W3C home > Mailing lists > Public > public-tracking@w3.org > February 2012

Re: ACTION 124

From: Jonathan Mayer <jmayer@stanford.edu>
Date: Wed, 22 Feb 2012 16:30:16 -0800
Cc: "public-tracking@w3.org" <public-tracking@w3.org>
Message-Id: <A428F06E-5B02-4E2D-975B-E8DC68BEA860@stanford.edu>
To: Amy Colando (LCA) <acolando@microsoft.com>
I think we're making good progress on the party definition and first party vs. third party issues.  For convenience, here's a quick comparison of this proposal and the proposal Tom and I have been workshopping.  (I'm working from my reading and off-list conversations; by all means correct me if I get anything wrong.)

1) What's in the same party?
Tom and Me: User Expectations
Amy, Shane, and Ted: Corporate Affiliation OR Branding

2) What's a first party?
Tom and Me: User Expectations
Amy, Shane, and Ted: The party that controls the domain in the URL bar.

3) When does a third-party widget become a first-party widget?
Tom and Me: User Expectations (sometimes phrased as "meaningful interaction")
Amy, Shane, and Ted: Interaction

4) Must a website make a representation about which entities it believes it is in a party with?
Tom and Me: Yes
Amy, Shane, and Ted: Yes


Here's what I'd like to float as a possible compromise.

1) What's in the same party?
Branding

2) What's a first party?
Branding (of the full-window website or app)

3) When does a third-party widget become a first-party widget?
Meaningful Interaction (as a set of bright-line rules)

4) Must a website make a representation about which entities it believes it is in a party with?
Yes


Thoughts?


On Feb 21, 2012, at 4:42 PM, Amy Colando (LCA) wrote:

> Per the Action 124, here’s a proposed First Party definition that I have worked on with Shane and Ted:
>  
> A First Party is the entity that owns the Web site or has Control over the Web site the consumer visits. A First Party also includes the owner of a widget, search box or similar service with which a consumer interacts, even if such First Party does not own or have Control over the Web site where the widget or services are displayed to the consumer. 
>  
> A First Party includes Affiliates of that First Party, but only to the extent that the Affiliate  is (1) an entity that Controls, is Controlled by, or us under common Control with, the First Party; or (2) an entity where the relationship to the First Party is clear to consumers through co-branding or similar means. 
>  
> A First Party must make reasonable efforts to disclose, in a manner easily discoverable by Users, its ownership or Control of a site or service, such as through branding on the site or service, disclosures in the privacy policy or terms of use linked to that site or service, or ….
>  
> Control of an entity means that one entity (1) is under significant common ownership or operational control of the other entity, or (2) has the power to exercise a controlling influence over the management or policies of the other entity.  In addition, for an entity to be under the Control of another entity and be treated as a First Party under this standard, the entity must also adhere to DNT standard in this specification.
>  
>  
> Amy Colando
> Senior Attorney, Online Services
> Microsoft Corporation
> Office: 425.703.6329
> Mobile: 206.658.7704
Received on Thursday, 23 February 2012 00:30:54 UTC

This archive was generated by hypermail 2.3.1 : Friday, 21 June 2013 10:11:25 UTC