W3C home > Mailing lists > Public > www-p3p-policy@w3.org > May 2001

Re: user voice data

From: Martin Presler-Marshall <mpresler@us.ibm.com>
Date: Thu, 31 May 2001 09:05:00 -0400
To: "Enrico Silterra" <rxs@nortelnetworks.com>
Cc: www-p3p-policy@w3.org
Message-ID: <OF6E11283C.748FC186-ON85256A5D.004741C5@raleigh.ibm.com>
     Rick asked:
> I have questions about privacy issues in a voice portal,
> for which users can record voice prompts via the phone, and
> input some personal demographic category data via a web site.

> 1) Categorizing voice info --
> How would people suggest that we deal with stuff like
> prompts that are recorded by users?  Does this fall under the
> content category?
     It depends on exactly what you're asking the users for, but something
like the contents of a voice prompt certainly sounds like 'content' data to
me.

> 2) Notification
> What are your suggestions for conveying privacy information to
> users over the phone - is text to speech on a human readable text file
> enough, do we need a to text to speech the policy file also?
     You certainly don't want to text-to-speech the XML version of the P3P
policy. I would say that in a voice-accessible system, users would expect a
voice-based, "human-interpretable" privacy policy. If the system is both
Web-accessible and voice-accessible, then the Web-side should have a P3P
policy attached.

> 3) Accessible/Updateable
> Is is it acceptable that some information not be changeable or
> accessible
> over the phone, like for instance, income level? Does the fact that
> information
> is stored and used in several arenas (web ui, telephone ui)
> mean the info must be accessible/updateable
> in at least one arena or all of them?
     Deciding how much data to make accessible is the job of the service
provider, and you certainly shouldn't allow access to personal information
with authenticating the requester. Also, the P3P spec says that "The method
of access is not specified" - it's only that access is required. Thus,
access through only one mode (voice, Web, etc) is certainly acceptable.


> Thanks.
> Rick
     My pleasure. I hope this helps.

     -- Martin

Martin Presler-Marshall - Program Manager, Privacy Technology
E-mail: mpresler@us.ibm.com
Phone: (919) 254-7819 (tie-line 444-7819) Fax: (919) 254-6430 (tie-line
444-6430)
Received on Thursday, 31 May 2001 09:05:18 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 17 January 2012 12:13:10 GMT