Privacy/TPWG/Change Proposal Tracking Third Party Compliance

From W3C Wiki
< Privacy‎ | TPWG
Jump to: navigation, search

This wiki page lists text proposals for ISSUE-203

Proposal 1

Proposal from David Singer: email

If a third party receives a DNT: 1 signal, then, unless it has consent from the user:

  • the third party must not collect, retain, share, or use tracking information related to the network interaction as part of which it received the DNT: 1 signal outside of the permitted uses as defined within this standard;
  • the third party must not use tracking information about previous network interactions in which it was a third party, outside of the permitted uses as defined within this standard.

Proposal 2

Proposal from Roy Fielding via email

Upon receipt of a request containing DNT:1, an origin server MUST do one of the following:

  • a) send in any corresponding tracking status for that target resource the "N" tracking status value and avoid behavior that fits the definition of tracking with respect to this network interaction; or,
  • b) send in any corresponding tracking status for that target resource an appropriate tracking status value to indicate tracking might occur (any value other than "N") and conform to the limitations associated with that value, defined below, with respect to tracking when DNT:1 is received.


Editors' Draft Text

The above proposal would replace the existing text below from the editors' draft.

If a third party receives a DNT: 1 signal, then:

  • the third party MUST NOT collect, retain, share, or use information related to the network interaction as part of which it received the DNT: 1 signal outside of the permitted uses as defined within this standard and any explicitly-granted exceptions provided in accordance with the requirements of this standard;
  • the third party MUST NOT use information about previous network interactions in which it was a third party, outside of the permitted uses as defined within this standard and any explicitly-granted exceptions, provided in accordance with the requirements of this standard.