June Change Proposal, third party compliance

Problem

"If a third party receives a DNT: 1 signal, then:

	• the third party must not collect, retain, share, or use information related to the network interaction as part of which it received the DNT: 1 signal outside of the permitted uses as defined within this standard and any explicitly-granted exceptions provided in accordance with the requirements of this standard;
	• the third party must not use information about previous network interactions in which it was a third party, outside of the permitted uses as defined within this standard and any explicitly-granted exceptions, provided in accordance with the requirements of this standard."


1) We imply but nowhere say, that what third parties must do under DNT:1 is to reduce 'tracking', as defined.
2) We don't allow out-of-band-consent.
3) Exceptions don't need to be mentioned, as they cause DNT:0 to be sent, not DNT:1.

Proposal

Insert 'tracking' twice and remove exceptions:

If a third party receives a DNT: 1 signal, then, unless it has consent from the user:

	• the third party must not collect, retain, share, or use tracking information related to the network interaction as part of which it received the DNT: 1 signal outside of the permitted uses as defined within this standard;
	• the third party must not use tracking information about previous network interactions in which it was a third party, outside of the permitted uses as defined within this standard.


David Singer
Multimedia and Software Standards, Apple Inc.

Received on Thursday, 20 June 2013 22:25:36 UTC