We are providing this information to assist Oracle customers who are developing privacy polices and would like to better understand the privacy implications of some product features.
Nothing in this advisory should be understood to be suggested guidance for any particular company or product deployment, nor should it in any way be construed as legal advice. Recall that privacy disclosures are the result of many business and policy decisions as well as the legal frameworks in the jurisdictions you operate. We strongly suggest that you consult legal and other appropriate professionals to determine what disclosures may be appropriate for you particular circumstances.
Oracle Web Conferencing.
Please note that customers using this product must be aware of certain issues that are at the heart of the nature of the application. Web conferencing applications require that you be able to identify and track people who are participating in a conference. There are security, cost and accountability reasons for this.
Some of the functions with specific privacy importance include:
Record function: this function may provide the conferencing administrator with a detailed logging of users and actions.
Cookies: Are used for logging and tracking purposes. These cookies may contain and track personally identifiable information.
Maintenance, support and administration; these services require access to the systems and data base that support the web conferencing application and may provide incidental access to any PII that has been captured by the application.
Connectivity and equipment information: logging the communication may include information relating to equipment, software, IP address and other aspects that may be common to communication protocols.
User Considerations regarding privacy:
Depending on the type of information, applicable legal frameworks, the jurisdictions involved and citizenship of the data subjects different requirements may need to be met relating to personally identifiable information. Users will have to make determinations in the following areas:
what notice to users is required and how
whether choices related to data collection are appropriate
whether any consents are required
what purposes the information would be used for
how long the information will be retained
The above is not meant to represent an exhaustive list of issues to be considered, but rather an exemplar of the issues that have been previously raised.
