- From: Martin Presler-Marshall <mpresler@us.ibm.com>
- Date: Thu, 31 May 2001 09:05:00 -0400
- To: "Enrico Silterra" <rxs@nortelnetworks.com>
- Cc: www-p3p-policy@w3.org
Rick asked: > I have questions about privacy issues in a voice portal, > for which users can record voice prompts via the phone, and > input some personal demographic category data via a web site. > 1) Categorizing voice info -- > How would people suggest that we deal with stuff like > prompts that are recorded by users? Does this fall under the > content category? It depends on exactly what you're asking the users for, but something like the contents of a voice prompt certainly sounds like 'content' data to me. > 2) Notification > What are your suggestions for conveying privacy information to > users over the phone - is text to speech on a human readable text file > enough, do we need a to text to speech the policy file also? You certainly don't want to text-to-speech the XML version of the P3P policy. I would say that in a voice-accessible system, users would expect a voice-based, "human-interpretable" privacy policy. If the system is both Web-accessible and voice-accessible, then the Web-side should have a P3P policy attached. > 3) Accessible/Updateable > Is is it acceptable that some information not be changeable or > accessible > over the phone, like for instance, income level? Does the fact that > information > is stored and used in several arenas (web ui, telephone ui) > mean the info must be accessible/updateable > in at least one arena or all of them? Deciding how much data to make accessible is the job of the service provider, and you certainly shouldn't allow access to personal information with authenticating the requester. Also, the P3P spec says that "The method of access is not specified" - it's only that access is required. Thus, access through only one mode (voice, Web, etc) is certainly acceptable. > Thanks. > Rick My pleasure. I hope this helps. -- Martin Martin Presler-Marshall - Program Manager, Privacy Technology E-mail: mpresler@us.ibm.com Phone: (919) 254-7819 (tie-line 444-7819) Fax: (919) 254-6430 (tie-line 444-6430)
Received on Thursday, 31 May 2001 09:05:18 UTC