Rational Policy Tester Privacy Edition

Privacy module reports

• Form Inventory identifies all web pages collecting user input, which can help you identify forms that might be inconsistent with privacy policies or that might lead to information leaks.
• Control Inventory provides summary information about the type of form controls used on a website and the number of pages that contain each type of control.
• Pages Collecting PII identifies pages collecting specific items of personally identifiable information (PII) to help ensure they meet specific requirements including links to a privacy statement, proper levels of encryption and opt-out options.
• Pages Collecting PII with Forms Using GET identifies pages that use the GET method of form submission.

Support for compliance with privacy regulations

• GLBA Privacy Rules include provisions to protect consumers' personal financial information held by financial institutions.
• HIPAA Privacy Rules regulate the way certain healthcare organizations handle the use of individually identifiable health information.
• COPPA requires web operators to adhere to specific collection, disclosure and protection practices regarding personally identifiable information of children.
• US-EU Safe Harbor Framework offers a simple means of complying with adequacy requirements of the European Community's Directive on Data Protection.
• Section 208 applies to US government agencies. It protects the online privacy of US citizens' information by facilitating privacy impact assessments and reporting.
• California AB 1950 requires businesses that obtain, own or license personal information about California residents to implement and maintain reasonable procedures to protect personal information from unauthorized access, destruction, use, modification or disclosure.
• California SB 1386 requires notification to California residents if there is a breach or suspected compromise of their unencrypted personal information or data.

Additional online privacy assessment features

• Privacy policy management generates an inventory of privacy policies found on a website and determines if those policies are current and accurate.
• Leak prevention verifies that security safeguards, such as secure pages and 128-bit encryption, are in place when collecting and transmitting customer data.