SONY BMG Data Privacy Assessment Regarding the Use of XCP & MediaMax Content
Protection Software
December 2007
Statement of Opinion
XCP
Based on Cybertrust’s data privacy assessment of the XCP Software, as well
as server segments that support the XCP Software, Cybertrust has determined
that SONY BMG has not used the XCP Software, or any of the enhanced content on
the XCP CDs, to collect, aggregate or retain personally identifiable
information without user consent. Cybertrust has determined that the XCP
Bundled Player transmits only certain non-personally identifiable information
(album ID and IP address) to provide the Enhanced CD Functionality. Cybertrust
has found that SONY BMG temporarily retains this non-personally identifiable
information as part of standard web logging activities. Cybertrust has also
determined that SONY BMG does not associate or aggregate that information with
any other information to produce personally identifiable information.
MediaMax v.3
Based on Cybertrust’s data privacy assessment of the MediaMax v.3 Software as
well as the server segments that support the MediaMax v.3 Software, Cybertrust
has determined that SONY BMG and SunnComm have not used the MediaMax v. 3
Software, or any of the enhanced content on the MediaMax v.3 CDs, to collect,
aggregate or retain personally identifiable information without user consent.
Cybertrust has determined that the MediaMax v.3 Player transmits certain
non-personally identifiable information (album ID, track IDs, and IP address)
to provide the Enhanced CD Functionality. Cybertrust has found that SunnComm
retains this non-personally identifiable information as part of standard web
logging activities. Cybertrust has determined that SunnComm does not associate
or aggregate that information with any other information to produce personally
identifiable information.
MediaMax v.5
Based on Cybertrust’s data privacy assessment of the MediaMax v.5 Player, as
well as server segments that support the MediaMax v.5 Software, Cybertrust has
determined that SONY BMG and SunnComm have not used the MediaMax v.5 Software,
or any of the enhanced content on the MediaMax v.5 CDs, to collect, aggregate
or retain personally identifiable information without user consent. The
MediaMax v.5 Software does not collect any information that can be used to
personally identify a user without user consent. Cybertrust has determined that
the MediaMax v.5 Player transmits certain non-personally identifiable
information (album ID, track IDs, and IP address) to provide the Enhanced CD
Functionality. Cybertrust has found that SunnComm retains this non-personally
identifiable information as part of standard web logging activities. Cybertrust
has determined that SunnComm does not associate or aggregate that information
with any other information.
Based on Cybertrust’s findings, it is Cybertrust’s opinion that the SONY BMG
Representations are accurate: SONY BMG has not used the MediaMax or XCP
Software, or any enhanced content on XCP CDs or MediaMax CDs, to collect,
aggregate, or retain Personal Data about individuals who listened to XCP CDs or
MediaMax CDs on computers, without such person’s express consent.
To read the full December, 2007 report please click here
To read the full December, 2006 report please
click here.
To read the March, 2006 Privacy Assessment please
click here.
|
