- P3P applies to Web (HTTP) information, partial application to HTML forms
- Agreements are end-to-end, and eavesdropping is handled by TLS (SSL) or IPSec
- Uses HTTP1.1 extension mechanism but should working through HTTP1.0 proxies
- XML attributes may be of arbitrary length
