Protect any data collected against mishandling and fraud, collect personal information only as needed, and respect the preferences of customersregarding the use of their information. An accredited business agrees to:
a. Respect Privacy. Businesses conducting e-commerce agree to disclose the following on its website(s): What information is collected, with whom it is shared, how it can be corrected,how it is secure, how policy changes will be communicated, and how to address concerns over misuse of personal data.
b. Secure Sensitive Data. Business that collect sensitive data online (credit card, bank account numbers, social security number, salary or other personal financial information, medicalhistory or records, etc.) will ensure that it is transmitted via secure means; businesses will make best efforts to comply with industry standards for the protection and proper disposal of all sensitive data, both online and offline.
c. Honor Customer Preferences. Businesses agree to respect customer preference regarding contact by telephone, fax and email, and agree to remedy underlying cause of any failure to do so.