CFO Issue 22

Objection to Option B

By not having an “other-party” property, the publisher doesn’t have an easy way to communicate the list of embedded third parties to the user agent, therefore reducing its possibility to provide privacy-friendly implementation of the publisher’s server. 

I agree with EFF and CDD that  “the ‘other parties’ field offers publishers a compliance framework for the consent requirements under EU law whilst reducing the opportunities for malware and the leakage of user data.” 

Moreover, even though GDPR and ePR are EU laws (that are nevertheless applied to all the countries that provide services to persons who are physically located in the EU), I would like to remind that the main motivations for the chapter’s extension was to “help web-sites to achieve privacy compliance in the EU “.

Best, 
Nataliia

---
Nataliia Bielova
Researcher at Inria
http://www-sop.inria.fr/members/Nataliia.Bielova/ <http://www-sop.inria.fr/members/Nataliia.Bielova/>
https://extensions.inrialpes.fr/ <https://extensions.inrialpes.fr/>