Skip to content
SpamtacularWhere spam and policy collide
  • Home
  • About Mickey
  • Comment Policy
  • Privacy Policy

Policy at scale: Policy is relative

6 July 2020

Telling stories is a dangerous thing in my line of work. But, work cannot get done without telling stories. On the one hand, you want the story to be accurate, but several really legitimate considerations mean that you can’t be so precise as to allow others to determine who is being referred to. If you are too precise, you can get into trouble, but if you lack enough precision the story cannot perform its function.

Why tell stories?

It’s easy to look at storytelling as a means for the teller to brag. After all, we tend not to tell about our losses and to speak up (and out) about our wins. But, I know that at least on this blog, the reason why I tell stories is to put context around the importance of policy.

Policy is one of those “ivory tower” fields. It is really easy to sit back and think about the way that things SHOULD be and then craft a statement that describes your chosen reality. But, very often, in my experience anyway, policies, like bills hoping to become laws, happen because of something which has occurred.

​(Frishberg 1976)​
Read morePolicy at scale: Understanding the issue

So, it’s not just that people said that “There ought to be a law.” But something happened which caused a discussion that made the determination that there ought to be a law to even take place. In the context of a policy, that story is as important to understanding what the policy is, why it came to exist, and how it should be applied as the wording of the policy itself.

Policy is relative

Policy, like law, is extremely fact-intensive. That is to say that a blanket statement doesn’t always work.

For instance, last week I published a blog post talking about what constitutes opt-in. In that piece, you might have noticed a couple caveats or carve-outs. For instance, “Domain owner issues blanket, documented consent for addresses under their control (such as internal corporate communications, or messages from a corporate provider)” ​(Chandler 2020)​.

Read morePolicy at scale: The purpose of a policy is protection

This indicates that there’s a relative element at work. If you have a very strict opt-in regime, then the requirement is that the recipient must always extend consent to be placed on a mailing list. But these things do not live in a vacuum and those of us who write and enforce policy have to take real life scenarios into account.

An example

In my case, when it came to understanding this particular carve-out in an opt-in only policy, it happened when an employee challenged the company I was working for over new employees sending introductory messages to the entire company at the end of their onboarding period. As far as the company was concerned, this was a good way for new employees to show that they had a basic grasp of the product that we were selling and allowed people to better get to know one another. As far as this employee was concerned, this process was resulting in a dozen or more needless messages per week.

Ultimately, we are in the business of helping users to successfully deliver messages into the inboxes of their intended recipients. That is, generally speaking, best accomplished by requiring the recipient extend consent which is specific to the user. But, in this case, there was more at work. The company was responsible for sending the message and was also responsible for giving the person complaining their mailbox as well as maintaining and tuning the spam filters that were hopefully keeping that mailbox usable.

While I do have strong philosophical leanings toward strict opt-in consent, in this particular instance, it makes far more sense to understand that the true owner of the mailbox is the entity who has the ability to ultimately control its use: the company. The company purchases the domain name, issues the username to the employee, and runs the spam filters. Thus, if the company wants to utilize its resources in this manner, the employee’s recourse is to try to change the company’s mind on its onboarding process not to try to get policy enforcement to terminate the ability of each and every new employee to utilize the systems in the manner that they had been directed to use them.

So, what does that mean?

Policy creation and enforcement often come down to understanding the facts involved. While some things are pretty cut and dried (for instance, brokered/purchased/rented/appended lists are never “express, customer-specific opt-in” lists, no matter how hard you squint), in many other instances, the facts matter a whole lot. So, if the recipient’s employer gave someone a list of employees and said “mail them all about things relative to our relationship” then you have to examine the message to see what the facts say about how well the customer is keeping that agreement/request.

So, when you see a story here, understand that the story is being told to help us understand the policy and its implications by examining a real-world application. That application is what helps us to understand what policy looks like at both the micro- and macro-scales.

References

  1. Chandler, Mickey. 2020. “What Is Opt-In?” Spamtacular. June 30, 2020. https://www.spamtacular.com/2020/06/30/what-is-opt-in/.
  2. Frishberg, Dave. 1976. “I’m Just A Bill.” Schoolhouse Rock. March 27, 1976. https://youtu.be/FFroMQlKiag?t=60.

Share this:

  • Facebook
  • Twitter
  • LinkedIn
  • Pocket
  • Email
Tags: Policy at Scale

Calendar

July 2020
S M T W T F S
 1234
567891011
12131415161718
19202122232425
262728293031  
« Jun   Nov »

Archives

  • November 2021
  • July 2020
  • June 2020
  • March 2020
  • February 2020
  • January 2020
  • November 2018
  • February 2018
  • January 2018
  • December 2017
  • January 2017
  • August 2016
  • June 2016
  • April 2016
  • March 2016
  • February 2016
  • July 2015
  • June 2015
  • March 2015
  • February 2015
  • November 2014
  • June 2014
  • April 2014
  • February 2014
  • December 2013
  • November 2013
  • September 2013
  • May 2013
  • June 2012
  • April 2012
  • September 2011
  • August 2011
  • March 2011
  • January 2011
  • November 2010
  • July 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • December 2009
  • November 2009
  • October 2009
  • July 2009
  • June 2009
  • May 2009
  • March 2009
  • January 2009
  • October 2008
  • September 2008
  • April 2008

Categories

  • Administrivia
  • Industry
  • Law
  • Policy
  • Spam
  • Uncategorized

Copyright Spamtacular 2023 | Theme by ThemeinProgress | Proudly powered by WordPress