{
  "id": "POL-080",
  "slug": "pol-080",
  "title": "A political donation programme must put its policy in front of donors",
  "statement": "A political organisation soliciting donations by text must communicate its privacy policy to donors and enforce it.",
  "rationale": "CTIA's political guidelines ask for more than a published document: the donor giving money over a text message has to be shown the policy at the point of giving, because that is the moment their number, their name and their giving history are collected together. Political programmes are run at speed by volunteers and consultants, so the policy is usually a link in a footer nobody following a donation link ever sees.",
  "layer": "POLICY_PAGE",
  "layerSlug": "policy-page",
  "object": "privacy policy body + donor-facing disclosure",
  "severity": "HIGH",
  "detectability": [
    "CRAWL"
  ],
  "failureClass": "TERMINAL_POLICY",
  "artifact": "privacy_policy",
  "authorities": [
    "CTIA"
  ],
  "applicability": {
    "useCases": [
      "POLITICAL"
    ]
  },
  "applicabilityText": "Applies when the use case is POLITICAL.",
  "universal": false,
  "remediation": "Link the policy on the donation page itself and in the messages that ask for money, and hold the programme to it — including the third-party sharing ban that POL-078 applies. Done when a donor can reach the policy from the page they give on.",
  "pitfalls": [
    "A link in the site footer is not communication to a donor arriving from a text on a donation URL. Put it on the donation page."
  ],
  "notes": "Conditional on donations being solicited as well as on the political use case. The use-case half is tagged; the donation half sits in the criteria, which pass immediately for a political programme that asks for nothing.",
  "phase": "approval",
  "automated": true,
  "url": "https://ekas.io/rules/10dlc/policy-page/pol-080/",
  "markdown": "https://ekas.io/rules/10dlc/policy-page/pol-080.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}