RE: DNT:0

I would rather we not narrowly define the business practices allowed and therefore feel we need to move back to the originally submitted language but remove the terms Ninja has issue with (and add "retention" to the second sentence).

"Upon receiving a request with DNT:0, a site may assume the user has provided them with explicit consent to continue with data collection, retention, and use practices including but not limited to the placement and reading of cookies and personalization services. Additionally, restrictions placed on the collection, retention, and use of data by this recommendation shall not apply to any data received as part of a request with a DNT:0 signal.”

-----Original Message-----
From: Tom Lowenthal [mailto:tom@mozilla.com] 
Sent: Wednesday, June 13, 2012 12:09 PM
Cc: Shane Wiley; ifette@google.com; public-tracking@w3.org Group WG
Subject: Re: DNT:0

I like the content, how about:

When a user sends the DNT:0 signal they are expressing a preference for
a personalised experience. This signal indicates explicit consent for
data collection, retention, processing, disclosure, and use by the
recipient of this signal. This recommendation places no restrictions on
data from requests received with DNT:0.

On 06/13/2012 08:31 AM, Ninja Marnau wrote:
> I have some issues with the wording of "normal" and "standard".
> Preferredly, I would skip this part or rephrase it, since it contains at
> least an implicit evaluation.
> The first sentence includes collection, retention and use. The second
> only collection and use. Why is that?
> 
> Am 13.06.2012 17:05, schrieb Shane Wiley:
>> Okay – so it would eventually be changed – makes sense.
>>
>> - Shane
>>
>> *From:*Ian Fette (イアンフェッティ) [mailto:ifette@google.com]
>> *Sent:* Wednesday, June 13, 2012 11:03 AM
>> *To:* Shane Wiley
>> *Cc:* public-tracking@w3.org Group WG
>> *Subject:* Re: DNT:0
>>
>> Shane,
>>
>> The W3C terminology is "recommendation" -- the W3C will never call this
>> a "standard", the final state of a document in W3C is "recommendation",
>> that said i don't really care that much.
>>
>> On Wed, Jun 13, 2012 at 8:00 AM, Shane Wiley <wileys@yahoo-inc.com
>> <mailto:wileys@yahoo-inc.com>> wrote:
>>
>> Ian,
>>
>> I would replace “recommendation” with “standard” assuming this document
>> becomes one.
>>
>> “Upon receiving a request with DNT:0, a site may assume the user has
>> provided them with explicit consent to operate as normal and continue
>> with its standard data collection, retention, and use practices
>> including but not limited to the placement and reading of cookies and
>> personalization services. Additionally, restrictions placed on the
>> collection and use of data by this standard shall not apply to any data
>> received as part of a request with a DNT:0 signal.”
>>
>> - Shane
>>
>> *From:*Ian Fette (イアンフェッティ) [mailto:ifette@google.com
>> <mailto:ifette@google.com>]
>> *Sent:* Wednesday, June 13, 2012 10:56 AM
>>
>>
>> *To:* Shane Wiley
>> *Cc:* public-tracking@w3.org <mailto:public-tracking@w3.org> Group WG
>> *Subject:* Re: DNT:0
>>
>> Shane, that seems fine. Do you have any objection to the part of the
>> text stating "Additionally, restrictions placed on the collection and
>> use of data by this recommendation shall not apply to any data received
>> as part of a request with a DNT:0 signal."
>>
>> On Wed, Jun 13, 2012 at 7:52 AM, Shane Wiley <wileys@yahoo-inc.com
>> <mailto:wileys@yahoo-inc.com>> wrote:
>>
>> Ian,
>>
>> That’s fair – then let’s state it in that manner and add a “including
>> but not limited to” to provide flexibility but address the two key
>> business practices head-on.
>>
>> “Upon receiving a request with DNT:0, a site may assume the user has
>> provided them with explicit consent to operate as normal and continue
>> with its standard data collection, retention, and use practices
>> including but not limited to the placement and reading of cookies and
>> personalization services.”
>>
>> - Shane
>>
>> *From:*Ian Fette (イアンフェッティ) [mailto:ifette@google.com
>> <mailto:ifette@google.com>]
>> *Sent:* Wednesday, June 13, 2012 10:46 AM
>> *To:* Shane Wiley
>> *Cc:* public-tracking@w3.org <mailto:public-tracking@w3.org> Group WG
>> *Subject:* Re: DNT:0
>>
>> I guess the problem i have is that "normal" and "standard practices" may
>> not be clear, e.g. what does that mean in Europe where regulators are
>> trying to say "normal" is "nothing unless the user consents?" -- I was
>> trying to get at DNT:0 == consent.
>>
>> On Wed, Jun 13, 2012 at 7:40 AM, Shane Wiley <wileys@yahoo-inc.com
>> <mailto:wileys@yahoo-inc.com>> wrote:
>>
>> Suggest we remove discussion of specific business practices since those
>> are still under debate (akin to a definition for “tracking”) and simply
>> state that DNT:0 means a site may operate as normal.
>>
>> “Upon receiving a request with DNT:0, a site may operate as normal and
>> continue with its standard data collection, retention, and use
>> practices.”
>>
>> - Shane
>>
>> *From:*Ian Fette (イアンフェッティ) [mailto:ifette@google.com
>> <mailto:ifette@google.com>]
>> *Sent:* Wednesday, June 13, 2012 10:18 AM
>> *To:* public-tracking@w3.org <mailto:public-tracking@w3.org> Group WG
>> *Subject:* DNT:0
>>
>> This is meant to satisfy ISSUE-148 and ACTION-208 (definition of DNT:0)
>>
>> "Upon receiving a request with DNT:0, a site may reasonably interpret
>> such a request as consent for personalization of content based on the
>> user's identity or activity that the server may be aware of or become
>> aware of, and the collection and retention of such activity, as well as
>> consent to such mechanisms as may be required to collect said activity,
>> including, but not limited to, the use of cookies. Additionally,
>> restrictions placed on the collection and use of data by this
>> recommendation shall not apply to any data received as part of a request
>> with a DNT:0 signal."
>>
>

Received on Wednesday, 13 June 2012 16:28:56 UTC