[patwg-charter] Require Data Section in Success Criteria (#35)

bmayd has just created a new issue for https://github.com/patcg/patwg-charter:

== Require Data Section in Success Criteria ==
The Success Criteria in the working group charter says that: 

> ​​Each normative specification should contain separate sections detailing all known security and privacy implications for implementers, Web authors, and end users.

I'd like to suggest that we add  a data section.

The notion of privacy can’t be separated from data, which suggests there can be no meaningful assessment of privacy without identification of the data in question. While I agree that defining privacy is not something we should pursue further, I do think the question of identifying the data inputs and outputs of features is something we haven't focused on and which we ought to give thought to. 

More specifically, I think we should consider requiring that specifications include a separate section detailing what data inputs a feature requires and what outputs it provides, potentially along with associated attributes, like a notion of how identifying the data is, whether its use should be consented and user controls offered and what the consequences of users exercising controls are for the feature.


Please view or discuss this issue at https://github.com/patcg/patwg-charter/issues/35 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Wednesday, 29 June 2022 17:41:58 UTC