IBM on Thursday announced a free tool intended to help companies define and implement privacy policies that address the handling of customer and internal data.
The Tivoli Privacy Wizard translates written privacy policies into code that will allow forthcoming IBM enterprise privacy monitoring and enforcement software to enforce the policies.
Alternatively, the code can be exported to standards-based privacy rule sets, such as the World Wide Web Consortium’s Platform for Privacy Preferences (P3P) format that can be understood by various Web browsers. P3P is an emerging standard intended to give users more control over the use of personal information they enter to Web sites.
Users can import existing privacy polices into the wizard, or use its graphical interface to create new policies that define who can use what data and for what purpose. The data can range from personal information that customers enter into retail Web sites to information covered by recently enacted privacy laws, such as the Health Insurance Portability and Accountability Act.
Around mid-year, IBM will deliver an enterprise privacy management tool that will be able to enforce the rules produced by the wizard, an IBM spokesman said.
The Tivoli Privacy Wizard and forthcoming management tool are both fruits of an industry initiative IBM announced in November, dubbed the Privacy Management Council. The council, comprising chief privacy officers and security executives from public and private institutions, helps IBM define new privacy management tools.
IBM last week also announced that Ernst & Young has joined the Privacy Management Council, joining existing members that include Deloitte & Touche, Fidelity Investments, Marriott International, T. Rowe Price and the U.S. Dept. of Commerce.
The Tivoli Privacy Wizard is available for download here.