Is there a written privacy/security policy?
We wrote a privacy and security policy which we will adhere to during our user studies as part of our application to UW’s internal review board (IRB). All our study proposals are subjected to a rigorous evaluation process by our IRB and we must obtain approval before recruiting any study participants. We are also required to present participants with a copy of our privacy and security policy during the recruitment process. In the design of our recruitment message, consent form, and privacy preserving measures we followed the “Best Practices for Deployment of RFID Technology” presented by the Center for Democracy and Technology’s (CDT) working group on RFID. This group includes representatives from various consumer groups and commercial enterprises, all working under the leadership of the CDT. These guidelines are the result of an extensive analysis of current and near-term applications of RFID, the ways in which those applications do or do not implicate privacy, and the manner in which
