Re: tracking-ISSUE-258: automatic expiration of a tracking preference [TPE Last Call]

On Jul 12, 2014, at 6:57 PM, Tracking Protection Working Group Issue Tracker wrote:

> tracking-ISSUE-258: automatic expiration of a tracking preference [TPE Last Call]
> 
> http://www.w3.org/2011/tracking-protection/track/issues/258
> 
> Raised by: Nick Doty
> On product: TPE Last Call
> 
> http://lists.w3.org/Archives/Public/public-tracking-comments/2014Jun/att-0000/20140606_WP29_TS_standardisation_letter_to_W3C.pdf
> 
> Article 29 Working Party requests functionality for automatic expiration of preferences/exceptions.
> 
> 
> With regard to some parallel initiatives, such as notice-and-choice programs, the Working Party acknowledges that they can function as supporting measures to remind users that they can withdraw their tracking preference at any time. But the Draft TPE Specification currently lacks a building block that ensures the automatic expiration of a tracking preference. Under European data protection law, personal data must be adequate and accurate, and stored no longer than necessary. In order to comply with these requirements, the introduction of an automatic expiration feature is necessary to allow users to exercise effective control. Therefore, the Working Party recommends adding this requirement to the building blocks. 

WONTFIX.

The Working Party appears to be assuming that TPE will work in the same
way as current opt-out technology, wherein the option is actually set
and managed by the server.

For TPE, the storage of user preference is (at all times) under the control
of the user.  If the user agent configuration has an expiration associated
with it, that expiration would not be visible to the TPE protocol.  Since
we do not specify how a user agent is configured, we cannot require that
such configuration has an expiration.  Likewise, a server has no ability to
require a minimum time before expiration.


Cheers,

Roy T. Fielding                     <http://roy.gbiv.com/>
Senior Principal Scientist, Adobe   <http://www.adobe.com/>

Received on Monday, 22 September 2014 19:24:57 UTC