15:49:02 RRSAgent has joined #dnt 15:49:02 logging to http://www.w3.org/2014/07/09-dnt-irc 15:49:04 RRSAgent, make logs world 15:49:04 Zakim has joined #dnt 15:49:06 Zakim, this will be TRACK 15:49:06 ok, trackbot; I see T&S_Track(dnt)12:00PM scheduled to start in 11 minutes 15:49:07 Meeting: Tracking Protection Working Group Teleconference 15:49:07 Date: 09 July 2014 15:49:15 chair: cargill, justin 15:50:50 regrets+ rvaneijk, dsinger, schunter, johnsimpson, walter, ninja 15:54:44 npdoty has changed the topic to: July 9 agenda: http://lists.w3.org/Archives/Public/public-tracking/2014Jul/0004.html 15:56:49 Chris_M has joined #dnt 15:57:49 T&S_Track(dnt)12:00PM has now started 15:57:56 +npdoty 15:58:23 -npdoty 15:58:24 T&S_Track(dnt)12:00PM has ended 15:58:24 Attendees were npdoty 15:58:46 Zakim, call npdoty 15:58:47 ok, npdoty; the call is being made 15:58:49 T&S_Track(dnt)12:00PM has now started 15:58:49 +Npdoty 15:59:27 justin has joined #dnt 15:59:47 Carl_Cargill has joined #dnt 15:59:50 + +1.303.949.aaaa 15:59:59 ChrisPedigoOPA has joined #dnt 16:00:07 +Carl_Cargill 16:00:41 +ChrisPedigoOPA 16:00:50 +??P12 16:01:02 Zakim, aaaa is JackH 16:01:02 +JackH; got it 16:01:09 + +1.206.770.aabb 16:01:14 just joined the call 16:01:15 agenda+ Data Minimization 16:01:24 agenda+ Tracking in compliance 16:01:30 agenda+ Link shortener 16:01:32 zakim, please mute me 16:01:32 sorry, Nielsen__Raymond_, I do not know which phone connection belongs to you 16:01:35 agenda+ Deidentification 16:01:37 +[IPcaller] 16:01:48 +Wendy 16:01:54 +Amy_Colando 16:01:56 zakim, [IPCaller] is me 16:01:56 +moneill2; got it 16:01:59 zakim, who is here? 16:02:00 On the phone I see Npdoty, JackH, Carl_Cargill, ChrisPedigoOPA, ??P12, +1.206.770.aabb, moneill2, Wendy, Amy_Colando 16:02:00 On IRC I see ChrisPedigoOPA, Carl_Cargill, justin, Chris_M, Zakim, RRSAgent, npdoty, moneill2, Nielsen__Raymond_, Alan_, schunter, walter, hober, wseltzer, trackbot 16:02:08 no 16:02:19 I called in from a private number 16:02:19 Zakim, ??p12 is Chris_M 16:02:19 +Chris_M; got it 16:02:31 zakim, aabb is probably Nielsen__Raymond_ 16:02:31 +Nielsen__Raymond_?; got it 16:02:35 +Justin 16:02:38 Zakim, who is making noise? 16:02:39 +WaltMichel 16:02:41 -Nielsen__Raymond_? 16:02:49 npdoty, listening for 10 seconds I heard sound from the following: 10 (32%), Carl_Cargill (4%), Justin (53%) 16:02:54 + +1.646.654.aacc 16:03:06 WaltMichel has joined #DNT 16:03:07 +hefferjr 16:03:29 agenda+ TPE LC Comments 16:03:33 + +1.206.770.aadd - is perhaps Nielsen__Raymond_? 16:03:35 agenda+ Reminders 16:03:45 volunteers to scribe? 16:03:56 vincent has joined #dnt 16:04:28 scribenick: ChrisPedigoOPA 16:04:38 fielding has joined #dnt 16:04:57 Zakim, take up agendum 6 16:04:57 +Jeff 16:04:57 agendum 6. "Reminders" taken up [from npdoty] 16:04:57 Justin: 2 open calls for objections 16:05:01 1 - data append 16:05:13 https://www.w3.org/2002/09/wbs/49311/tpwg-first-parties-170/ 16:05:14 +vincent 16:05:15 WileyS has joined #dnt 16:05:15 2 - use of data in a different context 16:05:16 +Fielding 16:05:24 https://www.w3.org/2002/09/wbs/49311/tpwg-third-party-context-219/ 16:05:34 jeff has joined #dnt 16:05:36 justin: will send a remindernote to the group 16:05:44 justin: TPE update 16:06:07 justin: comments received, put into 20-30 categories 16:06:16 +[FTC] 16:06:25 justin: nick to assign issues, roy to take first stab at implementing 16:06:42 magee has joined #dnt 16:06:43 justin: chairs will decide whether issues have already been addressed 16:07:10 justin: unclear about timing for when issues will be brought to the group 16:07:14 nick is behind, but will start creating issues in the next couple days 16:07:37 sometime in the next week or two 16:07:40 +WileyS 16:07:52 so, all, be aware that lots of email announcements about issues will come to the mailing list soon 16:08:03 cOlsen has joined #dnt 16:08:10 justin: ninja has accepted a new job! 16:08:34 will still be involved, but not as w3c staff 16:08:56 Zakim, take up agendum 1 16:08:56 agendum 1. "Data Minimization" taken up [from npdoty] 16:09:19 +[FTC.a] 16:09:20 +MECallahan 16:09:33 mecallahan has joined #dnt 16:09:42 justin: mike o'neill is ok with existing text 16:09:49 dropped his change proposal 16:09:51 +kulick 16:09:57 will allow one more week before closing out issue 16:09:59 kulick has joined #dnt 16:10:15 justin: some may still want changes 16:10:27 justin: but no one has submitted language yet 16:10:47 q? 16:10:49 agenda? 16:10:51 I implemented Jack's change, and added a note regarding when minimization/permitted uses requirements applied 16:10:56 zakim, take up agendum 2 16:10:56 agendum 2. "Tracking in compliance" taken up [from npdoty] 16:11:14 https://www.w3.org/wiki/Privacy/TPWG/Change_Proposal_Tracking_Third_Party_Compliance 16:11:33 justin: how to use the definition of tracking in 3rd party compliance 16:12:31 justin: roy has suggested a change 16:12:42 Brooks has joined #dnt 16:12:59 +Brooks 16:13:06 justin: david tried to merge roy's proposal with his 16:13:45 justin: will send correspondence to the group detailing differences between roy and david's proposal 16:14:22 roy fielding: trying to incorporate tracking definition and use it for determining what a server must do 16:15:06 roy: trying to avoid the issue of whether the server is 1st or 3rd party 16:15:32 q+ 16:15:43 roy: if server can change behavior dynamically, it would say so 16:16:13 roy: trying to define each response that a server could use 16:17:02 roy: might need to include language re "if you say t, but don't include qualifier, then you are not compliant" 16:17:21 justin: also need a link to the TSR? 16:17:24 roy - yes 16:17:40 q? 16:17:43 ack npd 16:17:58 nick - sounds like Roy's goals are same as David's 16:20:06 nick: using tracking definition is more narrow than "data" in general, but may also need some language about what 1st and 3rd parties can/cannot do 16:20:14 roy - my lang applies to both 16:20:50 justin - doesn't matter re 1st or 3rd, b/c tracking definition is across multiple, unrelated iste 16:20:51 sites 16:21:21 there is a section now for "server compliance" which applies to all servers who are parties, fwiw 16:21:33 justin: don't see why we need radical change here 16:22:22 nick - my understanding of Roy's proposal, we would add lang re TSVs and delete 1st and 3rd party compliance sections but keep permitted uses sectoin 16:22:47 justin: what would be allowed under reformulation that is prohibited today? 16:23:27 -Nielsen__Raymond_? 16:23:32 nick: might just need more guidance so there is clarity 16:23:45 justin: I don't think Roy's proposal changes anything 16:24:06 q? 16:24:14 justin: may need more email discussion to flesh out roy's proposal 16:24:15 q? 16:24:42 Zakim, next agendum 16:24:44 agendum 1. "Data Minimization" taken up [from npdoty] 16:24:48 Zakim, take up agendum 3 16:24:48 agendum 3. "Link shortener" taken up [from npdoty] 16:24:50 https://www.w3.org/wiki/Privacy/TPWG/Change_Proposals_on_link_shorteners_and_ID_providers 16:25:00 zakim, drop agendum 1 16:25:00 agendum 1, Data Minimization, dropped 16:25:11 justin: spirited email discussion 16:25:42 +Chapell 16:25:44 justin: example - on twitter, link to NYT article via bitly. Is bitly a 1st party? 16:25:55 Chapell has joined #DNT 16:26:06 Bitly only becomes a first party if the user clicks on the link - direct interaction 16:26:09 justin: identity providers issue 16:26:20 2 old proposals that noone is arguing for 16:26:40 example - if I use Facebook to authenticate me on NYT, is Facebook a 1st party? 16:27:05 justin: I will put out some thoughts to see if anyone wants to engage 16:27:06 -Amy_Colando 16:27:18 q? 16:27:22 justin: could just leave the standard vague here 16:27:37 q+ 16:27:38 justin: probably will go to CFO on link shorteners 16:27:44 Isn't this ultimately up to the party providing the authentication service and their terms with the user - which the user must explicitly consent to in order to use the service? I'd recommend we remain silent on this issue. 16:28:10 nick - is the wiki current? 16:29:05 q? 16:29:07 q- 16:29:31 I think it'll be easier to discuss the link shortener issue once we get concrete text proposals 16:29:38 justin: long standing issue of deidentification 16:29:44 https://www.w3.org/wiki/Privacy/TPWG/Change_Proposal_Deidentification 16:29:45 Zakim, take up agendum 4 16:29:45 agendum 4. "Deidentification" taken up [from npdoty] 16:30:01 justin: 11 proposals in wiki 16:30:35 How is bit.ly/afb different than www.times.com/afb? In both cases the link destination can redirect the user - and in both cases the user can almost always see/discover the domain of the link prior to clicking on it. 16:30:38 justin: current text taken from Peter Swire June draft 16:30:57 justin: tracks closely with text in FTC 2011 privacy report 16:31:20 justin: Dan Auerbach has more prescriptive proposal 16:31:30 justin: david singer proposed minor changes 16:31:50 justin: roy proopsed deleting last 2 clauses 16:32:25 justin: red/yellow/green approach 16:32:53 justin: red = raw data, yelllow = delinked, green = fully deidentified 16:33:14 justin: part of daa proposal from last summer, rejected by w3c staff 16:33:31 correction - rejected by w3c chairs 16:33:44 justin: new proposal from Jack Hobaugh, NAI 16:33:50 s/w3c chairs/TPWG chairs/ 16:33:59 https://www.w3.org/wiki/Privacy/TPWG/Change_Proposal_Deidentification#Expert_review_or_safe_harbor 16:34:46 Jack - based on HIPPA deidentification process 16:35:29 Jack - proposal submitted on behalf of IAB, DMA and NAI 16:36:04 justin: will take a first stab at merging or delineating differences 16:36:14 I want my proposal to be active because it is silly to require a contract exist for the release of anonymous statistics. 16:36:48 justin: good point that contract should not always be required 16:37:13 justin: group participants should review the proposals 16:37:32 q? 16:37:34 it seems like the proposals are FTC-style (or more or less on it) or HIPAA-style 16:37:37 justin: 2 or 3 hard issues remaining, this is one of them 16:37:57 q? 16:38:01 justin: that's all folks 16:38:04 +q 16:38:19 ack WileyS 16:38:31 https://www.w3.org/2002/09/wbs/49311/tpwg-first-parties-170/ 16:38:32 https://www.w3.org/2002/09/wbs/49311/tpwg-third-party-context-219/ 16:38:32 Shane: can someone post a link to the 2 active CFOs and remind that tonight is deadline? 16:38:46 q? 16:38:59 -MECallahan 16:39:01 -WileyS 16:39:01 -Chapell 16:39:02 -[FTC.a] 16:39:02 -hefferjr 16:39:03 -WaltMichel 16:39:03 -Carl_Cargill 16:39:04 -ChrisPedigoOPA 16:39:04 -kulick 16:39:05 -Jeff 16:39:05 -Brooks 16:39:06 -Npdoty 16:39:06 -Fielding 16:39:06 -JackH 16:39:06 -Chris_M 16:39:06 -Wendy 16:39:06 -vincent 16:39:08 -Justin 16:39:13 Zakim, list attendees 16:39:13 As of this point the attendees have been Npdoty, +1.303.949.aaaa, Carl_Cargill, ChrisPedigoOPA, JackH, +1.206.770.aabb, Wendy, Amy_Colando, moneill2, Chris_M, Nielsen__Raymond_?, 16:39:17 Alan_ has left #dnt 16:39:17 ... Justin, WaltMichel, +1.646.654.aacc, hefferjr, +1.206.770.aadd, Jeff, vincent, Fielding, [FTC], WileyS, MECallahan, kulick, Brooks, Chapell 16:39:17 -moneill2 16:39:19 -[FTC] 16:39:20 T&S_Track(dnt)12:00PM has ended 16:39:20 Attendees were Npdoty, +1.303.949.aaaa, Carl_Cargill, ChrisPedigoOPA, JackH, +1.206.770.aabb, Wendy, Amy_Colando, moneill2, Chris_M, Nielsen__Raymond_?, Justin, WaltMichel, 16:39:20 ... +1.646.654.aacc, hefferjr, +1.206.770.aadd, Jeff, vincent, Fielding, [FTC], WileyS, MECallahan, kulick, Brooks, Chapell 16:39:26 rrsagent, please draft the minutes 16:39:26 I have made the request to generate http://www.w3.org/2014/07/09-dnt-minutes.html npdoty 17:37:43 jeff_ has joined #dnt 17:45:19 npdoty has joined #dnt 18:47:41 jeff_ has joined #dnt 19:52:46 kulick has joined #dnt