15:48:48 RRSAgent has joined #dnt 15:48:48 logging to http://www.w3.org/2013/04/03-dnt-irc 15:48:50 RRSAgent, make logs world 15:48:50 Zakim has joined #dnt 15:48:52 Zakim, this will be 15:48:52 I don't understand 'this will be', trackbot 15:48:53 Meeting: Tracking Protection Working Group Teleconference 15:48:53 Date: 03 April 2013 15:49:03 Zakim, this will be 87225 15:49:03 ok, npdoty; I see T&S_Track(dnt)12:00PM scheduled to start in 11 minutes 15:50:52 WaltM_Comcast has joined #dnt 15:51:36 T&S_Track(dnt)12:00PM has now started 15:51:43 + +1.781.482.aaaa 15:52:05 zakim, aaaa is samsilberman 15:52:05 +samsilberman; got it 15:52:19 kulick has joined #dnt 15:52:36 efelten has joined #dnt 15:54:30 +npdoty 15:54:31 eberkower has joined #dnt 15:54:48 fielding has joined #dnt 15:55:35 + +1.408.836.aabb - is perhaps kulick? 15:55:46 .aabb is me 15:56:10 + +1.646.654.aacc 15:56:13 + +1.215.286.aadd 15:56:24 Zakim, aacc is eberkower 15:56:25 +eberkower; got it 15:56:43 215-286 is Walt M from Comcats 15:57:00 Chris_IAB has joined #dnt 15:57:22 +RichardWeaver 15:57:35 Richard_comScore has joined #dnt 15:57:50 sidstamm has joined #dnt 15:57:58 +efelten 15:57:59 aleecia has joined #dnt 15:58:29 Zakim, aadd is WaltM_Comcast 15:58:29 +WaltM_Comcast; got it 15:59:05 +??P36 15:59:26 just joined the call via a private number 15:59:31 +Rigo 15:59:38 +MECALLAHAN 15:59:48 zakim, ??P36 is Chris_IAB 15:59:48 +Chris_IAB; got it 15:59:58 mecallahan has joined #dnt 16:00:01 +[Mozilla] 16:00:02 phildpearce has joined #dnt 16:00:06 Zakim, Mozilla has sidstamm 16:00:06 +sidstamm; got it 16:00:07 zakim, mute me 16:00:07 Rigo should now be muted 16:00:14 +peterswire 16:00:16 + +1.937.215.aaee 16:00:18 +[IPcaller] 16:00:26 JC has joined #DNT 16:00:26 jeffwilson has joined #dnt 16:00:27 +Fielding 16:00:28 +ChrisPedigoOPA 16:00:31 prestia has joined #dnt 16:00:31 zakim, [IPCaller] is me 16:00:31 +moneill2; got it 16:00:34 hefferjr has joined #dnt 16:00:34 zakim, who is making noise? 16:00:36 Zakim, aaee is Yianni 16:00:36 +Yianni; got it 16:00:37 +JeffWilson 16:00:38 vinay has joined #dnt 16:00:45 rigo, listening for 10 seconds I heard sound from the following: Fielding (5%), peterswire (58%) 16:00:48 +Joanne 16:00:56 adrianba has joined #dnt 16:00:57 +[Microsoft] 16:01:05 +hefferjr 16:01:11 Joanne has joined #DNT 16:01:13 David_MacMillan has joined #dnt 16:01:13 +vinay 16:01:15 + +1.202.370.aaff 16:01:18 + +1.202.331.aagg 16:01:20 + +1.202.347.aahh 16:01:23 Suzanne has joined #dnt 16:01:24 +hober 16:01:24 hi all, please accept my regrets as I'll have to leave halfway through the call due to a conflict. 16:01:26 updated agenda http://lists.w3.org/Archives/Public/public-tracking/2013Apr/0056.html 16:01:34 peterswire has joined #dnt 16:01:35 +Aleecia 16:01:41 johnsimpson has joined #dnt 16:01:42 Zakim, aahh is prestia 16:01:42 +prestia; got it 16:01:43 zakim, mute me 16:01:44 Aleecia should now be muted 16:01:49 +[Microsoft.a] 16:01:51 zakim, [apple] has dsinger 16:01:51 sorry, dsinger, I do not recognize a party named '[apple]' 16:01:53 zakim, [Microsoft.a] is me 16:01:53 +adrianba; got it 16:01:54 any scribe volunteer? 16:02:19 +chapell 16:02:26 zakim, pick a victim 16:02:26 Not knowing who is chairing or who scribed recently, I propose vinay 16:02:32 Chapell has joined #DNT 16:02:35 +johnsimpson 16:02:39 ChrisPedigoOPA has joined #dnt 16:02:39 susanisrael has joined #dnt 16:02:39 i can do the second half (I'm eating lunch right now) 16:02:52 +Susan_Israel 16:02:55 vincent has joined #dnt 16:02:56 +Craig_Spiezle 16:03:02 Zakim, please choose a scribe 16:03:02 Not knowing who is chairing or who scribed recently, I propose adrianba 16:03:12 Zakim, kulick is aabb 16:03:14 +aabb; got it 16:03:22 ack ri 16:03:23 +Chris_Pedigo 16:03:23 Zakim, aabb is actually kulick 16:03:24 I don't understand 'aabb is actually kulick', npdoty 16:03:25 CraigSpiezle has joined #dnt 16:03:31 Zakim, aabb is really kulick 16:03:31 +kulick; got it 16:03:38 zakim, pick a victim 16:03:38 Not knowing who is chairing or who scribed recently, I propose Aleecia (muted) 16:03:40 +vincent 16:03:47 kj has joined #dnt 16:03:50 nope, this is my commute time, sorry 16:03:52 +hwest 16:04:08 zakim, who is here? 16:04:08 On the phone I see Chris_Pedigo, vincent, hwest, samsilberman, npdoty, kulick, eberkower, WaltM_Comcast, RichardWeaver, efelten, Chris_IAB, Rigo (muted), MECALLAHAN, [Mozilla], 16:04:12 ... peterswire, Yianni, moneill2, Fielding, ChrisPedigoOPA, JeffWilson, Joanne, [Microsoft], hefferjr, +1.202.370.aaff, vinay, +1.202.331.aagg, prestia, hober, Aleecia (muted), 16:04:12 ... adrianba, chapell, johnsimpson, Susan_Israel, Craig_Spiezle 16:04:12 [Mozilla] has sidstamm 16:04:16 On IRC I see kj, CraigSpiezle, vincent, susanisrael, ChrisPedigoOPA, Chapell, johnsimpson, peterswire, Suzanne, David_MacMillan, Joanne, adrianba, vinay, hefferjr, JC, phildpearce, 16:04:16 ... mecallahan, aleecia, sidstamm, Richard_comScore, Chris_IAB 16:04:16 +BerinSzoka 16:04:17 I can take th efirst 30 minutes 16:04:19 (which is why I volunteered so quickly in Berlin :-) 16:04:24 hwest has joined #dnt 16:04:30 scribenick: Joanne 16:04:38 with vinay to take over (just let us know) 16:04:46 prestia has joined #dnt 16:04:48 thank you Joanne for filling in in the gap! 16:04:50 BerinSzoka has joined #DNT 16:04:54 Wileys has joined #dnt 16:04:58 +Amy_Colando 16:05:25 Peterswire: things aboutupdated text. Alan submitted test on user eductation topic. on agenda for next week. please review and respond to email 16:05:29 robsherman has joined #dnt 16:05:34 + +1.650.365.aaii - is perhaps david_macmillan? 16:05:38 Agenda: http://www.w3.org/mid/CD81C69A.74DB0%25peter@peterswire.net 16:06:05 Brooks has joined #dnt 16:06:16 jmayer has joined #dnt 16:06:22 shane, took me 3 tried 16:06:29 +Dan_Auerbach 16:06:40 ...lots of activity on list noted on de-eidentification. critical mass of people from diff perspecitves. propsoe conference or other forum to work thorugh topic. FPF willing to host. may be useful to get short submissions for those on list 16:06:48 Can't dial in. 16:07:09 Yianni has joined #DNT 16:07:14 ...get submissions to help spolicy makers, etc to learn from group's work. 16:07:20 ditto on the no dialin 16:07:21 ...lets work through agenda 16:07:26 BillScannell has joined #dnt 16:07:40 ..Chris to explain changes to service provider and why 16:07:48 Aleecia, 6 tries and still no luck... :-( 16:07:58 Same here. 16:08:07 I'm at 5 redials. 16:08:19 Unclear: did Peter propose "let's use the wisdom in this group to hold a discussion others can benefit from" or did Peter propose "let's all travel some place to solve this issue"? I think it was the former and yay. If not, please someone let me know 16:08:24 Up to 9... 16:08:34 ChrisP: agreement servicer provider should act on behalf of client. question arouns tems we use (e.g. service provider, data processor) 16:08:36 Ooooof. Zakim is harsh. 16:08:42 tedleung has joined #dnt 16:09:03 Ringing indefinitely. 16:09:06 i can't join the call either. It's just a busy signal 16:09:14 ...issue with term data processor - carries EU legal implications. wants to pick term. 16:09:16 I was saying let's use the wisdom of the group to inform others about de=identification 16:09:36 I'd get Ralph's voice, then not get the code accepted. But it sounds like I had different issues. 16:09:53 ...difference here is remved word "only" becasue it implies service provider has one client which is not the intenet 16:09:54 thanks, peterswire. Cool idea. 16:09:57 Now at over 10 redials. I give up. 16:09:57 jchester2 has joined #dnt 16:09:57 cOlsen has joined #dnt 16:10:08 I just got "number no longer in service" 16:10:17 I dialed only once but had to type the code a couple of times and then it worked for me 16:10:32 ...discussion to silo the data and Roy pointed out siloing doesn't happen right away. Put data is only accessed used by that one party 16:10:33 I cant get through the voice line. 16:10:38 Brooks: that's curious, you burned zakim 16:10:40 "only" was modifying "acts" not the primary site. It means that they can't act in some other way as well with the data (which may be already covered) 16:10:49 Jeff, many of us are having the same issue... 16:10:54 Here's the question I would have asked the authors of the "append" text: What's the meaning of the language about identifiability? Could a third party hand a browsing history to a first party? 16:11:13 ...no independent right to data. added text to end around no other right to use of that data 16:11:36 Thanks. I though my phone had been data appended! 16:11:39 +Brooks 16:11:45 - +1.202.370.aaff 16:11:56 Peterswire: shifting towards outsourced service provider versus just service provider 16:11:57 q+ 16:11:59 +[FTC] 16:12:02 +Jonathan_Mayer 16:12:06 q? 16:12:11 ack ri 16:12:16 q? 16:12:17 ChrisP: on same page as what a service provider can do but hpow to describe it 16:12:18 +bills 16:12:18 Jonathan - looks like you got through? 16:12:27 zakim, unmute me 16:12:27 Rigo should no longer be muted 16:12:31 I'm in. 16:12:40 q+ 16:12:44 Peterswire: this looks to be easy. Rigo question? 16:13:06 still getting the busy signal 16:13:10 Rigo: likes Chris' text and not concerned with eEU implications and encourages us to conclude on this 16:13:13 + +1.202.370.aajj 16:13:16 zakim, aajj is robsherman 16:13:17 +robsherman; got it 16:13:29 peterswire: consensus to move to pendning review stable 16:13:29 q? 16:13:35 ack johnsimpson 16:13:40 +WileyS 16:13:45 JohnS: doesn't understand why siloing was taken out 16:13:52 q? 16:14:04 For those who recently joined... what's the language under discussion, and what's the proposal? 16:14:17 + +1.202.494.aakk 16:14:20 service provider text, http://lists.w3.org/Archives/Public/public-tracking/2013Mar/0057.html 16:14:22 jmayer, we are discussing chris pedigo's service provider language 16:14:25 I wonder about siloing if one has no own right for processing anyway 16:14:33 q+ 16:14:37 we are on service provider, with the text as re-circulated late this morning in the agenda/updated email 16:14:46 q? 16:14:55 q+ 16:15:04 ChrisP; based upon Roy comments on list. when a service privder is collectiong data on behalf of an entity - data is collected in one big stream then separated by client. Concern is that want data mingled across multiple clients. 16:15:05 rigo, i think the idea was to silo while processing the data 16:15:19 is johnsimpson's question about "separated" vs. "siloed"? normative text still has "separated" 16:15:28 ...can't use one client data along with other client data. 16:16:02 q? 16:16:02 q? 16:16:09 JohnMayer: has same consern as John S. Meeting at Santa Clara - group at logger heads. no agreemnet on whether siloing would be required 16:16:09 ack jmayer 16:16:13 "separated by both technical means and organizational process" -- doesn't that match what we agreed on in Santa Clara? 16:16:16 I agree with technical siloing but not prescriptive requirements (for example, logical vs. physical separation) 16:16:23 does it matter what we discussed in the past if we are agreeing now? 16:16:38 +1 to fielding 16:17:17 Fiedlding: that change didn't come from me but outside this group no one would understand it. Siloing would be explained in the text. Sepearted by customer is silo'd. Siloing not common technical term 16:17:28 q? 16:17:29 qa+ 16:17:33 q+ 16:17:38 q- 16:17:40 ...no issue with stating access as directed by the client 16:17:45 s/Fiedlding/Fielding/ 16:18:04 Agenda: http://lists.w3.org/Archives/Public/public-tracking/2013Apr/0056.html 16:18:15 we discussed it at first F2F and DC 16:18:18 -Amy_Colando 16:18:44 q? 16:18:59 ack jmayer 16:19:03 q+ 16:19:11 Mayer: mozilla proposal - do something like analytics companies do now.. fundamental disagreement on the same orgin policy on service providers. appreciate chair wanting to move forward but we disagree 16:19:18 SOP has never been mentioned with regard to service providers, so I have no idea what jmayer is talking about. 16:19:32 jmayer, is your concern just that data be silo'd immediately, or that it be silo'd at all? 16:19:52 Peterswire: as data comes in there is an additional requirement. Trying to get clarity from Jonthan. 16:20:18 fielding, we discussed the same-origin policy at Santa Clara in describing siloing of data by service providers, with the conclusion that there must be technical means and should use same-origin policy siloing 16:20:22 Technical, administrative, and operational controls 16:20:27 Mayer: two sep issues. 1. are there access restrictions procedural silos 2. technically - is it silo'd 16:20:40 +1 16:20:44 I think that's the current text "technical means and organizational process" 16:20:53 Would need to review the text. 16:20:55 +1 16:20:57 +1 16:21:00 +1 16:21:07 Peterswire: are there folks in the group that support Jonthan on having add'l text on this matter? do a +1 if agree 16:21:13 q? 16:21:19 (I'm +1 for that requirement, but think it's covered in the existing text) 16:21:21 right, technical means and operatinal controls, but per party not per SOP 16:21:30 q+ 16:21:53 have specific procedural suggestion 16:22:07 ...there is disagreement from several folks and stop discussion on this now and not put in final language for now 16:22:20 ...moving to append. Written by John S 16:22:26 q- 16:22:34 Alan will explain 16:22:35 fielding, I think the example was using clienta.example.com and clientb.example.com in order to use the same-origin policy on cookies to silo data by client 16:22:47 Topic: Append 16:23:07 that being: contrast the new text with the existing two texts. If there is no support for one or more texts, great, drop them as overtaken by new proposals or new understanding. 16:23:26 Alan: when user enacts DNT something needs to happen with online data. gap with req around offline data. if not addressed - incentive for market pllace to build around this 16:23:39 But just starting from scratch when there were two fully formed proposals seems inefficient. 16:23:47 q- 16:23:49 I'm once again very frustrated with the apparent need to continuously reiterated objections. 16:23:57 To clarify, "same origin policy" is per origin server domain, whereas per "party" means per first party contract (or third party contract if they happen to be a third party). 16:24:00 s/reiterated/reiterate/ 16:24:02 ...when data is gathered outside first party context and DNT is on then that data can't be used 16:24:09 (hope I got that right) 16:24:20 q+ 16:24:21 Peterswire: any others want to add comments 16:24:26 Q+ 16:24:35 q- 16:24:47 My point is not that the same-origin policy will always be required. But it's the sort of collection-time siloing that would be required. 16:24:50 q+ 16:24:50 q- 16:24:55 q+ 16:25:07 ...question - I am first party with employees but dont'have an address but a phone number. Can I look up the address 16:25:30 Alan: first party can coll offline data for legitmate purposes 16:25:43 +q 16:25:48 +Ted_Leung 16:26:07 q+ 16:26:10 q- 16:26:20 (John is correct) 16:26:22 Disagree with attempts to move the DNT signal to the offline world. This is an online context - let's keep it there. Consumers have other options to block the offline world. 16:26:23 ...challenge to work around the question Peter raised. 16:26:32 but on peter's example, you wouldn't be able to match a user's phone number that they gave you to the address in the white pages? 16:26:37 +q 16:27:20 ack ChrisPedigoOPA 16:27:24 Peterswire: companies have some info on a cust and would get info from other sources. If 1st party combined offline with DNT:1 wouldn't be allowed (?) 16:27:27 Chris' examples: http://www.w3.org/2011/tracking-protection/track/actions/229 16:28:04 is the second paragraph (a first party must not share) already covered by the first party requirements? 16:28:24 q? 16:28:29 (missed what ChrisP said) 16:28:47 ChrisPedigoOPA: would prohibit append even when data was collected with consent 16:28:56 ... even when the data is public 16:29:11 ChrisP: in first party context - user has relationship with 1st party. lang is overly restrictive. restriction should lie with who is coll 16:29:11 ... third parties are already prevented from collecting information and first parties from sharing 16:29:28 peterswire: any view on third paragraph 16:30:10 JohnS: not seieing how its diff 16:30:19 isn't part of the idea of dnt that it applies to third parties because users do not have an easy way to opt out from their activities, while they can easily opt out from a first party's activities? also chappell, if your main concern is the use of appended information for targeting, rather than simply the appending, are you suggesting that the standard is mainly about ad targeting and not other activities? 16:30:24 q? 16:30:39 ChrisP: it is diff. you are talking about how you can use first party data. discussion on what you can do in a third party context 16:31:05 ...whether you can add data to what you coll as 1st party is diff 16:31:22 q? 16:31:24 q+ 16:31:31 ack rigo 16:31:34 peterswire: there are diff between what 1st party can do vs what third parties can draw upon 16:31:37 my understanding of append is as peter just described it. 16:31:38 q+ 16:31:41 zakim, unmute me 16:31:41 Rigo was not muted, rigo 16:33:25 Zakim, aakk is jchester 16:33:25 +jchester; got it 16:33:29 Rigo: 2 points. entire discussion shows what came from global considerations discussion and that 1st parties only do permitted uses is needed. overstating data ppend thing. if data is in hands of first party - they have database and can look up data. if you use an outside service like whitepages 16:34:16 I understand that john and alan are proposing *new* requirements beyond the example of the first party sharing IDs when reaching out to append data to their users' records 16:34:18 ..if share a unique id - that shouldn't be allowed. rule around not sharing using a unique data. 16:34:39 Peterswire: is data coming out of 1st party with a unique id 16:34:42 while I think ChrisPedigoOPA's text already accepts prohibiting first parties' sharing user IDs during the data append process 16:35:07 +Rigo 16:35:08 Rigo: yes. if 1st party uses id to draw data from 4rd party then 1st party shared the data 16:35:11 rigo, except in the white pages example, right? or some cryptographic matching algorithms? 16:35:20 ...problem is data geoes to the 3rd party 16:35:39 q? 16:35:49 Rigo, if you use offline data added to first party, how is that going cross site? 16:36:21 Peterswire: concern there is leakage from 1st party to a third party. 16:36:24 ack robsherman 16:36:44 Joanne - I'm done now. Do you want me to take over after this topic is done? 16:36:54 please Vinay 16:37:09 scribenick Vinay 16:37:16 scribenick: vinay 16:37:43 robsherman: distinguishing between using information a first party already has to customize content in a third-party context 16:38:00 +[Microsoft.a] 16:38:01 robsherman - think you can distinguish between using information a first party already has on a 3rd party site versus collecting data in a third-party context 16:38:16 amyc has joined #dnt 16:38:17 +[IPcaller] 16:38:23 zakim, ipcaller is Walter 16:38:23 +Walter; got it 16:38:30 ... append is not about what first parties are getting, or third parties are getting. Instead, its when a party is trying to get additional information (and as part of that is passing identifiable information to another party) 16:38:41 +q 16:38:46 ... text is making the solution more complicated then it needs to be 16:39:27 ... instead, make the solution about limiting how the data provider cannot use the ID/information in other ways than for fulfilling the service 16:39:30 -[Mozilla] 16:39:48 q? 16:39:59 q+ 16:40:24 ... don't want to re-hash the conversation from the mailing list 16:40:30 ack jchester2 16:40:35 ack jchester 16:40:43 zakim unmute me please 16:40:54 zakim unmute me 16:40:59 Zakim, unmute aleecia 16:40:59 Aleecia should no longer be muted 16:41:01 jchester: wants to echo what rigo said, and supports achapell's proposal 16:41:18 eats shoots and leaves? 16:41:30 ... if the user has expressed a DNT preference, it has to be permanent (and not done at a transactional level) 16:41:46 ... first party cannot use online products to target that user outside of a 1st party context 16:41:46 I think "offline" is not really "offline" It is looking up data real time over another network. 16:42:03 Aleecia: wants to talk about the crux of why this is an issue (entering academic world) 16:42:15 ... context class. what you told a first party, and what you understand that first party doing 16:42:25 ... data append is about adding 3rd party data to some other party 16:42:30 ... what i paid for my house is public data 16:42:54 ... but the idea that facebook (as an example) can use that data (for a DNT:1 user) to profile me and serve me an ad in the context of FB breaks the idea of DNT 16:43:10 that seems like a good reason to be very concerned about social networks that use a real-name policy, rather than a DNT issue 16:43:13 ... If we can start with something smaller and work up, maybe that is a better approach. 16:43:16 Aleecia, I agree with the concern but don't believe DNT is the right place to solve for that. 16:43:18 q+ 16:43:29 ... for example, do we all agree that non-public data is not okay to append for 1st parties 16:43:34 (Did I get that right?) 16:43:44 zakim, please mute me 16:43:44 Aleecia should now be muted 16:43:48 jmayer: three different questions/concerns 16:44:01 q- 16:44:05 ack aleecia 16:44:09 heh 16:44:12 zakim, please mute me 16:44:12 Aleecia should now be muted 16:44:26 ack jmayer 16:44:33 ... 1) not sure what the word identifiable is meant to mean. is it meant to mean linkability, is it meant to be de-identified, or okay to use user names but just not using it 16:44:46 robsherman has joined #dnt 16:44:56 ... until we get an idea of what identifiable means, we can't go that far 16:45:14 ... 2) wasn't entirely clear to jmayer whether/how this operates bi-directionally 16:45:36 + +1.415.821.aall 16:45:42 ... Peter agrees and will ask this later 16:45:50 -Dan_Auerbach 16:45:53 robsherman has joined #dnt 16:46:05 robsherman has joined #dnt 16:46:09 ... 3) alternate proposal (both more and less expansive than this one). its the proposal that pre-dates this one from the EFF one. No special rules around appending 16:46:14 robsherman has joined #dnt 16:46:18 ... instead, go by general guidance of no collection/sharing of linkable data 16:46:23 dan_auerbach has joined #dnt 16:46:26 robsherman has joined #dnt 16:46:30 q? 16:46:56 robsherman has joined #dnt 16:46:58 ... would actually allow a party to use data collected in a first party context in a 3rd party context 16:47:09 ... and allow some sharing of data if the 3rd party could have collected it themselves 16:47:51 Aleecia, I am not sure why your concern would differ whether the user had DNT:1 or DNT:0 in that scenario -- the user has an account with the first party and if they don't want that first party to obtain more public information about them then they should insist on a control interface specific to that first party (not specific to tracking or DNT). Any other solution would require that first parties change their function per DNT (i.e., change the service 16:47:52 intentionally requested by the user, as far as we know) which is something we are deliberately trying to avoid. 16:48:15 jmayer is saying he would prefer an alternative that is actually more permissive in terms of use of data by first parties 16:48:23 johnsimpson: wanted to take a step back and say that i'm trying to accomplish this - hopefully we can arrive at text that gets us there 16:48:43 ... agrees that in a first party transaction/interaction, johnsimpson is reasonably comfortable with that 1st party gathering data 16:48:45 -jchester 16:49:06 ... but if im sending DNT:1, I do not expect that first party to use/take/bring in anything to that transaction 16:49:10 +jchester 16:49:20 achapell: responding to a number of comments 16:49:27 johnsimpson, do you think that's specific to a DNT preference, or are you concerned about combining data in general? 16:49:48 ... to jmayer - re: identifiable, alan's thoughts were unique IDs. tried clarifying that in non-normative text. Intention was to be bi-directional 16:50:30 ... w/r/t robsherman, i agree we're not worreid about 1st party usage; the challenge is that in most data append use cases the use is not clear 16:50:43 ...w/r/t Chris, we're clear that consent trumps DNT 16:50:46 If the intent is unlinkability and non unidentifiability, then the proposal should use different language. 16:51:09 peterswire: thinks the conversation was useful. shows different views and several different data flows 16:51:40 ... what peter's going to try to do is write up a list of structured questions and send it to the group (and perhaps a smaller group) 16:51:47 -Craig_Spiezle 16:51:53 we should incude examples of what's being done today, Peter 16:51:59 ... hopefully find out where there's agreement on some points and disagreements on others 16:52:10 to be clear, ChrisPedigoOPA and jmayer, both of you would prefer to be silent on requirements around data append? 16:52:11 sounds like a good way forward, Peter. 16:52:17 ... next item on the agenda is multiple first parties 16:52:18 Topic: Multiple First Parties 16:52:42 robsherman: on last call, bothh im and justin had some text. 16:52:42 npdoty, in normative text, I think silence would be adequate. In non-normative text, I think an explanation would be worthwhile. 16:52:50 ... since then, they;ve spent time trying to bring them closer together 16:53:01 jmayer, understood, thanks. 16:53:03 -Jonathan_Mayer 16:53:03 ... understands there are times when two companies are coming together to provide a website 16:53:27 ... couple takeaways from last call: 1) make clear its not a common situation; 2) carve back the ways this could happen in unintended ways 16:54:03 ... new proposed text tries to capture whether the user would expect to reasonably communicate with both/all companies 16:54:23 ... includes example (language may change, but intent is there) 16:54:32 ... "powered by..." won't be enough 16:54:38 q? 16:54:47 ... had discussions between 1st/3rd party in platform context 16:54:53 are john and alan on the Q for multiple first parties? 16:55:01 q- 16:55:04 ... needs more work, but will want to make clear that in the context of a platform the person operating the page will still get actions on the page 16:55:10 q- Chapell 16:55:13 ... still needs to formalize it 16:55:35 q? 16:55:36 I think this is looking good, thanks for putting so much work into it, robsherman, justin 16:56:06 +q 16:56:06 Peterswire: questions/comments/any consensus? 16:56:13 ... can we move this to pending review/stable 16:56:17 ack jchester 16:56:21 jchester2: has some concerns about this 16:56:28 ... may see a loophole in it 16:56:34 ... can we get an example of this 16:56:40 ... including at the platform level 16:56:58 q+ 16:57:00 jeff, look at facebook corporate pages, this is IMHO what Rob is talking about 16:57:01 jchester2, they include a negative example ("powered by Example Analytics" does not suffice); are you looking for a positive example as well? 16:57:03 Yianni has joined #DNT 16:57:06 robsherman: let me talk with justin about this 16:57:48 peterswire: one example of a co-branded site is a delta + american express joint promotion re: its credit card 16:57:54 q+ 16:58:00 jchester: can we do an informal poll on this? 16:58:06 peterswire: lets try it 16:58:08 satisfied with latest proposal +1, unsatisfied -1 16:58:22 +1 16:58:23 +1 16:58:23 +1 16:58:23 +1 :) 16:58:25 +1 16:58:25 +1 16:58:25 (thanks npdoty -- you type faster than me!) 16:58:29 +1 16:58:30 +1 16:58:33 +1 16:58:33 +1 16:58:33 +1 16:58:35 +1 16:58:35 +1 16:58:39 -1 As need more examples of "powered by..." 16:58:40 +1 16:58:41 -1 for reasons not discussed yet (SP provisions) 16:58:45 -1 16:59:06 peterswire: if you have concerns, i suggest contacting rob and/or justin 16:59:09 q? 16:59:13 +1 on text, -1 have some related concerns 16:59:16 or contact on-list, I'm not sure what the service provider concern is, for example 16:59:19 ok 16:59:21 q- 16:59:26 q_ 16:59:31 q- 16:59:32 Topic: Deidentification 16:59:34 next topic: should be easy (riight?) -- de identification 17:00:24 Peterswire: thinks the issues we're discussing will come up in many other processes 17:00:35 -Ted_Leung 17:00:42 tedleung has left #dnt 17:00:59 ... have a proposal from Dan with some edits by Roy 17:00:59 -WaltM_Comcast 17:01:11 ... but thinks we may have bigger disagreements on non-normative text 17:01:36 dan: don't see too much disagreement between him/Roy on the normative text 17:01:46 ... okay to accept roy's edits to his normative text 17:01:55 +q 17:02:19 "actions of" vs "infer information about", dan could accept either one 17:02:28 peterswire: can you clarify what you meant by being okay with Roy's email? 17:02:37 Echoing earlier discussion, we don't have a definition of "identify" 17:02:46 By "particular" I want to be sure your goal is to isolate the "actual" user or device - and not suggesting that a unique record replacement does not meet the definition of de-identified. 17:02:47 dan: okay with roy's suggestion about the inferring action (did I get that right?) 17:02:48 yes, I provided two choices and the summary only had the first … either is okay with me. 17:02:57 ... the language from Roy was to 'identify a user' 17:03:04 q? 17:03:11 Dan: I'm suggesting the other one Roy suggested was better 17:03:17 ... identify an action 17:03:23 (if we can infer your name and address and gender and medical status, that wouldn't infer any actions of that user, right?) 17:03:34 wileys: one recommended amendment -- use the term actual instead of the word particular 17:03:53 ... belief that there is a way that a unique record can exist (but it is de-identified) 17:03:55 unique => red zone 17:04:03 ... the term particular can be interpreted in either direction 17:04:08 is the word 'specific'? 17:04:10 q? 17:04:20 ack wileys 17:04:35 q+ 17:04:39 Dan: quick response is that his interpretation of the normative text is different htan how shane would interpret it 17:04:42 Thank you Dan! 17:04:47 ... but at a glance, it should be fine with him 17:04:49 i.e. the question is whether a singular, specific, particular user can be identified from the data, not whether the user is virtual or real... 17:05:02 rigo: question to wileys. in your situation, can you single out a particualr device? 17:05:03 q? 17:05:11 +q 17:05:17 ack rigo 17:05:19 wileys: when you say that, assuming you mean ________ ( missed it), the answer is no 17:05:28 ... we can still de-identify a record for non-real time use 17:05:36 ... but none of that would link back to a user in the real world 17:05:36 q+ 17:05:38 “Data can be considered sufficiently de-identified if there exists a reasonable level of confidence that the data cannot be used to identify the actions of a particular user, user agent, or device.” 17:05:54 -q 17:05:54 Q? 17:06:03 ... thats why terms like specific or particular may muddy up the language.. where actual goes after the intent 17:06:17 we could just go without an adjective "cannot reasonably be linked to a user, user agent or device" 17:06:27 Rigo: what you're saying is -- we stream in a lot of data, change the IDs, then store it, do analytics/etc. 17:06:36 ... but you still have unique traces that are connected to a unique ID 17:06:43 aleecia has joined #dnt 17:06:47 ... so you don't aggregate so you don't get 1 of 500 17:06:54 swapping one GUID for another is not a privacy solution 17:07:02 q+ 17:07:05 leaving IRC to go to meeting but listening on phone 17:07:31 -MECALLAHAN 17:07:37 +q 17:07:40 wileys: for de-identification to work, the important element is that once de-identified, the information is never used to modify a particular user's experience. 17:07:57 so as soon as I update my user agent you can link all my request to my previous UA and that'd be ok because it's no longer my *actual* UA? 17:07:57 I don't think the de-identified property of the data is dependent on whether the data is going to be used to modify the user's experience 17:07:57 ... your goal of 'single out' is looking at singling out a user in the real-world 17:07:58 -BerinSzoka 17:08:05 +1 npdoty 17:08:13 ... wileys goal is to not allow that, but at the same time allow flexibility in analytics 17:08:33 Rigo: singling otu is a compelling topic that is addressing the particular topic they're trying to address 17:09:12 Q? 17:09:26 q+ to say that modifying experience is not the (only) privacy issue 17:09:54 De-identification should depend on the data, not on the server company's state of mind. 17:09:56 ...wileys: thinks we can acheive an outcome that the connection to the real-world that makes them identified is removed; but we still maintain value in the data for analytics purposes 17:10:02 +MECALLAHAN 17:10:03 so the AOL data set would be "de-identified"? 17:10:16 The goal of this definition is to avoid "linked" and "unlinkable" -- I know that word is used in other privacy contexts, but it is very confusing for the Web (the entire point of which is to enable linking of information). 17:10:23 +1 17:10:27 dan: wants to emphasize that even though we;re coming to some agreement on normative text, we have a fundamental disagreement on what de-identification details 17:10:41 (+1 to Dan's point we're worlds apart) 17:10:41 ... don't think using pseudonyms or scrubbing log files is adequate de-id 17:10:47 npdoty, according to Wileys definition, I think it would be 17:11:01 ... until we hammer out the non-normative examples, dan believes we're at an impasse 17:11:20 WileyS, do you think the AOL search data set would satisfy your interpretation of "de-identified"? 17:11:25 moneill2: should be both de-identified and unlinked 17:11:43 ... DNT means do not track me over time 17:11:46 Nick, NO - as they left markers that allowed re-identification (~4 people out of 600K). URL scrubbing should included in any de-identification process. 17:12:17 -[Microsoft] 17:12:18 efelten: don't think its workable to have a definition of de-identified when looking at what someone can/cannot do (not sure if i got that right) 17:12:31 ... that kind of definition is not sustainable (certainly not testable or actionable) 17:12:33 +1 to edfelten 17:12:37 q? 17:12:42 -q? 17:12:46 q-? 17:12:48 +[Microsoft] 17:12:53 ack moneill 17:12:55 ack dan_auerbach 17:12:56 ack dan_auerbach 17:12:58 ack moneill 17:12:59 ack efelten 17:13:00 ack efelten 17:13:03 ... tends toa gree with dan that the discussion on non-normative text will focus the conversation 17:13:06 ack dsinger 17:13:06 dsinger, you wanted to say that modifying experience is not the (only) privacy issue 17:13:17 dsinger: the concern is not youre going to use this data to target me, its that you have this data 17:13:23 I agree with Ed -- what is important is that the data cannot be used to identify 17:13:45 q- 17:13:50 Wileys, so you agree that data that could be linked back to (even if it operationally wouldn't generally be) a user or device isn't de-identified? 17:14:04 +q 17:14:30 I think the disagreement is on what "identification" means. Whether it is name or "single out" 17:14:38 peterswire: we have this puzzle for the group of how to proceed (how much of a standards process is it to resolve non-normative text) 17:14:43 Nick, If I can pass you a record, and you can leverage that record in isolation to re-identify a user then it has not be de-identified. 17:14:54 ... suppose for discussion that we're close to consensus on normative text but far apart on non-normative text 17:15:02 ... whats happened in the past for other standards processes 17:15:07 q? 17:15:10 Why "in isolation"? Why pretend that Nick doesn't have access to side information? (Because he does.) 17:15:17 ... david, roy, andrian -- any previous experience in this? 17:15:18 ack efelten 17:15:26 Nick, If I pass you group of records, and those records in concert can be used to identify a user, then the group of data has not been deidentified. 17:15:35 q+ 17:15:40 efelten: echoing what dan said in the maling list, it would be helpful for an example of a specific administrative control that meets this 17:15:59 Ed - agree on "Side Data" as you presented in Cambridge - this includes that concept. 17:16:15 -jchester 17:16:16 q? 17:16:16 q+ 17:16:23 I strongly believe that we don't have agreement until we have agreement on the non-normative examples 17:16:26 Wileys, thanks, that seems like maybe you agree more with dan and ed (and the examples in the proposed text) than we might have thought 17:16:33 to go back to Peter's question 17:16:44 rigo: personal data is much weaker than unlinkable data 17:17:05 q?> 17:17:36 rigo, i think the idea of "split" keys, for example, means split between 2 different entities or at least different people. 17:17:49 ... you may have identifiable data, but if you need the help of many other people to identify an indidivual, then that posses a harder problem 17:18:08 ... can maybe address this by saying that the entity cannot re-connect/re-combine the IDs 17:18:22 ack rigo 17:18:26 ack adrianba 17:18:30 Wileys, so if you can "neither infer information about an *actual user agent* nor *a specific use or devicer*" would that be ok? 17:18:43 Rigo, agree with the grouping concept. IP Address is a unique identifier and should be de-identified. 17:18:44 Just *saying* that something will not happen is not an administrative control. 17:18:48 adrian: to address the process question, typically we haven't really tried to differentiate text between nornamtive and non-normative text 17:19:12 .. but generally if we have this type of disagreement, I would think peoople have different interpretatiosn of the normative text 17:19:16 +1 to Adrian 17:19:18 agree with adrian that this is a sign of ambiguity rather than agreement 17:19:20 ... and would suggest we make sure the normative text is clear 17:19:24 +1 to adrianba 17:19:25 peterswire, I would suggest using the WG decision process -- narrow the options to a relatively few specific texts, use the polling tool to identify objections, and then make a decision that tries to thread the needle. We can then move on, at least until more information is provided to make re-discussing it worthwhile. 17:19:40 but, the non-norm may help people learn where those issues are, if there is any lack of clarity still 17:19:49 Vincent, I would go with Roy's definition and simply replace "particular" with "actual" 17:19:57 I think that gets to what you want. 17:20:09 peterswire: in the discussion last week re: financial/auditing, the Deloitte people said that advertising is becoming more important to make sure nobody is cooking the books 17:20:23 ... so a bunch of advertising data may be likely to come under the rules for retention for 7 years 17:20:33 ... that's what Peter took from last week's call 17:20:42 ... so wondering to put that claim, if true, against what we're discussing here 17:20:44 +q 17:21:10 +q 17:21:12 Wileys, not really, if I stop using a service or if you service is discontinuated I'm no longer covered by the term "actual" 17:21:14 q? 17:21:19 ack efelten 17:21:29 ... how is what we're doing here affected by possibly having a separate process for auditing? 17:21:40 +q 17:21:49 efelten: to the extent that something may be required by law, there's no cover/need to provide specifics in the standard to discuss it 17:21:50 ack dan_auerbach 17:22:07 Dan: couple things: 1) better to keep the discussions separate 17:22:21 Vincent, by actual I mean any identifier that connects to the "actual" person, system, device, or user agent. How does the starting or stopping of a service affect that test? 17:22:24 +1 to keeping these very different discussions 17:22:33 if you still have financial data in that granularity, you can't claim de-identification 17:22:42 Disagree - raw log data is needed 17:22:45 ... as an aside, my interpretation of the experts last week was a bit different than yours. dan heard that raw log files are rarely, if ever, needed 17:22:57 ... thinks a lot may be able to get done in a de-identified manner 17:22:58 q? 17:23:29 Wileys: as long as you have raw logs, you can't claim "de-identification" without attracting remarks 17:23:46 moneill: if we say what we mean by unlinkability, how long do we need to link the data sets? 17:23:49 ack moneill 17:24:27 peterswire: as I've summarized already, we have quite significant disagreement on non-normative text 17:24:32 Wileys, sorry the normative text said "actual" user (not person) but I get your point 17:24:50 ... im inclined to go directly to those most involved to share tenative thoughts to discuss how to proceed 17:24:53 Rigo, as I explained on the email list - you would need to keep these datasets separate 17:25:01 Thank you Vincent. 17:25:23 ... tempted to try to have a conference/meeting to clearly explain why we have different views; and have well-reasoned explanations of the views 17:25:33 ... don't see a way to bridge the divide on non-normative text right now 17:25:55 q? 17:26:16 peterswire: highlight for next week... 17:26:21 Topic: Wrap-up 17:26:33 achapell has a proposal that he asks people to consider for next week re: user education/interface 17:26:38 ... peter to work on appends 17:26:53 Q? 17:26:56 if you can't agree on non-normative text, I don't see how you can claim agreement on the normative. It means different things to different people and that implies a fundamental problem with the normative text. 17:27:02 -efelten 17:27:03 -[FTC] 17:27:03 -RichardWeaver 17:27:04 +1 john 17:27:04 -peterswire 17:27:04 - +1.202.331.aagg 17:27:06 -samsilberman 17:27:07 -[Microsoft.a] 17:27:07 -Chris_Pedigo 17:27:08 -robsherman 17:27:08 -Brooks 17:27:09 -Aleecia 17:27:09 -Rigo 17:27:09 -adrianba 17:27:09 - +1.415.821.aall 17:27:10 -chapell 17:27:10 -Joanne 17:27:10 -hwest 17:27:10 -david_macmillan? 17:27:10 -prestia 17:27:11 -bills 17:27:11 -JeffWilson 17:27:12 Re: moneill2 on using de-identified and unlinkable if this was via a temporary 30min or time dependant sessionID rather than permanent sessionID... this would cause significant changes in data analytics reports for example for new and returning visitor counts would skew. 17:27:12 -kulick 17:27:13 -Chris_IAB 17:27:13 zakim, who is on the phone? 17:27:13 thanks peter, and vinay and Joanne for scribing 17:27:14 On the phone I see vincent, WileyS, Walter, MECALLAHAN, [Microsoft], npdoty, eberkower, Yianni, moneill2, Fielding, ChrisPedigoOPA, hefferjr, vinay, hober, johnsimpson, 17:27:14 ... Susan_Israel 17:27:14 -vinay 17:27:16 -Yianni 17:27:16 -WileyS 17:27:18 -johnsimpson 17:27:20 -vincent 17:27:22 present+ dsinger 17:27:23 -moneill2 17:27:24 -[Microsoft] 17:27:26 zakim, you are a dolt 17:27:26 I don't understand 'you are a dolt', dsinger 17:27:28 Zakim, list attendees 17:27:28 As of this point the attendees have been +1.781.482.aaaa, samsilberman, npdoty, +1.408.836.aabb, +1.646.654.aacc, +1.215.286.aadd, eberkower, RichardWeaver, efelten, WaltM_Comcast, 17:27:31 ... Rigo, MECALLAHAN, Chris_IAB, sidstamm, peterswire, +1.937.215.aaee, Fielding, ChrisPedigoOPA, moneill2, Yianni, JeffWilson, Joanne, [Microsoft], hefferjr, vinay, 17:27:31 ... +1.202.370.aaff, +1.202.331.aagg, +1.202.347.aahh, hober, Aleecia, prestia, adrianba, chapell, johnsimpson, Susan_Israel, Craig_Spiezle, Chris_Pedigo, kulick, vincent, hwest, 17:27:35 ... BerinSzoka, Amy_Colando, +1.650.365.aaii, Dan_Auerbach, Brooks, [FTC], Jonathan_Mayer, bills, +1.202.370.aajj, robsherman, WileyS, +1.202.494.aakk, Ted_Leung, jchester, Walter, 17:27:35 ... +1.415.821.aall 17:27:35 -hober 17:27:37 -ChrisPedigoOPA 17:27:42 rrsagent, please draft the minutes 17:27:42 I have made the request to generate http://www.w3.org/2013/04/03-dnt-minutes.html npdoty 17:27:55 whoa, lotsa 202 area codes 17:28:06 -Susan_Israel 17:28:12 -Walter 17:28:33 dsinger, most of those were subsequently identified in IRC 17:28:36 -eberkower 17:28:58 (when Zakim lists the attendees, he doesn't remember the ones identified inline) 17:29:04 -npdoty 17:30:26 -hefferjr 17:33:43 hm, Zakim thought hober was here; he wasn't, he was on CSS 17:34:18 that might have been you 17:34:56 yes, i was on the css call, not dnt 17:38:52 did hober appear for zakim also in CSS? 17:40:44 yes 17:41:26 Zakim thinks all of Apple is hober 17:41:55 muhahahahhaha. 17:58:12 -Fielding 17:58:14 -MECALLAHAN 17:58:17 T&S_Track(dnt)12:00PM has ended 17:58:18 Attendees were +1.781.482.aaaa, samsilberman, npdoty, +1.408.836.aabb, +1.646.654.aacc, +1.215.286.aadd, eberkower, RichardWeaver, efelten, WaltM_Comcast, Rigo, MECALLAHAN, 17:58:18 ... Chris_IAB, sidstamm, peterswire, +1.937.215.aaee, Fielding, ChrisPedigoOPA, moneill2, Yianni, JeffWilson, Joanne, [Microsoft], hefferjr, vinay, +1.202.370.aaff, 17:58:22 ... +1.202.331.aagg, +1.202.347.aahh, hober, Aleecia, prestia, adrianba, chapell, johnsimpson, Susan_Israel, Craig_Spiezle, Chris_Pedigo, kulick, vincent, hwest, BerinSzoka, 17:58:22 ... Amy_Colando, +1.650.365.aaii, Dan_Auerbach, Brooks, [FTC], Jonathan_Mayer, bills, +1.202.370.aajj, robsherman, WileyS, +1.202.494.aakk, Ted_Leung, jchester, Walter, 17:58:22 ... +1.415.821.aall 17:58:33 Zakim, bye 17:58:33 Zakim has left #dnt 17:58:35 rrsagent, bye 17:58:35 I see no action items