The New York Times
The New York Times is a daily American newspaper and has since been nicknamed the "newspaper of record".
Score
Citation
“These companies place or recognize cookies, pixel tags, web beacons or other technology to track certain information about our NYT Services website users. For example, in the course of serving certain advertisements, an advertiser may place or recognize a unique cookie on your browser in order to collect certain information about your use of the NYT Services. For another example, an advertiser or ad server may also be able to collect your device’s unique identifier in the course of serving an ad. In many cases, this information could be used to show you ads on other websites based on your interests.”
Notes
Advertisers on the New York Times do offer opt-out tools, however they can sometimes be hard to use.
Even if there is a reasonable delay before the data is fully deleted (as is common), the data still counts as "permanently deleted" and satisfies the parameters for this question.
Score
Citation
"If you would like to request to review, correct, restrict or delete personal information that you have previously provided to us, object to the processing of personal information, or if you would like to request to receive an electronic copy of your personal information for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), you may contact us by completing this form."
This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).
Note that whether the policy allows sharing aggregated user data does not affect this question.
If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).
If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).
Score
Citation
"We may also share personal information to third-party sponsors of sweepstakes, contests, and similar promotions and will let you know at the point of collection of your information if we do."
"One of the analytics service providers we use is Google Analytics."
"If you are a U.S. print subscriber, we may exchange or rent your name and postal mailing address (but not your email address) and certain other information, such as when you first subscribed to The New York Times with other reputable companies that offer marketing information or products through direct mail."
Score
Citation
"We may access, preserve and disclose personal information if we are required to do so by law or we have a good faith belief that such action is necessary to (1) comply with the law or with legal process; (2) protect and defend our rights and property; (3) protect against misuse or unauthorized use of the NYT Services; (4) protect the personal safety or property of our users or the public (among other things, this means that if you provide false information or attempt to pose as someone else, information about you may be disclosed as part of any investigation into your actions); and (5) cooperate with public and government authorities (which may be outside your country of residence)."
Score
Citation
“We seek to protect personal information with reasonable organizational, technological and physical safeguards commensurate to the sensitivity of the personal information. Although we take appropriate measures to safeguard your information, we cannot guarantee its absolute security.”
Score
Notes
The last modified date is available at the top of the policy.
Note that all companies operating in the EU are subject to Art. 33 of the GDPR, which requires companies to notify their data protection authority of a data breach within 72 hours of discovering it.
Score
Notes
Nothing is mentioned about data breaches in the privacy policy.
Score
Citation
“If we make a significant or material change in the way we use or share your personal information, you will be notified via email and/or prominent notice within the NYT Services at least 30 days prior to the changes taking effect.”
This includes the use of data brokers and independent verification authorities (such as background check providers).
Score
Citation
“Publicly available databases, including privately-held marketing and data analytics resources. For example, we may receive demographic information (age, sex, household income, job industry and job title) from these sources. [...] [From] Joint marketing third [parties], when they share the information with us.”
Score
Notes
While the policy does a generally good job explaining how it uses the data (albeit sometimes for less-than-ideal purposes, like selling addresses to mailing marketers), not all information is accompanied by a clear explanation.
Some services allow users to opt-out or opt-in to of non-critical collection or use of personal data, such as collecting data for personalized advertisements.
Score
Citation
“For opt-out options specific to Google Analytics, please visit https://tools.google.com/dlpage/gaoptout”
“You may opt out of the use of the Google Doubleclick cookie by visiting the Google ad and content network privacy policy. ”
Notes
The policy does provide a number of opt-out links, but their data can still be used for non-critical purposes internally within the New York Times (for example, for marketing).
Score
Notes
Almost all categories are explicitly explained, however in the section “From other sources” some “including” phrases are used (thereby making the statements non-absolute).
Last Updated
May 26, 2021
Sources
Contributors
