- From: Roy Fielding via cvs-syncmail <cvsmail@w3.org>
- Date: Sat, 29 Sep 2012 09:14:53 +0000
- To: public-tracking-commit@w3.org
Update of /w3ccvs/WWW/2011/tracking-protection/drafts In directory hutz:/tmp/cvs-serv23434 Modified Files: tracking-compliance.html Log Message: backport validated mark-up changes to editors drafts Index: tracking-compliance.html =================================================================== RCS file: /w3ccvs/WWW/2011/tracking-protection/drafts/tracking-compliance.html,v retrieving revision 1.76 retrieving revision 1.77 diff -u -d -r1.76 -r1.77 --- tracking-compliance.html 29 Sep 2012 08:27:51 -0000 1.76 +++ tracking-compliance.html 29 Sep 2012 09:14:51 -0000 1.77 @@ -701,7 +701,7 @@ <p class="note">The term "Permitted Operational Uses" is used to indicate a restricted set of conditions under which tracking is allowed in spite of the user's DNT preference. The term user-granted exception is used when the user has permitted tracking, usually in the form of a site-specific exception, for a given third-party. In general: permitted uses are additional permissions granted by the standard; user-granted exceptions are additional permissions granted by the user. The words "exception" and "exemption" have occasionally been used interchangably and inconsistently by the editors; we are now trying to be consistent in using the terms <strong>"permitted (operational) use"</strong> and <strong>"user-granted exceptions"</strong>.</p> --> -<p>If a third-party receives a communication to which a DNT:1 header is attached, that third party MAY nevertheless collect, use, and retain information related to that communication for these permitted uses: +<p>If a third-party receives a communication to which a DNT:1 header is attached, that third party MAY nevertheless collect, use, and retain information related to that communication for these permitted uses:</p> <ul> <li>Short term collection and use, where information is not transmitted to a third party or used to profile or personalize a user's experience;</li> <li>Contextual content or ad delivery;</li> @@ -713,14 +713,14 @@ <li>Debugging</li> <li>Compliance With Local Laws and Public Purposes</li> </ul> -As long as there is: +<p>As long as there is:</p> <ul> <li>No Secondary Use</li> <li>Data Minimization and Transparency</li> <li>Reasonable Security</li> <li>No Personalization</li> </ul> -</p><p>These permitted uses and requirements are further discussed below.</p> +<p>These permitted uses and requirements are further discussed below.</p> <section id="enumerated-uses"> <h4>Enumerated Uses</h4> @@ -739,7 +739,26 @@ <section class="informative" id="contextual-example"><h6>Examples</h6></section> -<p><ol><li>A user visits ExampleSports.com with DNT:1 enabled to read a news article about a baseball game. ExampleSports uses the third party ExampleAds to serve ads on ExampleSports.com. ExampleAds is not an outsourcing partner of ExampleSports, and often uses third-party behavioral data to serve targeted ads to users who have not enabled DNT:1. ExampleAds may collect and use information about the user in order to render an advertisement (including IP address and information about the user agent) and information about the url of the news article in order to render an advertisement related to the baseball game.</li><br /><li>A user visits ExampleLocalNews.com with DNT:1 enabled to read a news article about a local fire. ExampleLocalNews uses the third party ExampleWeather to display a weather widget on its site. ExampleWeather is not an outsourcing partner of ExampleLocalNews. ExampleWeather may collect and user information about the user in order to render the weather widget (including IP address ad information about the user agent) and information about the domain of the news site in order to render weather information related to the city which ExampleLocalNews reports on.</li><br /></ol></p></section> +<ol> + <li>A user visits ExampleSports.com with DNT:1 enabled to read a news + article about a baseball game. ExampleSports uses the third party ExampleAds + to serve ads on ExampleSports.com. ExampleAds is not an outsourcing partner + of ExampleSports, and often uses third-party behavioral data to serve + targeted ads to users who have not enabled DNT:1. ExampleAds may collect and + use information about the user in order to render an advertisement + (including IP address and information about the user agent) and information + about the url of the news article in order to render an advertisement + related to the baseball game.</li> + <li>A user visits ExampleLocalNews.com with DNT:1 enabled to read a news + article about a local fire. ExampleLocalNews uses the third party + ExampleWeather to display a weather widget on its site. ExampleWeather is + not an outsourcing partner of ExampleLocalNews. ExampleWeather may collect + and user information about the user in order to render the weather widget + (including IP address and information about the user agent) and information + about the domain of the news site in order to render weather information + related to the city which ExampleLocalNews reports on.</li> +</ol> +</section> <section id="first-party-data"> <h5>Content or Ad Delivery Based on First Party Data</h5> @@ -747,7 +766,34 @@ </p> <p class="option">Regardless of DNT signal, information may be collected, retained and used for the display of content or advertisements based in part of data that the third party previously collected from the user when acting as a first party.</p> -<section class="informative" id="first-party-example"><h6>Examples</h6><p><ol><li>A user visits ExampleNews.com with DNT:1 enabled to read a story about a national election. ExamplesNews uses the third party ExamplePortal to serve content and advertisements on its site. ExamplePortal is not an outsourcing partner of ExampleNews. The user had previously visited ExamplePortal.com with DNT:1 enabled and read several stories about golf. ExamplePortal may serve an advertisement related to golf to that same user on ExampleNews. However, ExamplePortal may not use the fact that user went to ExampleNews to add to the user's ExamplePortal profile, and may only retain and use information about that fact for a permitted operational use.</li><br /><li>A user visits Example Music with DNT:1 enabled to listen to recently released albums streamed online. Example Music uses the third party Example Social to provide a widget that shows users what their Example Social friends have done on ExampleMusic. ExampleSocial i not an outsourcing partner of ExampleMusic. The user is a member of ExampleSocial and has several friends who also share information about what they do on ExampleMusic on ExampleSocial. ExampleSocial may display information that the users' friends had shared on ExampleSocial related to ExampleMusic within its third-party widget on ExampleMusic. However, ExampleSocial may not use the fact that user went to ExampleMusic to add to the user's ExampleSocial profile, and may only retain and use information about that fact for a permitted operational use.</li></ol></p></section></section> +<section class="informative" id="first-party-example"> + <h6>Examples</h6> + <ol> + <li>A user visits ExampleNews.com with DNT:1 enabled to read a story about + a national election. ExamplesNews uses the third party ExamplePortal to + serve content and advertisements on its site. ExamplePortal is not an + outsourcing partner of ExampleNews. The user had previously visited + ExamplePortal.com with DNT:1 enabled and read several stories about golf. + ExamplePortal may serve an advertisement related to golf to that same user + on ExampleNews. However, ExamplePortal may not use the fact that user went + to ExampleNews to add to the user's ExamplePortal profile, and may only + retain and use information about that fact for a permitted operational + use.</li> + <li>A user visits Example Music with DNT:1 enabled to listen to recently + released albums streamed online. Example Music uses the third party + Example Social to provide a widget that shows users what their Example + Social friends have done on ExampleMusic. ExampleSocial is not an + outsourcing partner of ExampleMusic. The user is a member of ExampleSocial + and has several friends who also share information about what they do on + ExampleMusic on ExampleSocial. ExampleSocial may display information that + the users' friends had shared on ExampleSocial related to ExampleMusic + within its third-party widget on ExampleMusic. However, ExampleSocial may + not use the fact that user went to ExampleMusic to add to the user's + ExampleSocial profile, and may only retain and use information about that + fact for a permitted operational use.</li> + </ol> +</section> +</section> <section id="frequency-capping"> <h5>Frequency Capping</h5> @@ -762,7 +808,16 @@ <section id="financial-logging"> <h5>Financial Logging and Auditing</h5> <!--<p class="note">for financial logging/ auditing, look to 3rd parties as 3rd parties</p> --> -<p>Regardless of DNT signal, information may be collected, retained and used for financial fulfillment purposes such as billing and audit compliance. This includes counting and verifying:<ul><li>ad impressions to unique visitors</li><li>clicks by unique visitors</li><li>subsequent action or conversion by unique visitors</li><li>quality measures such as ad position on sites and the sites on which the ads were served</li></ul></p> +<p>Regardless of DNT signal, information may be collected, retained and used +for financial fulfillment purposes such as billing and audit compliance. This +includes counting and verifying:</p> +<ul> + <li>ad impressions to unique visitors</li> + <li>clicks by unique visitors</li> + <li>subsequent action or conversion by unique visitors</li> + <li>quality measures such as ad position on sites and the sites on which the + ads were served</li> +</ul> <p class="note">One potential compromise on the unique identifier issue for logging would be grandfather in existing contracts that require unique, cookie-based counting. New contracts would not be able to require that ad networks use cookies (or other unique identifiers) to uniquely count users who have DNT:1 enabled.</p> <section class="informative" id="financial-logging-example"><h6>Examples</h6>
Received on Saturday, 29 September 2012 09:14:54 UTC