TRUSTe Privacy Dispute Resolution FAQs
The TRUSTe Privacy Dispute Resolution program provides free online third-party privacy dispute resolution to anyone who files an eligible complaint about a TRUSTe client.
The Dispute Resolution program lets TRUSTe mediate between the individual complainant and the client. The individual’s right to legal recourse is not affected. While TRUSTe’s final determination is not binding on the individual, the client must comply with TRUSTe’s final determination or face removal from the TRUSTe program, possible publication of that removal, and/or referral to an appropriate law-enforcement body.
Dispute Resolution Process
1. Who can file a complaint?
Dispute Resolution — Appeals Process
- Complainant: The individual complaining about either a Client’s misuse of personally identifiable information (PII) or a violation of its privacy statement
- Client: The company about which the Complainant is complaining
- The complaint is about a company that holds an authentic TRUSTe seal or has contracted for TRUSTe Dispute Resolution services
- The Complainant has already made a good-faith attempt to resolve the problem directly with the Client
- The complaint raises an online privacy issue that affects the personally identifiable information of either the Complainant or that of a child whose parent or guardian is the Complainant
- The privacy complaint alleges that the Client collected, used or disclosed the personally identifiable information in a manner inconsistent with its published online privacy statement
- The privacy complaint is in English or the Client has secured appropriate translation services
- The privacy complaint is lodged with TRUSTe via the Dispute Resolution form on the TRUSTe website
4. What constitutes an ineligible complaint?
A complaint that either doesn’t satisfy the criteria for an eligible complaint OR has any of the following characteristics is ineligible to be considered in the TRUSTe Dispute Resolution program:
- The privacy complaint seeks only monetary damages
- The privacy complaint alleges fraud or other violations of statutory or regulatory law
- The privacy complaint has been resolved under a previous court action, arbitration, or other form of dispute resolution
5. Is TRUSTe obliged to consider all filed complaints?
TRUSTe reviews all complaints; however, TRUSTe is not obligated to pursue any complaint that it deems frivolous or that constitutes harassment of either TRUSTe or a TRUSTe client.
TRUSTe defines a frivolous complaint as one that either has no factual basis, or that does not relate to any obligations imposed by the TRUSTe License Agreement. Harassing complaints include successive complaints based on allegations that TRUSTe has previously addressed, and complaints filed with TRUSTe employees other than those designated by TRUSTe to receive complaints.
- Require the Client to either correct or modify personally identifiable information, or change user preferences
- Require the Client to change its privacy statement or privacy practices
- Require the Client to submit to a third-party audit of its privacy practices to ensure both the validity of its privacy statement and that it has implemented the corrective action that TRUSTe required
If a Client refuses to comply with the actions that TRUSTe requires, TRUSTe may refer the Client to an appropriate government agency, remove it from the TRUSTe program, and/or sue the client for breach of its License Agreement with TRUSTe.
TRUSTe cannot require a client to either pay monetary damages or take steps that would require the client to violate legal requirements imposed on it.
7. How do I file a complaint?
To register a complaint with TRUSTe, you must complete the online Dispute Resolution form. Dispute Resolution complaints cannot be opened by e-mail or phone. In certain situations, TRUSTe accepts Dispute Resolution complaints about the offline privacy practices of a Client via postal mail or fax–the Client site or application will include instructions in its privacy notice in that case.
After you file your Dispute Resolution complaint on TRUSTe’s website, the TRUSTe Dispute Resolution and Appeal processes are carried out by email. TRUSTe’s system will assign your complaint a unique complaint
number and notify you of it. Please be sure to include the complaint
number in the subject line of all emails you send to TRUSTe
Before you can begin the following process, you must first attempt to resolve your problem by addressing your complaint directly with the TRUSTe client.
A. You file a complaint with TRUSTe
If you are dissatisfied with the Client’s handling of your complaint, you can file a complaint – the first step in the TRUSTe Dispute Resolution process. TRUSTe will review the information you submitted through the online Dispute Resolution form and determine whether your complaint is eligible for action.
Information you submit as the Complainant must include a description of your interaction with the client about your problem. This information must be sufficiently complete to permit the Client and the TRUSTe Mediator to evaluate the complaint adequately.
As a Complainant, you must clarify whether you want TRUSTe to share the specifics of your complaint – including your name – with the Client. If you do not want this information to be shared with the Client, TRUSTe’s ability to rectify the situation may be hindered.
B. TRUSTe determines whether the complaint is eligible
TRUSTe will inform you within 10 business days as to whether your
complaint meets the eligibility requirements, or whether TRUSTe needs further information to make such a determination (See What is an eligible complaint?). If TRUSTe determines that your complaint is
ineligible, you will be emailed a written explanation.
C. TRUSTe collects and examines information on the dispute
TRUSTe will be the sole judge of whether the information you provided as a Complainant is sufficient to open an investigation. TRUSTe may
contact you for additional information that would assist us in addressing your complaint. You would have 14 calendar days from our contacting you to provide this additional information. If you do not provide this information, TRUSTe will close the complaint.
NOTE: A Client or Complainant may submit information to TRUSTe with a request that the information not be made available to the other party. This information should be clearly marked “confidential,” and the requesting Client or Complainant should confirm that the information is not publicly available. TRUSTe will handle confidential information obtained through the Dispute Resolution program in the same way that it handles its own confidential information.
D. The Dispute Resolution process goes forward
- For Dispute Resolution complaints where TRUSTe indicates that it is notifying the Client, TRUSTe will request response from the client
within 14 calendar days. TRUSTe will review the nature of the site’s response and update the ticket about next steps or TRUSTe’s determination.
- If TRUSTe considers the Client’s response to be deficient, it may request additional information from the Client.
- TRUSTe may, in its sole discretion, extend any of the time periods
- TRUSTe is not obligated to consider information it receives after any
specified deadline or extension of time.
- Once TRUSTe, in its sole judgment, has made a final determination
about the complaint, it will update the ticket, copying the
Complainant and, if the Client was copied, also the Client.
- Once TRUSTe sends notice of its determination and indicates that it
has closed a Dispute Resolution complaint, the Complainant or the
Client have 14 calendar days to file an appeal as discussed below.
E. If Client fails to answer a complaint
If a Client fails to answer a complaint with a timely response, TRUSTe will send the Client a second notice and attempt phone notification. If the issue remains unresolved, TRUSTe may:
- Withdraw or suspend the Client’s certification
- Refer the matter to the appropriate government agency depending on
the nature of the complaint; and/or
- Take other action as appropriate
The email address to use for filing an appeal with TRUSTe is firstname.lastname@example.org and must include the complaint number in the subject line of the appeal request.
The party filing the appeal must explain, in a statement not to exceed 1000 words, why TRUSTe’s final determination of the complaint should be overturned. (“Appeal Statement”).
Note: TRUSTe’s determination about whether an issue falls within the scope of its privacy programs is final, and is not subject to appeal via the Appeals Process.
11. What happens after I file an appeal?
Upon receiving an appeal, TRUSTe’s Compliance Director will review the complaint and determine within 10 business days whether the complaint is eligible to be reopened for further investigation. For example, TRUSTe may reopen an investigation if the consumer reports substantive new information that a resolution a client indicated was applied has ceased having effect.
After TRUSTe’s Compliance Director completes TRUSTe’s review, TRUSTe may direct the other party to respond by e-mail within 10 business days thereafter, explaining in a statement not to exceed 1000 words why TRUSTe’s final determination should be sustained, or supplying responses to specific questions from TRUSTe. The party filing the original appeal will be notified if TRUSTe is seeking information from the other party.
If TRUSTe’s Compliance Director determines that the original complaint disposition was proper according to TRUSTe processes, and introduces no substantive new information that could not have been raised earlier, or finds no other basis for appeal, the Compliance Director will request review by TRUSTe’s Legal Department of the issue appealed, and TRUSTe will respond with its final appeals determination within 10 business days.