This excerpt taken from the IILG 10-K filed Mar 31, 2009.
Regulations Generally Applicable to Our Business
Privacy and Data Collection. The collection and use of personal data of our customers, as well as the sharing of our customer data with affiliates and third parties, are governed by privacy laws and regulations enacted in the United States and in other jurisdictions around the world. For instance, several states have introduced legislation or enacted laws and regulations that require compliance with standards for data collection and protection of privacy and, in some instances, provide for penalties for failure to notify customers when the security of a company's electronic/computer systems designed to protect such standards are breached, even by third parties. Other states, such as California, have enacted legislation that requires enhanced disclosure on Internet web sites regarding consumer privacy and information sharing among affiliated entities or have such legislation pending. In addition, the European Union Directive on Data Protection requires that, unless the use of data is "necessary" for certain specified purposes, including, for example, the performance of a contract with the individual concerned, consent must be obtained to use the data (other than in accordance with our stipulated privacy policies) or to transfer it outside of the European Union. We believe that we are in material compliance with the laws and regulations applicable to privacy and data collection as such are relevant to our business.
Marketing Operations. The products and services offered by our various businesses are marketed through a number of distribution channels, each of which is regulated at the federal and state level. Such regulations may limit our ability to solicit new customers or to market additional products or services to existing customers. For example, to comply with state and federal regulations on telemarketing, our affected businesses have adopted processes to routinely identify and remove phone numbers listed on the various "do not call" registries from our calling lists and have instituted procedures for preventing unsolicited or otherwise unauthorized telemarketing calls. In addition, where appropriate, our business has registered as a telemarketer and has adopted calling practices compliant with requirements of the applicable jurisdiction, such as restrictions on the methods and timing of telemarketing calls and limitations on the percentage of abandoned calls generated through the use of automated telephone-dialing equipment or software.
Similarly, state and federal regulations may place limitations on our ability to engage our consumers in electronic mail marketing campaigns. Most notably, the CAN-SPAM Act imposes various requirements on the transmission of e-mail messages whose primary purpose is to advertise or promote a commercial product or service. Our affected businesses have adopted email messaging practices responsive to the requirements of such regulation.
Internet. A number of laws and regulations have been adopted to regulate the Internet, particularly in the areas of privacy and data collection. In addition, it is possible that existing laws may be interpreted to apply to the Internet in ways that the existing laws are not currently applied, particularly with respect to the imposition of state and local taxes on transactions through the Internet. Regulatory and legal requirements are particularly subject to change with respect to the Internet. We cannot predict with certainty whether such new requirements will affect our practices or impact our ability to market our products and services online.
Travel Agency Services. The travel agency products and services that we provide are subject to various federal, state and local regulations. We must comply with laws and regulations that relate to our marketing and sales of such products and services, including laws and regulations that prohibit unfair and deceptive advertising or practices and laws that require us to register as a "seller of travel" to comply with disclosure requirements. In addition, we are indirectly affected by the regulation of our travel suppliers, many of which are heavily regulated by the United States and other jurisdictions.