RE: June Change Proposal: "tracking" (Issue-5) and "collect" etc. (Issue-16)

I have questions about two of the definitions that Lee proposes.

1. "A party uses data if the party processes the data for any purpose, including for storage."
     [JC] I feel that storage is part of the collection process and should not be considered processing.

2. "A party shares data if the party enables another party to receive the data or its factual or semantic content."
     [JC] This statements seems a bit vague. If a third party has a presence on a first-party site is the first part sharing the data with the third party? I feel that sharing should be about willful transmission of data to a third party and not include passive reception which one could infer from the definition.

Thanks,
JC

-----Original Message-----
From: David Singer [mailto:singer@apple.com] 
Sent: Wednesday, June 26, 2013 12:39 PM
To: Nicholas Doty
Cc: Lee Tien; public-tracking@w3.org Mailing List
Subject: Re: June Change Proposal: "tracking" (Issue-5) and "collect" etc. (Issue-16)

Lee's proposal is fine by me and addresses my issues.

On Jun 26, 2013, at 0:32 , Nicholas Doty <npdoty@w3.org> wrote:

> Hi Lee,
> 
> I've updated this wiki page to include your proposal next to David's and the editors' draft text: 
> http://www.w3.org/wiki/Privacy/TPWG/Change_Proposal_Transience_Collection
> 
> I've also moved ISSUE-16 to the Compliance June product, and renamed it to match the four key terms that the group seems to be using.
> 
> I believe your editorial comment on "data" rather than "data records" can just be taken up with the editors rather than addressed separately.
> 
> Thanks,
> Nick
> 
> On Jun 25, 2013, at 7:05 PM, Lee Tien <tien@eff.org> wrote:
>> Issue-16:  What does it mean to collect data? (caching, logging, storage, retention, accumulation, profile etc.)
>> 
>> The language below is adapted from the EFF/Mozilla/Stanford proposal, but IMHO is also fairly close to that in the prior editor's draft.
>> 
>> "A party collects data if the data comes within its control.
>> 
>> A party retains data if the data remains within the party's control after the network interaction during which it was collected is complete.
>> 
>> A party uses data if the party processes the data for any purpose, including for storage.
>> 
>> A party shares data if the party enables another party to receive the data or its factual or semantic content."
>> 
>> Comment:  A party might retain data indicating that the user is pregnant.  Telling another party that the user is pregnant would constitute sharing of that data, even if the actual collected data were not itself shared.  
>> 
>> -- 
>> Lee Tien
>> Senior Staff Attorney
>> Electronic Frontier Foundation
>> 815 Eddy Street
>> San Francisco, CA 94109
>> (415) 436-9333 x 102 (tel)
>> (415) 436-9993 (fax)
>> tien@eff.org
> 

David Singer
Multimedia and Software Standards, Apple Inc.

Received on Wednesday, 26 June 2013 20:28:06 UTC