P9. Collection of user information from third parties (internet and mobile ecosystem companies)

1. Does the company clearly disclose what user information it collects from third-party websites through technical means?
2. Does the company clearly explain how it collects user information from third parties through technical means?
3. Does the company clearly disclose its purpose for collecting user information from third parties through technical means?
4. Does the company clearly disclose how long it retains the user information it collects from third parties through technical means?
5. Does the company clearly disclose that it respects user-generated signals to opt-out of data collection?

We expect companies to disclose what information about users they collect from third parties, which in this case typically means information collected from third-party websites or apps through technical means, for instance through cookies, plug-ins, or widgets. Company disclosure of these practices helps users understand if and how their activities are being tracked by companies even when they are not on a host company’s website or are a user of a particular service or platform.

Potential sources:

• Company privacy policy
• Company policy on third parties