跳轉到

保護你的盟友

在進行隱私權倡導工作時，請務必謹慎，切勿在未事先獲得他人明確同意的情況下收集或分享他人的資料。在您從事隱私權相關工作時，無論是個人行動還是帶領組織，在每一步行動中，保護盟友的資料都很重要。

採取以下的作法來保護盟友們的隱私資料：

我們會在何種情況下蒐集及分享他人的資料

在倡議過程中，我們可能透過多種方式蒐集他人的資料，有時甚至自己都沒有察覺。

我們必須有意識到自己會蒐集和分享的資料，並以最謹慎的態度保護他人的資料。這不僅是一種誠信，更是建立並維持盟友信任的基礎。反過來說，這對於建立和發展運動而言也非常必要。

以下的例子，即是一些我們在推動隱私權倡議工作的過程中，可能有意無意間蒐集到或分享出去的他人資料：

  • 聯絡資訊（個人諮詢的或專業事務往來的）
  • 捐款資訊（包括法定姓名、電子郵件地址及電話號碼）
  • 付款資訊（包括法定名稱及收件地址）
  • 郵件清單的電子郵件地址
  • 電子郵件內容
  • 即時通訊訊息內容
  • 論壇貼文內容
  • 登入憑證
  • 網際網路協定位址（IP addresses）
  • 網站回傳資料
  • 網站的 Cookie 及指紋識別資料
  • 聊天機器人紀錄
  • 問卷調查的回答
  • 共用文件
  • 分享的照片與圖片
  • 僱傭合約或合夥協議中人員的法定姓名
  • 簽訂僱傭合約或合夥協議的人的住址
  • 求職者的履歷與求職信
  • 視訊或語音會議的錄音或截圖
  • 採訪的幕後影片片段
  • 我們在聚會、活動或抗議時拍攝的影片
  • 我們在聚會、活動或抗議時拍攝的照片
  • 從活動照片或活動停車場管理中獲取的車牌資訊
  • 監視器畫面
  • 活動相關的飲食限制／偏好及健康資訊
  • 人們在社群媒體上發文的截圖
  • 還有更多

如何保護他人的資料

Each time we collect data from others, we become its guardian. This isn't a small responsibility, and we should always treat the data of others as toxic asset.

We should always only collect and keep what was obtained consensually, and what is strictly required for operations.

Regardless of the data we have to collect, we should always make sure to:

  1. Minimize data collection by verifying that it is absolutely necessary for the task (data minimization).

  2. Ask for consent from the data subject before collecting any data, and make sure consent is explicit and informed.

  3. Protect the collected data with adequate and proportional security measures, ideally using end-to-end encryption every time this is possible.

  4. If this data needs to be shared with a third-party or a service provider, obtain data subject's consent prior to sharing, and verify the third-party or service provider offers adequate protections and proper deletion mechanisms.

  5. Delete the data as soon as it isn't needed anymore, and ensure deletion is done thoroughly.

在我們的倡議工作中應該要常態化的做法

  • Asking for consent before sharing someone's information (legal name, location, contact information, photos, etc.).

  • Asking people what name and pronouns they want to be referred to publicly.

  • Asking people how (and if) they would like to be credited publicly.

  • Asking for permission before using the quote of someone else in our own work.

  • Asking for permission before publishing a screenshot of someone else's post.

  • Respecting people's choices to show their face publicly or not.

  • Asking for consent before taking photos at meetups or events.

  • Blurring the faces of strangers in crowd photos (especially for children).

  • Using consent badges for photo permission at event, or ideally forbidding taking nonconsensual photos entirely.

  • Warning people in advance when there are recording technologies on premise (such as smart speakers or other recording devices).

  • Not requiring guests to sign up for events. Making sure all the information is public, without requiring to provide any personal information in order to participate.

更多資源

[PWAs]：漸進式網路應用程式 [WKD]：網路金鑰目錄 (Web Key Directory)

您正在查看 Privacy Guides 的 正體中文 版本，由我們在 Crowdin 上出色的團隊翻譯。如果您發現錯誤，或在此頁面上看到任何未翻譯的部分，請考慮提供幫助！ 訪問 Crowdin

You're viewing the 正體中文 copy of Privacy Guides, translated by our fantastic language team on Crowdin. If you notice an error, or see any untranslated sections on this page, please consider helping out!