Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fill out principle on safe but under user control #61

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 7 additions & 3 deletions principles/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@
<section id="abstract">
<p>
Privacy is essential to the sustainable success of the advertising ecosystem. This document takes up the
W3C TAG's <em>Privacy Principles</em> [[?Privacy-Principles]] and specialises them for advertising-related
W3C TAG's <em>Privacy Principles</em> [[Privacy-Principles]] and specialises them for advertising-related
situations.
</p>
</section>
Expand Down Expand Up @@ -83,6 +83,12 @@ <h3>Measurement</h3>

<section>
<h4>Measurement should be private for safe, widespread usage, but always be under user control</h4>

<p>Measurement and attribution are <a href="https://w3ctag.github.io/privacy-principles/#dfn-ancillary-use">ancillary uses</a> with functionality that may rely on broad usage. (Some forms of measurement are done with smaller, opt-in panels that typically provide identifiable data.) In order to be sufficiently private, measurement should not reveal <a href="https://w3ctag.github.io/privacy-principles/#dfn-data">personal data</a>, by, for example, ensuring measurement data is <a href="https://w3ctag.github.io/privacy-principles/#dfn-controlled-de-identified-data">controlled de-identified data</a>.</p>

<p>Measurement and attribution involve all kinds of viewing advertisements and a variety of other actions, in a wide range of different contexts. Relying on understanding of, expectations about, or consent over cross-context recognition as a result of ad measurement would be inappropriate.</p>

<p>Users should always be able to control their participation in measurement systems, even when that participation only produces de-identified data. User agents may, for example, provide a setting for the user's general preference about telemetry and aggregate measurement.</p>
</section>

<section>
Expand All @@ -98,8 +104,6 @@ <h4>Measurement should not significantly enable cross-context recognition</h4>
<p class="note">
Metrics to define significance are being evaluated by a separate task force.
</p>

<p>Because measurement and attribution involve all kinds of viewing advertisements and a variety of other actions, in a wide range of different contexts, relying on understanding of, expectations about and consent over cross-context recognition as a result of ad measurement would be inappropriate.</p>
</section>

<section>
Expand Down