A privacy policy should focus on ensuring the process and procedural actions to protect information are followed, regardless of whether personally identifiable information exists in a file. Members of the ASA Privacy and Confidentiality Committee provide guidance for developing such a policy here.
Amstat News
The Membership Magazine of the American Statistical Association