Differences between P3P policy and full privacy policy

I would like to ask for the group's perspective on the
topic of a P3P policy representing the full formal
privacy notice of a web site.

At the November 2000 P3P Interop Event in Palo Alto
CA, presenters noted that a P3P privacy policy viewed
through a P3P-enabled user agent is not intended to be
a legal contract.

Unless a site re-writes their formal privacy notice to
use the exact P3P vocabulary and model, it is possible
that the P3P policy and formal privacy notice are
different. It is possible for the P3P policy to be a
summary, while the full privacy notice has more
information. How significant is it that such
differences exist? Would a web site's legal counsel
need additional background?

If the P3P agent view of a policy is not intended to
exactly represent the full privacy policy, how are
users educated to the point that P3P should only be a
general guide and that they still need to read the
full policy?  

As a reference, please note that the P3P FAQ (item 8)
includes a list of future improvement considerations,
one of which is a mechanism for users to explicitly
agree to a P3P policy and to establish
non-repudiation.

Thank you for your help.

Sotos Barkas

__________________________________________________
Do You Yahoo!?
Yahoo! Shopping - Thousands of Stores. Millions of Products.
http://shopping.yahoo.com/

Received on Thursday, 7 December 2000 14:11:08 UTC