Soon after the JetBlue scandal broke, Bill Scannell, founder of the website www.dontspyon.us, offered space on his site for one livid JetBlue customer, Joshua Gruber, to collect complaints from other wronged passengers. “If you are as angry as I am about having your private information given away by JetBlue, then write me,” Gruber wrote. “It’s important that JetBlue, all airlines-in fact all businesses that collect our private information-need to know that they must follow the law.” The problem is that following the law is not so easy when, in the absence of clear-cut federal privacy laws, U.S. companies are left to figure out for themselves how much privacy to promise their customers and what to do with the information they collect. That puts the onus on self-regulating bodies like BBBOnline, the arm of the Council of Better Business Bureaus that deals with e-commerce sites. BBBOnline offers companies that do business online the opportunity to apply for a seal that shows consumers that they adhere to stringent privacy policies. “By coming to us, [these companies] have very carefully laid out what their practices are, provided choice and are precommitted to resolving disputes if there’s a problem,” says Gary Laden, director of the BBBOnline Privacy Program. BBBOnline monitors the companies to which it grants the seal and boots those that fail to keep up with the requirements. “It’s a pretty strict entrance gate,” says Laden, who says that only about half the companies that apply for the seal receive it (including American Airlines, Continental Airlines and United). JetBlue, for the record, hasn’t applied for the seal. Related content news UK government plans 2,500 new tech recruits by 2025 with focus on cybersecurity New apprenticeships and talent programmes will support recruitment for in-demand roles such as cybersecurity technologists and software developers By Michael Hill Sep 29, 2023 4 mins Education Industry Education Industry Education Industry news UK data regulator orders end to spreadsheet FOI requests after serious data breaches The Information Commissioner’s Office says alternative approaches should be used to publish freedom of information data to mitigate risks to personal information By Michael Hill Sep 29, 2023 3 mins Government Cybercrime Data and Information Security feature Cybersecurity startups to watch for in 2023 These startups are jumping in where most established security vendors have yet to go. By CSO Staff Sep 29, 2023 19 mins CSO and CISO Security news analysis Companies are already feeling the pressure from upcoming US SEC cyber rules New Securities and Exchange Commission cyber incident reporting rules don't kick in until December, but experts say they highlight the need for greater collaboration between CISOs and the C-suite By Cynthia Brumfield Sep 28, 2023 6 mins Regulation Data Breach Financial Services Industry Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe