[FEATURE] Push-notification to notify users when privacy policy notices are changed.

[joegrohens]

Is your feature request related to a problem? Please describe.
When the Mobile Privacy Notice is modified, there is currently no system for notifying users of the change. The MPN contains an update clause that merely asks the users to

"Please regularly check our Application or website to determine if the Privacy Notice has been updated and to review those changes before deciding whether or not to access (or continue to access) the Application."

Requiring users to continuously check the MPN to find out if any policies have changed, while treating their use of the app as implied consent, appears to fall short of the transparency we espouse. In keeping with the recommendations from the Rokwire (Illinois Instance) Data Privacy Committee (August 2020), users should be made aware "up front" of any changes to data and privacy practices, so that they can make an informed choice to consent to the policy.

Describe the solution you'd like
When a substantial or material change is made to the MPN, a push-notification would be sent to users of the app.

The attached document, "Workflow for Notifying Users of Rokwire Apps of Changes to Their Mobile Privacy Policy", describes

• the (human) procedure for deciding that a notification should be sent
• a template for the notification message, along with a link to the published summary of policy changes
• the step of including the same notification message in App Store and Play Store manifests

Action requested:

• Comment is requested on this workflow.
• The software implementation awaits input from the development team.

Describe alternatives you've considered
Alternatives:

• Leave as is: send no message and give users the burden of learning about policy changes.
• Notify users by email message. (It is possible that an email mailing list could be generated from NetIDs connected to the app. This would be a new use of PII, and the process might be complicated.)
• Notify users via broadcast university message (massmail, social media, press release, etc.) (This approach would include non-users, would probably bury the message, and would bring the policy to the attention of users at a time when they are not inclined to read it or think about it, and would use news channels for a trivial matter.)
• Perhaps AITS could add a pop-up notification to the policy agreement page on their website. (We have not explored this idea with AITS. Also not sure what effect this pop-up would have on reading the webpage via the apps deep link.)

Workflow for Notifying Rokwire Apps Users of Changes to Their Privacy Policy.docx

[joegrohens]

If we can do this in Safer Illinois, we would also want to do it in Illinois app.