W3C home > Mailing lists > Public > public-tracking@w3.org > January 2012

ACTION-75: Write-up a hybrid of Do Not Profile and Do Not Cross-Site Track

From: Shane Wiley <wileys@yahoo-inc.com>
Date: Mon, 30 Jan 2012 21:00:17 -0800
To: Tracking Protection Working Group WG <public-tracking@w3.org>
Message-ID: <63294A1959410048A33AEE161379C8023D0C425861@SP2-EX07VS02.ds.corp.yahoo.com>
Description:
Write-up a hybrid of Do Not Profile and Do Not Cross-Site Track

Draft:
o Not Profile + Do Not Cross-Site Track

When DNT:1...

1st parties may collect and profile.

3rd parties MUST NOT collect data across multiple, non-affiliated or branded websites.

<Non-Normative> Data collected by a 3rd party MUST be segregated according to the 1st party from which it was collected.  A 3rd party MUST NOT aggregate, correlate or use together data that was collected on different 1st party sites.

3rd parties MUST NOT add collected data to a "profile" of a user.

3rd parties MUST NOT leverage previously collected data to profile a user or to alter a user's experience.

3rd parties MUST NOT attempt to personally identify a user.

A party MUST NOT share (send or receive) collected data or profiles with another party (unless that party is ONLY working on the behalf of that specific party).

                <Non-Normative> (Outside of DNT Context):  Data legitimately collected and received from a party MAY be combined with existing 1st party profile data.

A party MAY choose to remove any previously profiled data.

All stated Exceptions apply.
Received on Tuesday, 31 January 2012 05:00:54 UTC

This archive was generated by hypermail 2.3.1 : Friday, 3 November 2017 21:44:43 UTC