1

Platform for Privacy Preferences and RBC Financial Group

Della Shea

Manager Enterprise Web ComplianceRBC Financial Group

P3P Implementation Workshop Series

Toronto, CanadaJune 19th, 2002

2

• Why we chose to implement P3P

• What influenced our decision

• How P3P fits into our privacy strategy

• How we approached deployment

• Key success factors

Presentation Overview Presentation Overview

3

Why Did RBC Choose to Deploy P3P?Why Did RBC Choose to Deploy P3P?

Because protecting the privacy of customers’ personal information is as great a responsibility as safeguarding their wealth.

The Trust Factor…..

…….P3P Supports this Value

4

What Influenced Our Decision?What Influenced Our Decision?

Internal Drivers

External Drivers

P3P fits into RBC’s privacy strategy to provide notice and to accommodate customer preferences and choice.

Availability of P3P enabled browsing devices including Internet Explorer 6.

Increased support of the P3P standard and adoption of the by top Web sites.

To take a leadership position through early adoption of the P3P standard.

5

Privacy: Key to our Customers, Key to our Business Strategy

Privacy: Key to our Customers, Key to our Business Strategy

Leadership

Competitive Differentiator

10 Principles of Privacy, RBC Policies, Regulations/Legislation

RBC has a history of privacy firsts

The root of our strategy is notice, consent and customer choice

Notice, Consent and Customer Choice

Customers prefer to do business with companies they feel will respect their privacy

6

1. Obtained enterprise executive support

• Privacy Management Committee

2. Developed phased approach deployment plan

• RBC has a complex Web environment

• Phase 1: Deployment on Canadian Web sites

• Phase 2: Deployment on US Web sites

RBC’s Approach to P3P DeploymentRBC’s Approach to P3P Deployment

7

3. Established cross-enterprise committee to facilitate deployment across lines of business

4. Developed full and compact policies

• Project managers, legal and CPO mapped RBC’s privacy policy to the current P3P specification (January, 28 2002)

• Engaged external consultant to develop policies by hand

RBC’s Approach to P3P DeploymentRBC’s Approach to P3P Deployment

8

5. Established customer communication strategy

6. Deployed P3P reference file on our public Web servers (/w3c/p3p.xml)

7. Compact policies scheduled to be deployed in July 2002

RBC’s Approach to P3P DeploymentRBC’s Approach to P3P Deployment

9

• Obtaining cross-enterprise support sponsorship, and collaboration.

• Constant communication with legal, CPO and technical staff

• Enthusiasm from our technical teams

• Preparing customer communication

• Planning ahead!

Key Success Factors Key Success Factors