W3C home > Mailing lists > Public > public-p3p-spec@w3.org > June 2004

primary purpose take 2

From: Lorrie Cranor <lorrie+@cs.cmu.edu>
Date: Fri, 18 Jun 2004 16:57:32 -0400
To: public-p3p-spec <public-p3p-spec@w3.org>
Message-Id: <1E7357FE-C16A-11D8-A914-000A95DA3F5A@cs.cmu.edu>
Here is a revised draft of the primary purpose extension that reflects 
our discussion on today's call.

On the call we discussed adding a software download ppurpose. We have 
done that, however, we wonder whether it might not be better to fold 
this together with the browsing ppurpose.

On the call we discussed the customization ppurpose and whether that 
was really needed as a) customization is not a primary purpose and b) 
customization is captured by the tailoring, individual-decision, and 
pseudo-decision purposes. I think that customization really is a 
primary purpose (if you define primary purpose the way Rigo suggested, 
as the reason the data was provided, as opposed to something else the 
data controller decides to do with it later). So, is customization 
really captured by tailoring individual-decision and pseudo-decision? I 
think it is not captured 100%. Here is an example to illustrate. 
Imagine a web site that let's me change the background color to purple 
for my current browsing session. This is captured by tailoring. Now 
imagine the site lets me request that whenever I come back the 
background is purple. This is not tailoring because it is not a 
one-time thing. I don't think it is pseudo-decision because the site is 
not actually making a decision; it is simply following through on my 
request. You might argue that this is covered by account management as 
I probably have an account with the site and have set my preference for 
a purple background. But, this could be implemented with a cookie that 
simply stores the word purple, so I might not really have an account. 
So.... I think we do need the custom ppurpose, but I think we need to 
narrow its definition as follows:

<custom>
Customization: Information may be used to customize the user's online 
experience as explicitly requested by the user. This element should not 
be used to represent purposes that can be described by <tailoring/>, 
<pseudo-decision/>, or <individual-decision/>. This element might be 
used, for example, at a site that displays a stock ticker with stocks 
selected by the user.

Comments?

Lorrie


Received on Friday, 18 June 2004 17:04:30 EDT

This archive was generated by hypermail pre-2.1.9 : Friday, 18 June 2004 17:04:31 EDT