P3P: Necessary but not Sufficient

..but not sufficient

• 2 of 4 FTC Fair Information Practices
  • Notice
  • Choice
  • Security
  • Enforcement

• 2 of 8 OECD FIPS

Still must address:

• Procedural Rights & Enforcement
• Minimum standards for sensitive information: financial, medical, etc.