RE: TPAC session on Privacy

From the Privacy Co-op perspective, we focus on two pieces of paper: 1) a member's agreement that permits an authorized agency to represent a person's information rights (opt-in/opt-out), 2) an affiliate's agreement where a business agrees to honor those elections in a license based on their own legal privacy policy.

Which of those perspectives (data subject or business monetizing data) would this audience be most interested in understanding better, and we would be happy to present. For example, we could talk about the proposed CNS platform in W3C and how it solves problems for either of those parties. Please be encouraged to help us with an approval for this project here:

https://www.w3.org/community/blog/2021/09/29/proposed-group-consent-name-system-community-group/


Cheers!

=Jay

From: James Rosewell <james@51degrees.com>
Sent: Wednesday, October 6, 2021 1:31 AM
To: Lionel Basdevant <l.basdevant@criteo.com>; public-web-adv@w3.org
Subject: RE: TPAC session on Privacy

Hi Lionel,

Thank you for organising. I would appreciate the opportunity to discuss four privacy subjects.


  1.  Understand how a drive to first party data as a result of web changes justified by privacy are creating real privacy harms for people. Do we try and fix these? Or pause to rethink?
  2.  The sole use of registerable domain names to define privacy boundaries on the web is the root cause of many unintended consequences. Can we agree an upgraded architecture is needed and request TAG prioritise this work?
  3.  People should have choice. If they want to be identified via a pseudo anonymous identifier which they can reset rather than a full login experience that ties their offline identity to their online one, shouldn't we provide that option?
  4.  Transparency and audit. The approach at the moment from browser vendors is to assume other actors are bad and this is characterised by changes such as "feature X adds entropy which could be abused by bad actors, therefore we must remove or alter feature X". Other than the work of SWAN.community there has been no attempt to identify solutions that provide audit and transparency concerning data usage. What is the role of transparency and audit?

I arranged a number of sessions last year and was advised via the AB minutes this was abusive. I had no idea that W3C would accept them all and in anycase they were well attended. These sessions were generally themed around privacy.

Privacy is also a subject that has TAG priority and a taskforce has been established to address. As such I won't propose individual sessions on these subjects, but do think that a session longer than the typical one hour should be made available if we're serious about doing these subjects justice.

I also feel very strongly a chair that is not affiliated with a web browser is essential along with some rules around equal debating time. i.e. subject Z; 5 minutes X explains why the status quo should be maintained. 5 minutes Y explains why change is needed. Group debate with a queue. Minutes record the key points and any actions or observations to pass to other groups. It's important these sessions are not debates that don't deliver any outcome and something for the W3C membership to consider. Therefore, a pre-identified scribe or recordings of the sessions to create transcripts and aiding the chair / participants in summarising seems important.

Regards,

James

From: Lionel Basdevant <l.basdevant@criteo.com<mailto:l.basdevant@criteo.com>>
Sent: 05 October 2021 17:10
To: public-web-adv@w3.org<mailto:public-web-adv@w3.org>
Subject: TPAC session on Privacy

Hi,

I suggest that we have a TPAC breakout session on Privacy for web.

Many work at the W3C, including in the IWABG, is based on Privacy principles, and that topic is only going to get more and more important in the future. TPAC is a perfect place to exchange viewpoints between experts and a wider audience.

Deadline for registering a TPAC session is October 8.

Please comment on https://github.com/w3c/web-advertising/issues/128 if you'd like to participate as speaker, or reach out to me for any question.

Best Regards,
Lionel Basdevant
[criteo_logo_96dpi_1px_border]<http://www.criteo.com/>

l.basdevant@criteo.com<mailto:l.basdevant@criteo.com>
www.criteo.com<http://www.criteo.com/>
32 rue Blanche
75009 Paris - France

The information contained in this email is intended solely for the named recipients to whom it is addressed and may contain confidential and/or privileged material.
If you are not an intended recipient you may not review, copy, or distribute this message.
If you have received this message in error, please notify us immediately by replying to this email and then delete it from your system.

This email and any attachments are confidential and may also be privileged. If you are not the named recipient, please notify the sender immediately and do not disclose, use, store or copy the information contained herein. This is an email from 51Degrees.mobi Limited, 9 Greyfriars Road, Reading. RG1 1NU. T: +44 118 328 7152; E: info@51degrees.com<mailto:info@51degrees.com>; 51Degrees.mobi Limited t/as 51Degrees.