NIST Privacy Framework

Do not affect the confidentiality of journalistic sources.

Do not misrepresent the sponsorship, approval, characteristics, or affiliation of your product, service, or automated system to a Commonwealth consumer, including a chatbot or AI agent that could be mistaken for a human representative.

For a research or opinion-polling call, keep to the same calling times except that a weekday call may run until 8.30pm and a Sunday call is permitted from 9am to 5pm; the public-holiday bar still applies.

Do not operate an automatic dialing-announcing device to place a call received in California between 9 p.m. and 9 a.m. California time.

Before connecting an automatic dialing-announcing device to a telephone line, file a written application with the telephone corporation serving that line, which may deny or modify the application if the proposed calling pattern would create a traffic overload or harm its other customers.

Before the initial sales call ends and before requesting payment, disclose the total price, any restrictions or conditions on the purchase, material aspects of the merchandise's performance, and the refund, cancellation or exchange policy, plus the specific disclosures this chapter requires for a prize promotion or an investment offer.

Treat a telemarketing sale as final only 7 business days after the customer receives a written cancellation notice, in at least 12-point bold type and in the language of the sales presentation, unless you give a full refund or satisfaction guarantee with at least 7 days to review the goods or services and disclose that policy and a return address.

Do not place a commercial telephone solicitation phone call, including one made through automated dialing or a recorded message, before 8 a.m. or after 8 p.m. local time in the called person's time zone.

Do not make more than three commercial telephone solicitation phone calls to a person over a 24-hour period on the same subject matter or issue, from any number.

Do not operate an autodialer, a device that stores telephone numbers and dials them sequentially or randomly to connect a call with a recorded sales message, to place a call between 9 p.m. and 9 a.m., or to call an emergency telephone number.

Do not solicit a sale by a telephone call between 9 p.m. and 8 a.m., or call an emergency telephone number.

Do not obtain or submit for payment a check, draft, or other negotiable paper drawn on a person's account or bond without that person's express written consent.

Disconnect the prerecorded message machine from the recipient's line within 5 seconds after either party ends the call.

Before taking payment, disclose clearly and conspicuously the total price, any restrictions or conditions, the material terms of your refund, cancellation or exchange policy (or that you have none), prize terms and odds, material investment risks, and the quantity and characteristics of the goods or services; do not charge a consumer before receiving an express verifiable authorization (written, recorded oral, or confirmed by an independent third party).

Do not offer a prize promotion that requires a purchase or payment, and do not leave a voicemail or answering-machine message falsely claiming a current business matter or relationship and asking the consumer to call back.

Make authorized recorded commercial advertising end, or free the subscriber's line for incoming and outgoing calls, immediately when the subscriber hangs up.

During a telephone or text-message solicitation or a sales presentation, do not use threatening, intimidating, profane or obscene language, and do not repeatedly or continuously conduct it in a manner a reasonable person would consider annoying, abusive or harassing.

Do not knowingly cause a caller-identification service for voice or text messages to display inaccurate or misleading information in order to defraud, wrongfully obtain something of value from, or otherwise harm a person.

Do not advertise in a commercial email sent from California, or sent to a California email address, that contains or is accompanied by a third party's domain name used without permission, falsified, misrepresented, or forged header information, or a subject line you know would likely mislead a recipient, acting reasonably, about a material fact regarding the message's contents.

Do not use a computer or computer network without authority to falsify or forge electronic mail transmission information in connection with sending unsolicited bulk electronic mail, and do not sell, give, distribute, or possess with intent to distribute, software primarily designed, of only limited other significant use, or marketed for falsifying that information.

Do not initiate or assist in transmitting an unsolicited commercial email from a computer in Florida, or to an address held by a Florida resident, that uses a third party's Internet domain name without permission, carries falsified or missing routing information, a false or misleading subject line, or false or deceptive body content designed to damage the recipient's device; this does not apply to a message a computer virus sends or retransmits without the sender's knowledge or consent.

Do not distribute software or another system designed to falsify or omit information identifying the point of origin or transmission path of a commercial email message.

Do not initiate, or cause to be initiated, an unsolicited commercial email (one to a recipient with whom you have no prior or existing business or personal relationship, sent without their request or express consent) that uses a third party's Internet domain name without permission, otherwise misrepresents its point of origin or transmission path, or contains false or misleading information in the subject line.

Begin the subject line of every unsolicited commercial email with ADV:, or with ADV:ADLT where the message concerns goods, services or credit that only a person 18 or older may obtain.

Do not initiate, conspire to initiate, or assist in transmitting commercial email that is sent from a computer in Maryland, or to an address you know or should know is held by a Maryland resident (you are presumed to know where the registrant of the recipient's domain name makes that available on request), and that uses a third party's Internet domain name or email address without permission, carries false or misleading information about the message's origin or transmission path, or carries false or misleading information in the subject line that has the capacity, tendency, or effect of deceiving the recipient.

Do not use a third party's internet domain name or e-mail address in identifying the point of origin or transmission path of a commercial e-mail without that third party's consent, misrepresent that information, or fail to include the information necessary to identify the point of origin.

Do not sell, give, distribute, or possess with intent to sell, give or distribute, software primarily designed, of only limited other commercially significant use, or marketed for falsifying commercial e-mail transmission or routing information.

When sending a commercial electronic mail message, do not falsify the message's routing information or use a false or misleading subject line, and do not use a third party's internet address or domain name without that party's consent to make it appear the third party sent the message.

Do not use a computer or computer network without authority, and with the intent to falsify or forge electronic mail transmission information or other routing information, in connection with transmitting unsolicited electronic mail through or into the network of an email or Internet service provider or its subscribers; for this offense electronic mail includes a fax and a wireless advertisement.

Do not sell, give, distribute, or possess with intent to distribute, software primarily designed or produced to enable falsification of electronic mail transmission or routing information, software with only limited other commercially significant use, or software marketed for that purpose.

Do not initiate, conspire to initiate, or assist the transmission of an unsolicited commercial email or fax from a computer or fax machine in Pennsylvania or to an email address that uses a third party's Internet domain name in the return address without permission, carries false or misleading return-address information that keeps the recipient from replying to you, or carries false or misleading information in the subject line.

Do not falsify or forge email, fax or wireless-advertisement routing information, misrepresent or obscure a message's point of origin or transmission path, or sell or distribute software primarily designed to enable that falsification.

Do not intentionally transmit an unsolicited commercial electronic mail message that falsifies its transmission or routing information, or any commercial electronic mail message with false, deceptive or misleading information in the subject line or that uses another person's Internet domain name without that person's consent.

Do not use deceptive means to modify the page a browser opens on launch, the default provider or proxy used to access or search the Internet, or the user's list of bookmarks; deception includes an intentionally and materially false or fraudulent statement, an intentional omission or misrepresentation of material information in order to deceive the user, and an intentional and material failure to give the user any notice of the download or installation of software in order to deceive.

Without the user's authorization and through deceptive means, do not prevent the user's reasonable efforts to block or disable software by causing software the user has properly removed or disabled to reinstall or reactivate itself; do not misrepresent, knowing it to be untrue, that software will be uninstalled or disabled by the user's action; and do not use deceptive means to remove, disable or render inoperative security, antispyware or antivirus software installed on the computer.