Defining Collection/Retention/Use/Sharing (ACTION-64, ISSUE-16)

Operative text:
A party "collects" data if the data comes within its control.
A party "retains" data if data remains within a party's control.
A party "uses" data if the party processes the data for any purpose other than storage.
A party "shares" data if the party enables another party to collect the data.

Non-normative text:
The definitions of collection, retention, use, and sharing are drafted expansively so as to comprehensively cover a party's user information practices.  These definitions do not require a party's intent; a party may inadvertently collect, retain, use, or share data.  The definition of collection includes information that a party did not cause to be transmitted, such as protocol headers.

Received on Wednesday, 25 January 2012 09:55:19 UTC