RE: DNT:0

Ian,

I would replace “recommendation” with “standard” assuming this document becomes one.
“Upon receiving a request with DNT:0, a site may assume the user has provided them with explicit consent to operate as normal and continue with its standard data collection, retention, and use practices including but not limited to the placement and reading of cookies and personalization services.  Additionally, restrictions placed on the collection and use of data by this standard shall not apply to any data received as part of a request with a DNT:0 signal.”
- Shane


From: Ian Fette (イアンフェッティ) [mailto:ifette@google.com]
Sent: Wednesday, June 13, 2012 10:56 AM
To: Shane Wiley
Cc: public-tracking@w3.org Group WG
Subject: Re: DNT:0

Shane, that seems fine. Do you have any objection to the part of the text stating "Additionally, restrictions placed on the collection and use of data by this recommendation shall not apply to any data received as part of a request with a DNT:0 signal."
On Wed, Jun 13, 2012 at 7:52 AM, Shane Wiley <wileys@yahoo-inc.com<mailto:wileys@yahoo-inc.com>> wrote:
Ian,

That’s fair – then let’s state it in that manner and add a “including but not limited to” to provide flexibility but address the two key business practices head-on.
“Upon receiving a request with DNT:0, a site may assume the user has provided them with explicit consent to operate as normal and continue with its standard data collection, retention, and use practices including but not limited to the placement and reading of cookies and personalization services.”
- Shane
From: Ian Fette (イアンフェッティ) [mailto:ifette@google.com<mailto:ifette@google.com>]
Sent: Wednesday, June 13, 2012 10:46 AM
To: Shane Wiley
Cc: public-tracking@w3.org<mailto:public-tracking@w3.org> Group WG
Subject: Re: DNT:0

I guess the problem i have is that "normal" and "standard practices" may not be clear, e.g. what does that mean in Europe where regulators are trying to say "normal" is "nothing unless the user consents?" -- I was trying to get at DNT:0 == consent.
On Wed, Jun 13, 2012 at 7:40 AM, Shane Wiley <wileys@yahoo-inc.com<mailto:wileys@yahoo-inc.com>> wrote:
Suggest we remove discussion of specific business practices since those are still under debate (akin to a definition for “tracking”) and simply state that DNT:0 means a site may operate as normal.

“Upon receiving a request with DNT:0, a site may operate as normal and continue with its standard data collection, retention, and use practices.”

- Shane

From: Ian Fette (イアンフェッティ) [mailto:ifette@google.com<mailto:ifette@google.com>]
Sent: Wednesday, June 13, 2012 10:18 AM
To: public-tracking@w3.org<mailto:public-tracking@w3.org> Group WG
Subject: DNT:0

This is meant to satisfy ISSUE-148 and ACTION-208 (definition of DNT:0)

"Upon receiving a request with DNT:0, a site may reasonably interpret such a request as consent for personalization of content based on the user's identity or activity that the server may be aware of or become aware of, and the collection and retention of such activity, as well as consent to such mechanisms as may be required to collect said activity, including, but not limited to, the use of cookies. Additionally, restrictions placed on the collection and use of data by this recommendation shall not apply to any data received as part of a request with a DNT:0 signal."