15:44:36 RRSAgent has joined #dnt 15:44:36 logging to http://www.w3.org/2014/06/11-dnt-irc 15:44:38 RRSAgent, make logs world 15:44:40 Zakim, this will be TRACK 15:44:41 ok, trackbot; I see T&S_Track(dnt)12:00PM scheduled to start in 16 minutes 15:44:41 Meeting: Tracking Protection Working Group Teleconference 15:44:41 Date: 11 June 2014 15:45:32 wseltzer has changed the topic to: Agenda, June 11: http://lists.w3.org/Archives/Public/public-tracking/2014Jun/0037.html 15:45:39 zakim, clear agenda 15:45:40 agenda cleared 15:46:01 agenda+ Service Providers 15:46:08 agenda+ Data Append and First Parties 15:46:15 agenda+ Context Separation*_ 15:46:32 agenda+ Data Minimization 15:49:44 T&S_Track(dnt)12:00PM has now started 15:49:51 + +1.646.654.aaaa 15:52:36 JackHobaugh has joined #dnt 15:56:34 +Wendy 15:56:43 zakim, who is here? 15:56:45 On the phone I see +1.646.654.aaaa, Wendy 15:56:45 On IRC I see JackHobaugh, RRSAgent, rvaneijk, hober, Zakim, walter, trackbot, wseltzer 15:56:45 +rvaneijk 15:56:45 fielding has joined #dnt 15:57:37 Nielsen__Raymond_ has joined #dnt 15:57:39 not yet - soon 15:57:57 Zakim, mute me please 15:57:58 sorry, Nielsen__Raymond_, I do not know which phone connection belongs to you 15:58:22 Yes 15:58:28 zakim, aaaa is Nielsen__Raymond_ 15:58:29 +Nielsen__Raymond_; got it 15:58:35 Thanks 15:58:52 Chris_M has joined #dnt 15:59:17 +Peder_Magee 15:59:25 +Amy_Colando 15:59:39 +Fielding 15:59:44 magee has joined #dnt 15:59:51 +??P5 15:59:58 just joined the phone call 16:00:11 WaltMichel has joined #DNT 16:00:22 +Jack_Hobaugh 16:00:22 big crowed today ;) 16:00:23 amm has joined #dnt 16:00:28 zakim, ??p5 is Chris_M 16:00:29 +Chris_M; got it 16:00:39 sidstamm has joined #dnt 16:00:45 +Chris_Pedigo 16:00:47 +WaltMichel 16:00:57 zakim, who is on the call? 16:00:58 On the phone I see Nielsen__Raymond_, Wendy, rvaneijk, Peder_Magee, Amy_Colando, Fielding, Chris_M, Jack_Hobaugh, Chris_Pedigo, WaltMichel 16:01:09 loan has joined #dnt 16:01:18 +RichardWeaver 16:01:21 +Aleecia 16:01:30 Richard_comScore has joined #dnt 16:01:33 moneill2 has joined #dnt 16:01:34 +Chris_IAB 16:01:47 -Chris_IAB 16:02:03 vinay has joined #dnt 16:02:04 justin has joined #dnt 16:02:20 +vinay 16:02:28 +Chris_IAB 16:02:28 +kulick 16:02:38 Alan has joined #dnt 16:02:39 ChrisPedigoOPA has joined #dnt 16:02:49 +[CDT] 16:02:52 zakim, who is on the phone? 16:02:53 apologies all, I'm en route and having phone/irc connection difficulties 16:02:53 On the phone I see Nielsen__Raymond_, Wendy, rvaneijk, Peder_Magee, Amy_Colando, Fielding, Chris_M, Jack_Hobaugh, Chris_Pedigo, WaltMichel, RichardWeaver, Aleecia, vinay, kulick, 16:02:53 ... Chris_IAB, [CDT] 16:02:55 +[IPcaller] 16:03:03 zakim, cdt has me 16:03:04 +justin; got it 16:03:09 zakim, [IPCaller] is me 16:03:10 +moneill2; got it 16:03:27 zakim, Chris_IAB is really Alan_IAB 16:03:28 +Alan_IAB; got it 16:03:47 zakim, who is here? 16:03:49 On the phone I see Nielsen__Raymond_, Wendy, rvaneijk, Peder_Magee, Amy_Colando, Fielding, Chris_M, Jack_Hobaugh, Chris_Pedigo, WaltMichel, RichardWeaver, Aleecia, vinay, kulick, 16:03:49 ... Alan_IAB, [CDT], moneill2 16:03:49 [CDT] has justin 16:03:49 On IRC I see ChrisPedigoOPA, Alan, justin, vinay, moneill2, Richard_comScore, loan, sidstamm, amm, WaltMichel, magee, Chris_M, Nielsen__Raymond_, fielding, JackHobaugh, RRSAgent, 16:03:53 ... rvaneijk, hober, Zakim, walter, trackbot, wseltzer 16:03:53 +hefferjr 16:03:57 scribenick: moneill2 16:04:19 +regrets sidstamm 16:04:28 http://lists.w3.org/Archives/Public/public-tracking-comments/2014Jun/0000.html 16:04:33 +WileyS 16:04:44 : last call ending next tuesday, WP29 has commented 6 issue 16:04:46 WileyS has joined #dnt 16:04:53 +Brooks 16:04:55 Brooks has joined #dnt 16:05:24 q? 16:05:33 justin, will come back with process how to deal with comments 16:05:39 zakim, take up agendum 1 16:05:39 agendum 1. "Service Providers" taken up [from wseltzer] 16:05:50 issue-206? 16:05:50 issue-206 -- Service Provider name and requirements -- open 16:05:50 http://www.w3.org/2011/tracking-protection/track/issues/206 16:05:58 issue-49? 16:05:58 issue-49 -- Third party as first party - is a third party that collects data on behalf of the first party treated the same way as the first party? -- pending review 16:05:58 http://www.w3.org/2011/tracking-protection/track/issues/49 16:06:18 kulick has joined #dnt 16:06:23 s/justin, /justin: / 16:06:43 justin, a service provider could act to conwey data between contexts? 16:07:16 fielding, key is what party are they when data is used 16:08:06 fielding, whether they are service provider does not change the situation. 16:08:19 s/justin, /justin: / 16:08:28 s/fielding, /fielding: /g 16:09:08 justin, a service provider may be acting for hundreds of contractee 16:09:22 s/justin, /justin: /g 16:09:42 justin, maybe best deal with the issue when we talk about 219 16:10:15 kulick has joined #dnt 16:11:02 +MECallahan 16:11:15 +[Facebook] 16:11:20 mecallahan has joined #dnt 16:11:41 https://www.w3.org/wiki/Privacy/TPWG/Change_Proposal_Limitations_on_use_in_Third_Party_Context 16:11:44 justin, no real movement on context separation 16:12:25 justin, cfo next week on 219 16:12:51 +MattHayes 16:12:52 matt has joined #dnt 16:12:54 issue-219? 16:12:54 issue-219 -- Limitations on use in a 3rd party context of data collected in a 1st party context -- raised 16:12:54 http://www.w3.org/2011/tracking-protection/track/issues/219 16:13:05 justin, nobody has jumped on censuss proposal 16:13:23 q? 16:13:57 justn, other issue is data append 16:13:58 zakim, take up agendum 2 16:13:58 agendum 2. "Data Append and First Parties" taken up [from wseltzer] 16:13:59 https://www.w3.org/wiki/Privacy/TPWG/Change_Proposal_First_Party_Compliance 16:14:56 jsutin, 5 proposals but only 2 main ones 16:15:31 s/jsutin,/justin:/ 16:15:44 johnsimpson has joined #dnt 16:15:54 q+ 16:16:12 ack vinay 16:17:03 +johnsimpson 16:17:16 kj has joined #dnt 16:17:40 q? 16:17:49 q? 16:18:37 -Amy_Colando 16:19:17 q+ 16:19:30 ack chris 16:19:32 justin, table 219 for time being, maybe we can reach a consensus 16:19:33 q+ 16:21:15 q- 16:21:58 zakim, who is on the phone? 16:21:59 On the phone I see Nielsen__Raymond_, Wendy, rvaneijk, Peder_Magee, Fielding, Chris_M, Jack_Hobaugh, Chris_Pedigo, WaltMichel, RichardWeaver, Aleecia, vinay, kulick, Alan_IAB, 16:21:59 ... [CDT], moneill2, hefferjr, WileyS, Brooks, MECallahan, [Facebook], MattHayes, johnsimpson 16:21:59 [CDT] has justin 16:22:34 ChrisPedigoPA, data append far too broad for DNT. Data might have been collected with consent 16:22:34 +1 to who is speaking - Data Append has nothing to do with cross-site data collection 16:23:21 Allowing data append = loophole large enough to destroy the standard. 16:23:40 johnsimpson, my proposal would stop third party would append to first party 16:23:44 +q 16:24:00 agree, data append seems out of scope for DNT 16:24:16 If data append is sourced from data with user consent or public data - how could DNT logically apply? 16:24:31 +1 to WileyS, that's right 16:24:32 q+ 16:24:42 ack mo 16:24:47 I feel like we are trying to boil the privacy ocean here... 16:25:05 Data append is not with user consent 16:25:38 I most assuredly not not consent to the price of my home and my address being appended to Amazon's data about me 16:25:39 you don't need consent for public data 16:25:46 how about City Hall data? 16:26:01 Chris_M, depends on the jurisdiction... 16:26:15 ack fielding 16:26:22 wseltzer, US :) 16:26:29 amm - that is a legal question - not one for this working group. 16:26:33 If we are allowing user choice around tracking, perhaps we should allow users to make choices... Rather than be surprised. 16:26:50 By no means 16:26:51 @ChrisM, depending on what you do with public data, you may still need valid consent, even explicit consent depending on the use 16:26:51 Chris_M, we're on the *World* wide web :) 16:27:14 We're not talking about what happens to non-DNT users, which is a legal issue 16:27:29 I suggest that Vinay's text is editorial, as is Mike's (though I prefer Vinay's text). Neither is about Data Append. John's proposal was about data append. 16:28:14 q? 16:28:20 wseltzer, I have always advocated for a JURISDICTIONAL approach to DNT compliance-- we need to respect laws in each jurisdiction; W3C should not aim to regulate over existing laws and codes IMHO 16:28:47 justin, the real issue is data append 16:28:49 q+ 16:29:29 @Chris_M, interoperability is an important aim IMHO. 16:30:28 justin, cfo should be about data append 16:30:58 Presumably DNT:1 means something more than "we follow the minimum as established by law," or there would be no diff between DNT:1 and DNT:0. 16:31:20 wendy, one issue on data append under 170, and another under 219 16:31:25 -Alan_IAB 16:31:45 rvaneijk, in order to get global interoperability that doesn't step on some country's laws, that forces us to abstract to a common denominator that generally works in each jurisdiction (respects their laws/codes), but then probably does not go as far as the advocates want here. 16:31:49 issue-219? 16:31:49 issue-219 -- Limitations on use in a 3rd party context of data collected in a 1st party context -- raised 16:31:49 http://www.w3.org/2011/tracking-protection/track/issues/219 16:32:06 issue-170? 16:32:06 issue-170 -- Definition of and what/whether limitations around data append and first parties -- open 16:32:06 http://www.w3.org/2011/tracking-protection/track/issues/170 16:32:25 justin, not sure what you mean by "sneak around DNT" (please explain) 16:32:33 amm - DNT speaks to cross-site data collection across different contexts. It doesn't speak to Data Append. That's an entirely different topic and its going to needlessly slow down this working group to try to address it here. I could imagine a host of different technical and policy elements specific to Data Append as an isolated topic. 16:32:37 justin, no data append should be in 219 16:32:47 There is nothing even remotely illegal about protecting user privacy for those who request it. 16:33:42 justin, we need to make clear when DNT set no identifiers are shared 16:34:07 hmmm, still a bit confused by "sneak around" (sorry to be obtuse) 16:34:16 moneill2 - identifiers are not "cross-site data collected across contexts" 16:34:28 justin, will make it more clear on list 16:34:41 DNT has fundamentally come to be about data sharing. Saying "no third party sharing unless we call it by a different name" is pretty goofy 16:34:55 -[Facebook] 16:34:59 Court house data is third party data 16:35:00 q? 16:35:01 https://www.w3.org/wiki/Privacy/TPWG/Change_Proposals_on_data_minimization 16:35:08 q- wselt 16:35:31 , identifiers make cross-site collection possibl;e 16:35:34 Without specifically allowing data append, it is out of what would be allowed 16:35:50 justin, data minimisation 16:36:07 i| https://www.w3.org/wiki/Privacy/TPWG/Change_Proposals_on_data_minimization 16:36:46 We've already been through this - unique IDs are necessary for a host of permitted uses: security, financial reporting, & frequency capping. 16:37:35 q+ 16:37:35 moneill2 - yes, and some cross-site data collection is permitted per the permitted uses 16:37:49 ack fielding 16:38:04 , how upto date are thse proposals? 16:39:19 fielding, why 16:40:05 identifiers are what makes tracking possible, if DNT set dont use them 16:40:52 fieldin, limitations on permitted uses fine, data minimisation wrong place 16:44:39 q? 16:45:28 I guess I would like to see arguments as to why the suggested changes improve Data Minimization, not random other topics in compliance. 16:45:33 Many permitted uses fail without a persistent, unique, anonymous identifier. 16:47:19 q+ 16:47:33 q+ 16:47:33 ack ws 16:49:28 It's been a while. Did the idea of transparency go away? 16:50:04 I would not be in favour of short-term use of identifiers or allow for non-persistent identifiers. Uniques is what matters. 16:50:12 Probabilistic identifiers (digital fingerprints) are more often less persistent than deterministic identifiers 16:50:20 We will use digital fingerprints for security purposes 16:50:25 s/uniques/uniqueness/ 16:50:37 We need every available tool to fight the bad guys 16:50:56 ack fielding 16:51:16 ;-) to Wendy 16:52:36 browser "fingerprint" is ephemeral 16:52:49 It is not just the profile that is the object of concern, the automatic decision is IMHO as well enabled by unique identifiers. 16:52:58 If you want to disallow certain identifiers, then just disallow them one at a time. Don't mix them all up under a bad definition. 16:53:07 q+ 16:53:18 If you want to stop client-side storage, say that. 16:53:31 If you want to stop browser fingerprinting, do that. 16:53:46 Rob, I'm not following all of what you're suggesting (and perhaps should take offline) but what do you mean by automatic decision? 16:53:56 ack ws 16:54:48 wendy, are there place where we can be clear explaining the mechanism of tracking 16:55:12 yeah, I might agree with wseltzer here, we should probably focus on the practice, not the mechanism 16:55:27 wseltzer: trying to be technology-neutral in limiting "tracking" -- can we offer useful functional definitions, not mechanism of tracking/fingerprinting ? 16:55:41 justin, lets iterate on this 16:55:42 q- 16:56:12 q? 16:56:18 there will always be new tracking mechanisms, yeah? 16:56:26 rrsagent, draft minutes 16:56:26 I have made the request to generate http://www.w3.org/2014/06/11-dnt-minutes.html wseltzer 16:56:46 Jonathan's hopes not withstanding, I don't see a way to do away with high entropy identifiers in DNT. Reasonable time limits (note necessarily hard coded) and transparency seem like the way to go IMHO 16:56:48 rrsagent, make logs public 16:57:02 -Chris_Pedigo 16:57:04 Yes, I am basically agreeing with Shane but minus loopholes 16:57:07 -[CDT] 16:57:07 -WaltMichel 16:57:07 -hefferjr 16:57:07 -Brooks 16:57:08 -johnsimpson 16:57:08 -Peder_Magee 16:57:09 -Aleecia 16:57:09 -MattHayes 16:57:10 -rvaneijk 16:57:10 -Wendy 16:57:10 -MECallahan 16:57:11 -RichardWeaver 16:57:17 -vinay 16:57:19 -kulick 16:57:21 -WileyS 16:57:22 -Chris_M 16:57:23 s/justin, /justin: /G 16:57:24 -Jack_Hobaugh 16:57:25 kulick has left #dnt 16:57:27 -Nielsen__Raymond_ 16:57:35 s/johnsimpson, /johnsimpson: /G 16:57:39 Ooooh, didn 16:57:44 s/wendy, /wendy: / 16:57:53 rrsagent, draft minutes 16:57:53 I have made the request to generate http://www.w3.org/2014/06/11-dnt-minutes.html wseltzer 16:57:58 -Fielding 16:58:04 Didn't know there is global replace, nice 16:58:13 s/justn,/justin: / 16:58:45 s/fielding,/fielding:/G 16:58:53 s/fieldin,/fielding:/ 16:59:00 rrsagent, draft minutes 16:59:00 I have made the request to generate http://www.w3.org/2014/06/11-dnt-minutes.html wseltzer 16:59:31 justin, I just noticed that TCS does not forbid tracking when DNT:1. That should at the start, don't you think? 17:09:48 -moneill2 17:09:49 T&S_Track(dnt)12:00PM has ended 17:09:49 Attendees were +1.646.654.aaaa, Wendy, rvaneijk, Nielsen__Raymond_, Peder_Magee, Amy_Colando, Fielding, Jack_Hobaugh, Chris_M, Chris_Pedigo, WaltMichel, RichardWeaver, Aleecia, 17:09:49 ... vinay, kulick, justin, moneill2, Alan_IAB, hefferjr, WileyS, Brooks, MECallahan, [Facebook], MattHayes, johnsimpson