For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Subscribe to
Computerworld 40 years of the most authoritative source of news and information for IT leaders.
P3P Supporters Struggle to Increase Adoption of Data Privacy Standard
or
Other Privacy Stories
|
|
|
|
November 18, 2002 (Computerworld) -- The Platform for Privacy Preferences (P3P) specification was released in April, and so far nearly 20% of the top 500 Web sites are making use of it. But the rate of new adoptions is now moving glacially—about 1% per month among leading sites.
In addition, the financial services industry, which handles sensitive personal data about customers, has a P3P adoption rate that's much lower than average, according to Ernst & Young LLP.
Individuals and companies backing the online privacy standard developed by the World Wide Web Consortium (W3C) met last week at America Online Inc.'s offices in Dulles, Va., to talk about whether a second version is needed. But they decided instead to further explore some of the issues that are keeping companies from adopting P3P.
"I think people want to focus on the things that have been raised as obstacles to implementation, rather than on new features," said Lorrie Cranor, a principal technical staff member at AT&T Labs in Florham Park, N.J., and chairman of the W3C's P3P specification working group.
One concern is that the specification's "vocabulary" isn't rich enough to allow exact translations of written data privacy policies into an XML-based format that can be read by Web browsers and compared against the preferences set by individual users.
Because of that problem, the Financial Services Roundtable's technology group, the Banking Industry Technology Secretariat (BITS), said in a position paper that it wants the W3C "to state explicitly" that machine-readable P3P statements aren't meant to be legally binding documents. BITS is a Washington-based organization that represents large financial services firms on e-commerce matters.
The legal uncertainty of P3P is a problem, Cranor said, but the W3C "can't give a definitive answer because we don't write the laws."
Only 11% of the top finance and investing Web sites have implemented P3P, said New York-based Ernst & Young, which began reporting on P3P adoption rates in August. In comparison, the consulting firm said, 18% of the 500 Web sites with the highest traffic among U.S. Internet users are using P3P. At the current pace, it would take about eight years for all the top sites to adopt P3P, said Brian Tretick, a principal at Ernst & Young.
One reason for the sluggish rate of adoption is the economy, Tretick said. Another is uncertainty about how the legal system will enforce P3P-based privacy policies, he said.
Over time, the P3P working group may look at the idea of adding "negotiation abilities" into P3P, Cranor said. Currently, P3P-capable Web browsers react to policies on Web sites in a yes/no manner according to user preferences. A negotiation feature would let companies interact with users and, for instance, offer coupons in exchange for personal information. But that would also require flexible privacy policies to handle any negotiation results, Cranor said.
 |
|
|
|
Print this Story |
|
Send Us Feedback |
|
E-mail this Story |
|
Digg this Story |
|
Slashdot this Story |
|
|
|
|
|
|
 |
|
All Zones Application Performance Zone Business Continuity Zone Data Center Management Zone Enterprise-Class Security Zone The File Data Management Zone Grid Computing on Windows Zone Security Management Zone ITIL Best Practices Zone The SAS Zone Storage Virtualization Zone Business Intelligence and Analytics Zone |
 See your link here
|
 |
||||||||
| ||||||||
| ||||||||
| ||||||||
|
Why SaaS is Vital to Email and Web Security
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs.
Get this white paper now!
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
- Microsoft promises four patches next week
- Google gives away home-cooked Web application security scanner
- Storm botnet stages Fourth of July attacks
- More top stories
Security Management ZoneSecurity management is the process of developing a comprehensive data protection plan. It takes into account all potential threats, the existing network environment, the future needs of the organization, and lays out a multi-tiered blueprint to integrate the security technology needed to combat these threats. CDW can help keep your network and data secure. Visit the CDW Security Management Zone now See All Zones
|
 In SecuritySecurity's important, and risk must be addressed, right? Sure, but watch for four signs your policies go a bit overboard. Click here to read the latest column by Jon Espenschied |
Computerworld Technology Briefing: An open-source path to optimal virtualization Looking for a virtualization strategy that offers both the flexibility and reliability to meet the demands of mixed-source environments? Look no further than the fast-emerging open virtualization approach backed by some of the biggest names in enterprise computing. Together they are pointing the way toward higher data center performance without higher costs.Download this briefing
|
CIO
Computerworld
CSO
DEMO
GamePro
Games.net
IDG Connect
IDG World Expo
Infoworld
The Industry Standard
ITworld
JavaWorld
LinuxWorld
MacUser
Macworld
Network World
PC World
Playlist
Copyright © 2008 Computerworld Inc. All
rights reserved. Reproduction in whole or in part in any form or medium
without express written permission of Computerworld Inc. is prohibited.
Computerworld and Computerworld.com and the respective logos are
trademarks of International Data Group Inc.
|
