p3p outreach project joshua freed
TRANSCRIPT
P3P Outreach ProjectP3P Outreach Project• Housed at The Internet Education Foundation in Housed at The Internet Education Foundation in
Washington, DCWashington, DC– Project of IEF and the W3CProject of IEF and the W3C– Core mission: Provide education and support for P3P Core mission: Provide education and support for P3P
implementation by industryimplementation by industry
• Industry implementation first, followed by consumer Industry implementation first, followed by consumer educationeducation– Targeting Top 100 Web sites & other key Web sitesTargeting Top 100 Web sites & other key Web sites– National series of P3P Implementation WorkshopsNational series of P3P Implementation Workshops– Additional outreach to trade associations, conferences, etc.Additional outreach to trade associations, conferences, etc.– Congressional and Administration outreachCongressional and Administration outreach
P3P: W3C's Platform for Privacy P3P: W3C's Platform for Privacy PreferencesPreferences
The Goal of P3P -- Meet Increasing User Privacy The Goal of P3P -- Meet Increasing User Privacy DemandsDemands
• Use the power of the Web toUse the power of the Web to– enhance notice enhance notice – enable better consent mechanismsenable better consent mechanisms– ensure more consumer choiceensure more consumer choice
• Framework for Framework for globalglobal privacy privacy• Common vocabulary - translate the legaleseCommon vocabulary - translate the legalese
Why Implement P3P?Why Implement P3P?
• Addresses one of the major concerns of Web Addresses one of the major concerns of Web usersusers• Network Advertising Initiative (merging of personally-Network Advertising Initiative (merging of personally-
identifiable information and click-stream data)identifiable information and click-stream data)• Makes the privacy issue more transparentMakes the privacy issue more transparent
• Encourages dialogue between Web sites and end Encourages dialogue between Web sites and end usersusers
• Builds confidence in Web useBuilds confidence in Web use• Pro-active step by industry toward protecting Pro-active step by industry toward protecting
privacyprivacy
What will be different?What will be different?
• TodayToday– Long and complex Long and complex
privacy policiesprivacy policies– Difficult to compareDifficult to compare– Difficult to follow Difficult to follow
complex Web complex Web business relationships business relationships and structuresand structures
• P3P VisionP3P Vision– Automated policiesAutomated policies– Standardized policiesStandardized policies– Each business Each business
declares a policy for declares a policy for each transaction (even each transaction (even cookies)cookies)
– More consumer More consumer controlcontrol
Strong Industry & Government Strong Industry & Government SupportSupport
• Private sector backing for P3P as first-step tool Private sector backing for P3P as first-step tool to create common dialogue on privacyto create common dialogue on privacy
• Bi-partisan support on Capitol Hill for P3PBi-partisan support on Capitol Hill for P3P– Internet Caucus Co-chairsInternet Caucus Co-chairs– Leading Republicans and DemocratsLeading Republicans and Democrats
• Administration support for implementationAdministration support for implementation• FTC views P3P as potentially positive step by FTC views P3P as potentially positive step by
industry on privacyindustry on privacy
P3P ImplementationP3P Implementation ResourcesResources
• IEF’s P3P Outreach Project: Created to be the one-stop industry resource for P3P
– Help answer the tough implementation questions– Highlight industry leadership on the issue– Implementation guide– Create and serve as central distributor of materials,
including Power Points, workshop videos, white papers, etc.
P3P ToolboxP3P Toolbox• Central clearinghouse for P3P Implementation Central clearinghouse for P3P Implementation
informationinformation– Detailed implementation guide on how to P3P-enable your Web Detailed implementation guide on how to P3P-enable your Web
sitesite– Background papers on P3PBackground papers on P3P– Resources for specific P3P implementation questionsResources for specific P3P implementation questions– Links to P3P tools, including editors, browsers & plug-insLinks to P3P tools, including editors, browsers & plug-ins– Calendar of P3P implementation eventsCalendar of P3P implementation events– Outside P3P resources including consultants, W3C, key Outside P3P resources including consultants, W3C, key
government linksgovernment links
• Launching soon at www.p3ptoolbox.org!Launching soon at www.p3ptoolbox.org!
P3P ImplementationsP3P Implementations• IBM P3P Policy EditorIBM P3P Policy Editor
– Create privacy policies in P3P and human-readable format (available Create privacy policies in P3P and human-readable format (available today)today)
• AT&T WorldNet Privacy ToolAT&T WorldNet Privacy Tool– Parses entire P3P policy in XML and provides users with notice (beta Parses entire P3P policy in XML and provides users with notice (beta
now, release in 1Q 2002)now, release in 1Q 2002)
• Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 6.0 – Focuses on cookies and standardized policies — “nutrition facts” Focuses on cookies and standardized policies — “nutrition facts”
(available today)(available today)
• Netscape P3P Implementation in development for 2002Netscape P3P Implementation in development for 2002• www.P3Ptoolbox.org coming soonwww.P3Ptoolbox.org coming soon
AT&T WorldNet Privacy ToolAT&T WorldNet Privacy Tool
•Beta plug-in for Beta plug-in for IE4, IE5, IE6IE4, IE5, IE6
•Parses XML Parses XML statementstatement
•Provides notice Provides notice to usersto users
•Does not handle Does not handle cookiescookies
AT&T WorldNet Privacy ToolAT&T WorldNet Privacy Tool
•Categories based on Categories based on data groups of P3P data groups of P3P spec.spec.
•Covers Health, Covers Health, Financial, Personally Financial, Personally Identifiable & Non-Identifiable & Non-Personally Indentifiable Personally Indentifiable InformationInformation
•Three levels of settings Three levels of settings & custom option& custom option
AT&T WorldNet Privacy ToolAT&T WorldNet Privacy Tool
Where is P3P today?Where is P3P today?• 21% of Top 100 Web Sites are P3P Enabled/In Process 21% of Top 100 Web Sites are P3P Enabled/In Process
of Enablingof Enabling– Including aol.com, cnet.com, earthlink.com, expedia.com, Including aol.com, cnet.com, earthlink.com, expedia.com,
lycos.com, microsoft.com, yahoo.com, zdnet.comlycos.com, microsoft.com, yahoo.com, zdnet.com
• Other Leading CompaniesOther Leading Companies– Att.com, hp.com, ibm.com, intel.com, pg.comAtt.com, hp.com, ibm.com, intel.com, pg.com
• Major Web Advertising CompaniesMajor Web Advertising Companies– DoubleClick, Avenue A, WebSideStoryDoubleClick, Avenue A, WebSideStory
• Senate and House Web SitesSenate and House Web Sites– leahy.senate.gov, allen.senate.gov, www.house.gov/adamsmithleahy.senate.gov, allen.senate.gov, www.house.gov/adamsmith
• Leading Internet Non-profits and Advocacy GroupsLeading Internet Non-profits and Advocacy Groups– cdt.org, neted.org, truste.org, w3.orgcdt.org, neted.org, truste.org, w3.org
And many more….And many more….
Next Steps for P3PNext Steps for P3P
Gradual Deployment in major browsersGradual Deployment in major browsers Target Top 100 Web SitesTarget Top 100 Web Sites Getting beyond blinking VCRs for the Web – Getting beyond blinking VCRs for the Web –
Consumer EducationConsumer Education Vocabulary use on backend for onward transfer Vocabulary use on backend for onward transfer
of data (wireless and other standards)of data (wireless and other standards)
More information: http://www.w3.org/P3PMore information: http://www.w3.org/P3P
Joshua Freed <[email protected]>Joshua Freed <[email protected]>
http://www.neted.orghttp://www.neted.org