<DCCF036E573F0142BD90964789F720E31407D8E5@GQ1-MB01-02.y.corp.yahoo.com>

Hi Shane,

 

I just saw your message (for some unfathomable reason I never get your
messages to the list forwarded on to me by e-mail).

 

The problem of any data that contains a persistent UID is that it can always
be used to target an individual. You could de-identify each data point as
much as you like but further data points collected from the same individual
will be appended to it. If the data is so "de-identified" that it no longer
contains a derived profiling category (say), then what is the point of
retaining the persistent identifier. It would be better for transparency
just to delete it. Or just make the duration as short as possible to meet
the necessary requirements of any permitted use. 

 

All the evidence we have had indicates that this can be very short.

 

Mike

 

 

 

 

From: Shane Wiley <
<mailto:wileys@yahoo-inc.com?Subject=RE%3A%20ISSUE-198%3A%20Define%20new%20w
ord%20for%20yellow%20state%20due%20to%20the%20fact%20%20%20that%20%20the%20p
rocess%20of%20de-identification%20spans%20all%20three%20states%20(red%2Cyell
ow%20%20%20and%20%20green).&In-Reply-To=%253CDCCF036E573F0142BD90964789F720E
31407D8E5%40GQ1-MB01-02.y.corp.yahoo.com%253E&References=%253CDCCF036E573F01
42BD90964789F720E31407D8E5%40GQ1-MB01-02.y.corp.yahoo.com%253E>
wileys@yahoo-inc.com>
Date: Wed, 15 May 2013 21:23:07 +0000
To: "Mike O'Neill" <
<mailto:michael.oneill@baycloud.com?Subject=RE%3A%20ISSUE-198%3A%20Define%20
new%20word%20for%20yellow%20state%20due%20to%20the%20fact%20%20%20that%20%20
the%20process%20of%20de-identification%20spans%20all%20three%20states%20(red
%2Cyellow%20%20%20and%20%20green).&In-Reply-To=%253CDCCF036E573F0142BD909647
89F720E31407D8E5%40GQ1-MB01-02.y.corp.yahoo.com%253E&References=%253CDCCF036
E573F0142BD90964789F720E31407D8E5%40GQ1-MB01-02.y.corp.yahoo.com%253E>
michael.oneill@baycloud.com>, "'John Simpson'" <
<mailto:john@consumerwatchdog.org?Subject=RE%3A%20ISSUE-198%3A%20Define%20ne
w%20word%20for%20yellow%20state%20due%20to%20the%20fact%20%20%20that%20%20th
e%20process%20of%20de-identification%20spans%20all%20three%20states%20(red%2
Cyellow%20%20%20and%20%20green).&In-Reply-To=%253CDCCF036E573F0142BD90964789
F720E31407D8E5%40GQ1-MB01-02.y.corp.yahoo.com%253E&References=%253CDCCF036E5
73F0142BD90964789F720E31407D8E5%40GQ1-MB01-02.y.corp.yahoo.com%253E>
john@consumerwatchdog.org>
CC: "
<mailto:rob@blaeu.com?Subject=RE%3A%20ISSUE-198%3A%20Define%20new%20word%20f
or%20yellow%20state%20due%20to%20the%20fact%20%20%20that%20%20the%20process%
20of%20de-identification%20spans%20all%20three%20states%20(red%2Cyellow%20%2
0%20and%20%20green).&In-Reply-To=%253CDCCF036E573F0142BD90964789F720E31407D8
E5%40GQ1-MB01-02.y.corp.yahoo.com%253E&References=%253CDCCF036E573F0142BD909
64789F720E31407D8E5%40GQ1-MB01-02.y.corp.yahoo.com%253E> rob@blaeu.com" <
<mailto:rob@blaeu.com?Subject=RE%3A%20ISSUE-198%3A%20Define%20new%20word%20f
or%20yellow%20state%20due%20to%20the%20fact%20%20%20that%20%20the%20process%
20of%20de-identification%20spans%20all%20three%20states%20(red%2Cyellow%20%2
0%20and%20%20green).&In-Reply-To=%253CDCCF036E573F0142BD90964789F720E31407D8
E5%40GQ1-MB01-02.y.corp.yahoo.com%253E&References=%253CDCCF036E573F0142BD909
64789F720E31407D8E5%40GQ1-MB01-02.y.corp.yahoo.com%253E> rob@blaeu.com>,
"'Tracking Protection Working Group'" <
<mailto:public-tracking@w3.org?Subject=RE%3A%20ISSUE-198%3A%20Define%20new%2
0word%20for%20yellow%20state%20due%20to%20the%20fact%20%20%20that%20%20the%2
0process%20of%20de-identification%20spans%20all%20three%20states%20(red%2Cye
llow%20%20%20and%20%20green).&In-Reply-To=%253CDCCF036E573F0142BD90964789F72
0E31407D8E5%40GQ1-MB01-02.y.corp.yahoo.com%253E&References=%253CDCCF036E573F
0142BD90964789F720E31407D8E5%40GQ1-MB01-02.y.corp.yahoo.com%253E>
public-tracking@w3.org>
Message-ID:
<DCCF036E573F0142BD90964789F720E31407D8E5@GQ1-MB01-02.y.corp.yahoo.com> 

Mike,

 

The tri-state de-identification process attempts to solve for a middle
ground such that activity can be collected against a persistent identifier
but that identifier is not able to connect to devices/users in the
real-world so profiling/targeting to an actual data subject does not occur.
There is some risk in this model so to further remove that risk a third
state is defined that removes the persistence in identifiers (or removes the
identifiers completely) so there is no/less risk of re-identification.

 

- Shane