The Role and Importance of Organizational Accountability in Managing and Protecting Users’ Data

October 2010

This document is provided “as-is.” Information and views expressed in this document, including URL and other Internet Web site references, may change without notice. You bear the risk of using it. This document does not provide you with any legal rights to any intellectual property in any Microsoft product. You may copy and use this document for your internal, reference purposes. You may not modify this document without written consent from Microsoft. Microsoft Corp. • One Microsoft Way • Redmond, WA 98052-6399 • USA All rights reserved.

Contents
The Evolution of Privacy Models in Computing .................................................................................... 1 The Principles of Accountability ......................................................................................................... 2 The Use–and-Obligations Model ........................................................................................................ 3 A Privacy Governance Framework ...................................................................................................... 4 Conclusion....................................................................................................................................... 5

1

The Role and Importance of Organizational Accountability in Managing and Protecting Users’ Data

The Evolution of Privacy Models in Computing
Since the early 1970s, fair information principles have provided consumers, organizations, and governments with a framework for the collection, use, and protection of individuals’ personal information. These principles have primarily centered on two foundational approaches to privacy: “notice-and-consent” policies that give individuals control over their own