167 2003-03-10 21:28:49 +0000 explanation of identified, identifiable, and linked 2008-12-02 22:41:27 +0000 1 1 1 Unclassified P3P Clarifications needed unspecified Other other RESOLVED FIXED P2 normal P3P1.1 172 1 lorrie ari oldest_to_newest 403 0 lorrie 2003-03-10 21:28:49 +0000 Use of the terms identified, identifiable, and linked are still somewhat confusing in the spec. We need additional explanations and clarifications of the meanings of these terms and the history of why we are using them this way. Some of this might be added to the 1.1 spec or included in an appendix; however, we should consider drafting a W3C Note on this. This will be assigned to Ari as soon as he creates an account. 468 1 rigo 2003-04-30 12:18:11 +0000 <quote>all information linked to a cookie</quote> in section 4 Remarks: First, we don't require that for full policies. This sounds strange to me. Second, as we use linking all the time for the URI to the human readable policy, it might be good to change the wording of linked here to: also data that shares the same identifier with the cookie or data where the cookie serves as a common identifier. For identified vs identifiable, I think there was an assumption that we understand identifiable as laid out in the EU-Directive whereas 26: <quote> <a href="http://europa.eu.int/smartapi/cgi/sga_doc?smartapi!celexapi!prod! CELEXnumdoc&lg=EN&numdoc=31995L0046&model=guichett">link to directive</a> (26) Whereas the principles of protection must apply to any information concerning an identified or identifiable person; whereas, to determine whether a person is identifiable, account should be taken of all the means likely reasonably to be used either by the controller or by any other person to identify the said person; whereas the principles of protection shall not apply to data rendered anonymous in such a way that the data subject is no longer identifiable; whereas codes of conduct within the meaning of Article 27 may be a useful instrument for providing guidance as to the ways in which data may be rendered anonymous and retained in a form in which identification of the data subject is no longer possible; while identified means, that one has already made (identified) the person, e.g. stored all information in a database together with personal information so that the whole record can easily be digged up. Rigo 469 2 lorrie 2003-04-30 13:44:20 +0000 Actually, we do require this for full policies if the full policy makes disclosures about cookies. 553 3 rigo 2003-06-23 09:28:17 +0000 But we don't require it for any uniqueID. We included the information linked to a cookie to make clear that the property of a cookie as an identifier in a database table was the technics mostly used and the information in the cookie itself were not really relevant. But this counts for any uniqueID. So perhaps the Specification might be inconsistent to this. 554 4 18 ari 2003-06-23 12:37:46 +0000 Created attachment 18 Draft explanation for Inclusion in next update 1191 5 rigo 2004-01-21 05:00:21 +0000 The final wording is not the one in the attachement, this is the initial wording. The final wording is of September 2003 and in the mailing-list. I will put together a consolidated draft and put it here. http://lists.w3.org/Archives/Public/public-p3p-spec/2003Sep/0003.html and the following thread. 1192 6 rigo 2004-01-21 06:00:43 +0000 Consolidated Draft at: http://www.w3.org/P3P/2003/09-identifiable.html 1201 7 rigo 2004-01-22 09:43:36 +0000 The text is now in Annex 8 of the P3P 1.1 Specification 18 2003-06-23 12:37:46 +0000 2003-06-23 12:37:46 +0000 Draft explanation for Inclusion in next update [Bug 167] explanation of identi text/plain 4518 ari SGVyZSBpcyBteSBkcmFmdCB0ZXh0IGZvciBhZGRyZXNzaW5nIHRoZSBjb25mdXNpb24gYXJvdW5k IGlkZW50aXR5IHRlcm1zIGluIHRoZSBzcGVjLg0NDQ1odHRwOi8vd3d3LnczLm9yZy9CdWdzL1B1 YmxpYy9zaG93X2J1Zy5jZ2k/aWQ9MTY3DQ0NDUlkZW50aXR5IERlZmluaXRpb25zIGluIHRoZSBQ M1AgU3BlY2lmaWNhdGlvbg0NSW4gcHJpdmFjeSByZWd1bGF0aW9ucywgZ3VpZGVsaW5lcyBhbmQg cGFwZXJzIGFib3V0IHByaXZhY3kgYSB2YXJpZXR5IG9mIHRlcm1zIGFyZSB1c2VkIHRvIGRlc2Ny aWJlIGRhdGEgdGhhdCBpZGVudGlmaWVzIGFuIGluZGl2aWR1YWwgdG8gdmFyeWluZyBkZWdyZWVz LiAgU29tZSBjb21tb24gdGVybXMgc3VjaCBhcyDScGVyc29uYWxseSBpZGVudGlmaWFibGUgaW5m b3JtYXRpb24gKFBJSSnTIGFyZSBvZnRlbiBub3QgZGVmaW5lZCBvciB0aGUgY2F1c2UgZm9yIGhl YXRlZCBkZWJhdGUuICBJbiBkaWZmZXJlbnQgZG9jdW1lbnRzLCDSaWRlbnRpdHnTIGNhbiBiZSB0 aWVkIHRvOg0NMSkgaG93IHRoZSBpbmZvcm1hdGlvbiBjYW4gYmUgb3IgaXMgYmVpbmcgdXNlZCwN MikgaG93IHRoZSBpbmZvcm1hdGlvbiBpcyBzdG9yZWQsIG9yDTMpIHRoZSB0eXBlIG9mIGluZm9y bWF0aW9uLg0NVGhlIFAzUCBTcGVjaWZpY2F0aW9uIFdvcmtpbmcgR3JvdXAgdHJpZWQgdG8gY2Fw dHVyZSBhbGwgdGhyZWUgb2YgdGhlc2UgaWRlYXMgc28gdGhhdCBkaWZmZXJlbnQgaW1wbGVtZW50 ZXJzIGFuZCB1c2VycyBjYW4gbWFrZSBkZWNpc2lvbnMgYmFzZWQgb24gdGhlIGltcG9ydGFuY2Ug dGhleSBwbGFjZSBvbiB0aGVzZSB2YXJpb3VzIGRlZmluaXRpb25zIG9mIGlkZW50aXR5LiAoMSkN DUlkZW50aXR5IFRocm91Z2ggVXNhZ2UgKNJpZGVudGlmaWVk0yBkYXRhKQ0NVGhlIG1vc3QgY29t bW9uIHRlcm0gaW4gdGhlIHNwZWNpZmljYXRpb24gaXMg0mlkZW50aWZpZWQgZGF0YdMgYW5kIGZv Y3VzZXMgb24gaG93IHRoZSBpbmZvcm1hdGlvbiBjYW4gYmUgb3IgaXMgYmVpbmcgdXNlZC4NDdJJ ZGVudGlmaWVkIGRhdGHTIGlzIGluZm9ybWF0aW9uIHRoYXQgcmVhc29uYWJseSBjYW4gYmUgdXNl ZCBieSB0aGUgZGF0YSBjb2xsZWN0b3IgdG8gaWRlbnRpZnkgYW4gaW5kaXZpZHVhbC4gIEFkbWl0 dGVkbHksIHRoaXMgaXMgYSBzb21ld2hhdCBzdWJqZWN0aXZlIHN0YW5kYXJkLiAgRm9yIGV4YW1w bGUsIGEgZGF0YSBjb2xsZWN0b3Igc3RvcmluZyBJbnRlcm5ldCBQcm90b2NvbCAoSVApIGFkZHJl c3NlcyAgKHdoaWNoIGNhbiBiZSBjcmVhdGVkIGR5bmFtaWNhbGx5IG9yIGNvdWxkIGJlIHN0YXRp YyBhbmQgdGhlcmVmb3JlIHRpZWQgdG8gYSBwYXJ0aWN1bGFyIGNvbXB1dGVyIHVzZWQgYnkgYSBz aW5nbGUgaW5kaXZpZHVhbCkgc2hvdWxkIGNvbnNpZGVyIHRoZSBJUCBhZGRyZXNzINJpZGVudGlm aWVkIGRhdGHTIG9ubHkgd2hlbiBhbiBhdHRlbXB0IGlzIG1hZGUgdG8gdGllIHRoZSBleGFjdCBh ZGRyZXNzZXMgdG8gcGFzdCByZWNvcmRzIG9yIHdvcmsgd2l0aCBvdGhlcnMgdG8gaWRlbnRpZnkg dGhlIHNwZWNpZmljIGluZGl2aWR1YWwgb3IgY29tcHV0ZXIgb3ZlciBhIGxvbmcgcGVyaW9kIG9m IHRpbWUuICBJbiB0aGUgbW9yZSBjb21tb24gY2FzZSwgd2hlcmUgZGF0YSBjb2xsZWN0b3JzIHVz ZSBJUCBhZGRyZXNzaW5nIGluZm9ybWF0aW9uIGluIHRoZSBhZ2dyZWdhdGUgb3IgbWFrZSBubyBh dHRlbXB0IHRvIHRpZSB0aGUgSVAgYWRkcmVzcyB0byBhIHNwZWNpZmllZCBpbmRpdmlkdWFsIG9y IGNvbXB1dGVyIG92ZXIgYSBsb25nIHBlcmlvZCBvZiB0aW1lLCBJUCBhZGRyZXNzZXMgYXJlIG5v dCBjb25zaWRlcmVkIGlkZW50aWZpZWQgZXZlbiB0aG91Z2ggaXQgaXMgcG9zc2libGUgZm9yIHNv bWVvbmUgKGVnLCBsYXcgZW5mb3JjZW1lbnQgYWdlbnRzIHdpdGggcHJvcGVyIHN1YnBvZW5hIHBv d2VycykgdG8gaWRlbnRpZnkgdGhlIGluZGl2aWR1YWwgYmFzZWQgb24gdGhlIHN0b3JlZCBkYXRh Lg0NDUlkZW50aXR5IFRocm91Z2ggU3RvcmFnZSAo0m5vbi1pZGVudGlmaWFibGXTIGFuZCDSbGlu a2Vk0yBkYXRhKQ0NVGhlIHdvcmtpbmcgZ3JvdXAgYWxzbyBmZWx0IHRoYXQgZGF0YSBjb2xsZWN0 b3JzIHNob3VsZCBiZSBhYmxlIGFja25vd2xlZGdlIHdoZW4gdGhleSBtYWtlIHNwZWNpZmljIGF0 dGVtcHRzIHRvIGFub255bWl6ZSB3aGF0IHdvdWxkIG90aGVyd2lzZSBiZSBpZGVudGlmaWFibGUg aW4gaXRzIHN0b3JhZ2UuDQ1UaGUgdGVybSDSbm9uLWlkZW50aWZpYWJsZdMgZGF0YSByZWZlcnMg dG8gaG93IHRoZSBpbmZvcm1hdGlvbiBpcyBzdG9yZWQuICBGb3IgZXhhbXBsZSwgYSBkYXRhIGNv bGxlY3RvciBjb2xsZWN0aW5nIGFuZCBzdG9yaW5nIElQIGFkZHJlc3NlcyBidXQgbm90IHVzaW5n IHRoZW0gc2hvdWxkIE5PVCBjYWxsIHRoaXMgZGF0YSAibm9uLWlkZW50aWZpYWJsZSIgZXZlbiBp biB0aGUgY29tbW9uIGNhc2Ugd2hlcmUgdGhleSBoYXZlIG5vIHBsYW5zIHRvIGlkZW50aWZ5IGFu IGFjdHVhbCBpbmRpdmlkdWFsIG9yIGNvbXB1dGVyLiBIb3dldmVyLCBpZiBhIFdlYiBzaXRlIGNv bGxlY3RzIElQIGFkZHJlc3NlcywgYnV0IGFjdGl2ZWx5IGRlbGV0ZXMgYWxsIGJ1dCB0aGUgbGFz dCBmb3VyIGRpZ2l0cyBvZiB0aGlzIGluZm9ybWF0aW9uIGluIG9yZGVyIHRvIGRldGVybWluZSBz aG9ydCB0ZXJtIHVzZSwgYnV0IGluc3VyZSB0aGF0IGEgcGFydGljdWxhciBpbmRpdmlkdWFsIG9y IGNvbXB1dGVyIGNhbm5vdCBiZSBjb25zaXN0ZW50bHkgaWRlbnRpZmllZCwgdGhlbiB0aGUgZGF0 YSBjb2xsZWN0b3IgY2FuIGFuZCBzaG91bGQgY2FsbCB0aGlzIGluZm9ybWF0aW9uICJub24taWRl bnRpZmlhYmxlLiIgIEFsc28sIG5vbi1pZGVudGlmaWFibGUgY2FuIGJlIHVzZWQgaW4gY2FzZXMg d2hlcmUgbm8gaW5mb3JtYXRpb24gaXMgYmVpbmcgY29sbGVjdGVkIGF0IGFsbC4gIFNpbmNlIG1v c3QgV2ViIHNlcnZlcnMgYXJlIGRlc2lnbmVkIHRvIGtlZXAgV2ViIGxvZ3MgZm9yIG1haW50ZW5h bmNlLCB0aGlzIHdvdWxkIG1vc3QgbGlrZWx5IG1lYW4gdGhhdCB0aGUgZGF0YSBjb2xsZWN0b3Ig aGFzIHRha2VuIHNwZWNpZmljIGVmZm9ydHMgdG8gZW5zdXJlIHRoZSBhbm9ueW1pdHkgb2YgdXNl cnMuDQ1VbmRlciB0aGUgYWJvdmUgZGVmaW5pdGlvbnMsIGEgbG90IG9mIGluZm9ybWF0aW9uIGNv dWxkIGJlINJpZGVudGlmaWFibGXTIChub3Qgc3BlY2lmaWNhbGx5IG1hZGUgYW5vbnltb3VzKSwg YnV0IG5vdCDSaWRlbnRpZmllZNMgKHJlYXNvbmFibHkgYWJsZSB0byBiZSB0aWVkIHRvIGFuIGlu ZGl2aWR1YWwgb3IgY29tcHV0ZXIpLg0NU2ltaWxhcmx5LCB0aGUgdGVybSDSbGlua2Vk0yByZWZl cnMgdG8gaG93IGluZm9ybWF0aW9uIGlzIGJlaW5nIHN0b3JlZCBpbiBjb25uZWN0aW9uIHdpdGgg YSBjb29raWUuIEFsbCBkYXRhIGluIGEgY29va2llIG9yIGxpbmtlZCB0byBhIHBhcnRpY3VsYXIg dXNlciBtdXN0IGJlIGRpc2Nsb3NlZCBpbiB0aGUgY29va2ll1XMgcG9saWN5LiBVc2luZyB0aGUg dGVybWlub2xvZ3kgYWJvdmUsIGlmIHRoZSBkYXRhIGNvbGxlY3RvciBjb2xsZWN0cyDSaWRlbnRp ZmlhYmxl0yBpbmZvcm1hdGlvbiBhYm91dCB0aGUgdXNlciBpdCBpcyBnZW5lcmFsbHkg0mxpbmtl ZNMgZGF0YS4NDUlkZW50aXR5IFRocm91Z2ggSW5mb3JtYXRpb24gVHlwZQ0NVGhlIFdvcmtpbmcg R3JvdXAgZmVsdCB0aGF0IGRpZmZlcmVudCB1c2VyIGFnZW50IGltcGxlbWVudGF0aW9ucyBjb3Vs ZCBiZSBjcmVhdGVkIHRvIGZvY3VzIG9uIGRpZmZlcmVudCBjb25jZXJucyBhcm91bmQgZGF0YSB0 eXBlLiAgVGhlcmVmb3JlLCB0aGUgd29ya2luZyBncm91cCBlbmFibGVkIHRoZSBjcmVhdGlvbiBv ZiBhIHJvYnVzdCBkYXRhIHNjaGVtYSBpbmNsdWRpbmcgYnJvYWQgY2F0ZWdvcmllcyBvZiBpbmZv cm1hdGlvbiB0aGF0IG1heSBiZSBjb25zaWRlcmVkIHNlbnNpdGl2ZSBieSBjZXJ0YWluIHVzZXIg Z3JvdXBzLiAgVGhlIFdvcmtpbmcgR3JvdXAgaG9wZXMgdGhhdCBhIGRpdmVyc2Ugc2V0IG9mIHVz ZXIgYWdlbnRzIHdpbGwgYmUgY3JlYXRlZCB0byBhbGxvdyB1c2VycyB0aGUgYWJpbGl0eSB0byBt YWtlIGlkZW50aXR5IGRlY2lzaW9ucyBiYXNlZCBvbiBzcGVjaWZpYyBjb2xsZWN0aW9ucyBhbmQg dHlwZXMgb2YgY29sbGVjdHMgaWYgdGhleSBkZXNpcmUgdG8gZG8gc28uICBGb3IgZXhhbXBsZSwg YSB1c2VyIGFnZW50IGNvdWxkIGFsbG93IHVzZXJzIHRvIG9wdCB0byBiZSBwcm9tcHRlZCB3aGVu IG1lZGljYWwgb3IgZmluYW5jaWFsIGlkZW50aWZpZXIgaXMgYmVpbmcgY29sbGVjdGVkLCBpbmRl cGVuZGVudCBvZiBob3cgdGhhdCBpbmZvcm1hdGlvbiBpcyBiZWluZyB1c2VkLg0NKDEpyiAgTW9y ZSBpbmZvcm1hdGlvbiBvbiB0aGUgZGViYXRlIGFuZCB0aGUgZGVmaW5pdGlvbnMgY2FuIGJlIGZv dW5kIGluIExvcnJpZSBGYWl0aCBDcmFub3LVcyBib29rIFdlYiBQcml2YWN5IHdpdGggUDNQLCBP 1VJlaWxseSwgMjAwMi4N