Transcript Primer on P3P - p3ptoolbox.org

P3P Outreach Project
Joshua Freed <[email protected]>
http://www.neted.org
P3P Outreach Project
• Housed at The Internet Education Foundation in
Washington, DC
– Project of IEF and the W3C
– Core mission: Provide education and support for P3P
implementation by industry
• Industry implementation first, followed by consumer
education
–
–
–
–
Targeting Top 100 Web sites & other key Web sites
National series of P3P Implementation Workshops
Additional outreach to trade associations, conferences, etc.
Congressional and Administration outreach
P3P: W3C's Platform for Privacy
Preferences
The Goal of P3P -- Meet Increasing User Privacy
Demands
• Use the power of the Web to
– enhance notice
– enable better consent mechanisms
– ensure more consumer choice
• Framework for global privacy
• Common vocabulary - translate the legalese
Why Implement P3P?
• Addresses one of the major concerns of Web
users
• Network Advertising Initiative (merging of personallyidentifiable information and click-stream data)
• Makes the privacy issue more transparent
• Encourages dialogue between Web sites and end
users
• Builds confidence in Web use
• Pro-active step by industry toward protecting
privacy
What will be different?
• Today
– Long and complex
privacy policies
– Difficult to compare
– Difficult to follow
complex Web
business relationships
and structures
• P3P Vision
– Automated policies
– Standardized policies
– Each business
declares a policy for
each transaction (even
cookies)
– More consumer
control
Strong Industry & Government
Support
• Private sector backing for P3P as first-step tool
to create common dialogue on privacy
• Bi-partisan support on Capitol Hill for P3P
– Internet Caucus Co-chairs
– Leading Republicans and Democrats
• Administration support for implementation
• FTC views P3P as potentially positive step by
industry on privacy
P3P Implementation Resources
• IEF’s P3P Outreach Project: Created to be the one-stop
industry resource for P3P
–
–
–
–
Help answer the tough implementation questions
Highlight industry leadership on the issue
Implementation guide
Create and serve as central distributor of materials,
including Power Points, workshop videos, white
papers, etc.
P3P Toolbox
• Central clearinghouse for P3P Implementation
information
– Detailed implementation guide on how to P3P-enable your Web
site
– Background papers on P3P
– Resources for specific P3P implementation questions
– Links to P3P tools, including editors, browsers & plug-ins
– Calendar of P3P implementation events
– Outside P3P resources including consultants, W3C, key
government links
• Launching soon at www.p3ptoolbox.org!
P3P Implementations
•
IBM P3P Policy Editor
–
•
AT&T WorldNet Privacy Tool
–
•
•
Parses entire P3P policy in XML and provides users with notice
(beta now, release in 1Q 2002)
Microsoft Internet Explorer 6.0
–
•
Create privacy policies in P3P and human-readable format
(available today)
Focuses on cookies and standardized policies — “nutrition
facts” (available today)
Netscape P3P Implementation in development
for 2002
www.P3Ptoolbox.org coming soon
AT&T WorldNet Privacy Tool
•Beta plug-in for
IE4, IE5, IE6
•Parses XML
statement
•Provides notice
to users
•Does not handle
cookies
AT&T WorldNet Privacy Tool
•Categories based on
data groups of P3P
spec.
•Covers Health,
Financial, Personally
Identifiable & NonPersonally Indentifiable
Information
•Three levels of settings
& custom option
AT&T WorldNet Privacy Tool
Where is P3P today?
• 21% of Top 100 Web Sites are P3P Enabled/In Process
of Enabling
– Including aol.com, cnet.com, earthlink.com, expedia.com,
lycos.com, microsoft.com, yahoo.com, zdnet.com
• Other Leading Companies
– Att.com, hp.com, ibm.com, intel.com, pg.com
• Major Web Advertising Companies
– DoubleClick, Avenue A, WebSideStory
• Senate and House Web Sites
– leahy.senate.gov, allen.senate.gov, www.house.gov/adamsmith
• Leading Internet Non-profits and Advocacy Groups
– cdt.org, neted.org, truste.org, w3.org
And many more….
Next Steps for P3P
 Gradual Deployment in major browsers
 Target Top 100 Web Sites
 Getting beyond blinking VCRs for the Web –
Consumer Education
 Vocabulary use on backend for onward transfer
of data (wireless and other standards)
More information: http://www.w3.org/P3P
Joshua Freed <[email protected]>
http://www.neted.org