Re: New law concerning electronic commerce

[Jens Müller]

Neil Tiffin <address@hidden> writes:

> If someone would write a concise description of the requirement we
> will add it into our requirements.

Requirement:

Before the user is asked to enter personal information, he must be
informed that he is about to enter such information and how such
information is used.

He then has to declare his consent, otherwise he should not be asked
to enter any personal information.

He also has to be informed that he can at any time withdraw his
consent effective from then on.

The information and the user's declaration of consent has to be
documented.

Measures have to be taken to ensure that personal information can be
locked from normal access on a possible future user request.

Anonymous statistical should be split from personal information as
soon is obtained and be stored separately (then it is no longer
subject to privacy regulations, because it is not data referring to a
specific or identifiable person).