For more information on this topic, see another great\u00a0<a href=\"http:\/\/www.iplawforstartups.com\/website-legal-issues-finding-a-safe-harbor-in-a-sea-of-third-party-content\/\">post<\/a>\u00a0by Jill Bowman. \u00a0Below are two things your company can do to help fall under these Safe Harbors.<\/p>\n<\/div>\n<div>\n<ul>\n<li><strong>Register With The Copyright Office\u00a0<\/strong><\/li>\n<\/ul>\n<\/div>\n<div>\n<p>The Company must apply as an online service provider and designate an agent with the Copyright Office to properly rely on the limitation of liability from copyright infringement under the DMCA. Additional information is available at\u00a0<a href=\"http:\/\/www.google.com\/url?q=http%3A%2F%2Fwww.copyright.gov%2Fonlinesp%2F&amp;sa=D&amp;sntz=1&amp;usg=AFQjCNFXNx8ptxfOmq8BoGB_DkUvBvXfJg\" target=\"_blank\" rel=\"noopener\">http:\/\/www.copyright.gov\/onlinesp\/<\/a>.<\/p>\n<\/div>\n<div>\n<p>Most modern web and mobile application TOUs are written to rely upon the DMCA limitation of liability. \u00a0If your TOU does rely upon the DMCA, then you should take these precautions. \u00a0Again, consult an attorney versed in IP law for proper compliance.<\/p>\n<\/div>\n<div>\n<ul>\n<li><strong>Institute (and diligently follow) A DMCA Policy<\/strong><\/li>\n<\/ul>\n<\/div>\n<div>\n<p>Which can include:\u00a01) A working notification system (if a copyright owner tries to find you \u2013 they can), 2) a\u00a0procedure for dealing with complaints from copyright owners regarding infringing content on your website, 3) a\u00a0system that allows copyright owners to collect the information they need to issue DMCA complaints.<\/p>\n<\/div>\n<div>\n<p><strong>3. \u00a0<span style=\"text-decoration: underline;\">Have A Privacy Policy On Your Application<\/span><\/strong><\/p>\n<\/div>\n<div>\n<p>A privacy policy is a legal\u00a0discloser that describes the ways a party gathers, uses, discloses and manages a customer&#8217;s &#8220;personal information.&#8221; \u00a0Its purpose is to inform your users of how you collect and use their data &#8211; therefore, like your TOU, it is important that this is drafted to your particular application&#8217;s data usage features. \u00a0Where companies get themselves into trouble is by making disclosures that are inaccurate regarding user&#8217;s data or do not maintain their TOUs over time. \u00a0Privacy policies should be updated whenever there is a change in the way a company uses user&#8217;s customer information.<\/p>\n<\/div>\n<div>\n<p>In most cases, someone\u2019s name, address, email address, and telephone number are considered\u00a0personal information. Health information, sexual orientation information, location information,\u00a0and financial information (among others) may be considered \u201csensitive information\u201d as well\u00a0as \u201cpersonal information,\u201d and may be subject to more stringent protections both in tort and by\u00a0virtue of specific statutes such as the Health Insurance Accountability and Portability Protection\u00a0Act (HIPAA) or the Fair Credit Reporting Act (FCRA).\u00a0(<em>Contributed by\u00a0<a href=\"http:\/\/www.linkedin.com\/profile\/view?id=18638452&amp;locale=en_US&amp;trk=tyah\" target=\"_blank\" rel=\"noopener\">Jessica Hubley, Esq.<\/a>)<\/em>:<\/p>\n<\/div>\n<div>\n<p>The FTC requires that websites that deal in users\u2019 personal information have a \u201cclear and\u00a0concise\u201d privacy policy that explains, in a digestible manner (<em>Contributed by\u00a0<a href=\"http:\/\/www.linkedin.com\/profile\/view?id=18638452&amp;locale=en_US&amp;trk=tyah\" target=\"_blank\" rel=\"noopener\">Jessica Hubley, Esq.<\/a>)<\/em>:<\/p>\n<\/div>\n<div>\n<ol>\n<li>What types of information the company or website collects;<\/li>\n<li>How the company or website uses that information;<\/li>\n<li>With whom the company or website shares that information; and<\/li>\n<li>How the company or website secures that information.<\/li>\n<\/ol>\n<\/div>\n<div>\n<p>Like the TOUs, find an attorney well versed in IP law and have them take a look at your Privacy Policy. \u00a0There are also organizations like\u00a0<a href=\"http:\/\/www.truste.com\/\">TRUSTe<\/a>\u00a0and\u00a0<a href=\"http:\/\/www.p3pwiz.com\/\">P3PWiz<\/a>\u00a0that offer templates and consulting to help with policies. You may find some good information from the\u00a0<a href=\"http:\/\/www.privacyassociation.org\/\">International Association of Privacy Professionals (IAPP)<\/a>. Finally, if your site collects information from children, includes health or financial data, or you have operations in other countries, there may be additional laws with which you must comply. \u00a0We plan to expand this blog post to capture these additional regulations&#8230;so stay tuned.<\/p>\n<\/div>\n<div>\n<p><strong>DISCLAIMER<\/strong><\/p>\n<\/div>\n<div><em>The content of this page is not legal advice and is not a substitute for professional legal advice including content contributed by participating attorneys. Under no circumstances does the content contained herein create an attorney-client relationship nor is it a solicitation to offer legal advice. If you ignore this warning and convey confidential information in a private message or comment, there is no duty to keep that information confidential or forego representation adverse to your interests. Seek the advice of a licensed attorney in the proper jurisdiction before taking any action that may affect your rights.\u00a0<\/em><\/div>\n","protected":false},"excerpt":{"rendered":"<p>The following is a guest post from fnBlog Contributor Matthew Faustman, founder of\u00a0UpCounsel. In this day and age, user generated content is a large part of our technology products. \u00a0As &#8230; <\/p>\n<div><a href=\"https:\/\/foundersnetwork.com\/website-best-practices-%e2%80%93-terms-of-use-and-privacy-policy\/\" class=\"more-link\">Read More<\/a><\/div>\n","protected":false},"author":31,"featured_media":16234,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_price":"","_stock":"","_tribe_ticket_header":"","_tribe_default_ticket_provider":"","_tribe_ticket_capacity":"0","_ticket_start_date":"","_ticket_end_date":"","_tribe_ticket_show_description":"","_tribe_ticket_show_not_going":false,"_tribe_ticket_use_global_stock":"","_tribe_ticket_global_stock_level":"","_global_stock_mode":"","_global_stock_cap":"","_tribe_rsvp_for_event":"","_tribe_ticket_going_count":"","_tribe_ticket_not_going_count":"","_tribe_tickets_list":"[]","_tribe_ticket_has_attendee_info_fields":false,"footnotes":""},"categories":[144],"tags":[98,90,7935],"table_tags":[],"class_list":["post-237","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech-startup-advice","tag-startups","tag-tech-founders","tag-terms-of-use"],"acf":[],"featured_image_data":{"src":"https:\/\/foundersnetwork.com\/wp-content\/uploads\/2011\/11\/Terms-of-Use.jpg","alt":"Startup Mentoring","caption":"Startup Mentoring"},"_links":{"self":[{"href":"https:\/\/foundersnetwork.com\/wp-json\/wp\/v2\/posts\/237","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/foundersnetwork.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/foundersnetwork.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/foundersnetwork.com\/wp-json\/wp\/v2\/users\/31"}],"replies":[{"embeddable":true,"href":"https:\/\/foundersnetwork.com\/wp-json\/wp\/v2\/comments?post=237"}],"version-history":[{"count":0,"href":"https:\/\/foundersnetwork.com\/wp-json\/wp\/v2\/posts\/237\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/foundersnetwork.com\/wp-json\/wp\/v2\/media\/16234"}],"wp:attachment":[{"href":"https:\/\/foundersnetwork.com\/wp-json\/wp\/v2\/media?parent=237"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/foundersnetwork.com\/wp-json\/wp\/v2\/categories?post=237"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/foundersnetwork.com\/wp-json\/wp\/v2\/tags?post=237"},{"taxonomy":"table_tags","embeddable":true,"href":"https:\/\/foundersnetwork.com\/wp-json\/wp\/v2\/table_tags?post=237"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}