3 ms·
>>Question to that guy: What act specifically would establish that trust? I'm "that guy", and yeah I feel ya about "most press statements". Anyway, here's what
by jordanmitchell 7y ago
>>Question to that guy: What act specifically would establish that trust?
I'm "that guy", and yeah I feel ya about "most press statements". Anyway, here's what we think would be a good start in establishing trust ... do you agree?
1. Consumer visits a website or app they like.
2. Website/app offers standardized privacy preferences/controls that are easy to understand, and apply globally.
3. Consumer indicates their preferences, realistically based on their inherent trust in the website/app ... could be anything from ghost mode ("no tracking at all") to limited ad targeting ("ok, you can retarget me for 3 days only, that's it") to measurement only ("count me as a distinct user, but no ad tracking, profiling, etc.")
4. those preferences are propagated to any/all downstream parties working on behalf of the website/app or the advertiser, all of whom have to submit system-level log file samples daily (a blood sample, if you will) to a central processing system NOT governed wholly by ad industry
5. ongoing data analysis, with data exhaust, provides for open accountability
6. oh, and consumer empirically sees that their preferences are being respected
We'd also love to see a significant reduction in the amount of JS and third-party requests. But these are all hard problems to solve while also maintaining an open web/ecosystem.
- dsr_ 7y agoNo, I don't agree. Here's what I want: Entity visits a website. The website logs whatever they want, subject to GDPR-style rules. They never send the full logs to a third party, and never send individual information, anonymized or not, without a specific business reason that benefits the entity. Entity creates an account on the website. Now the website gets to display a privacy policy that conforms to GDPR-style rules, and creates the account only with explicit informed consent from the entity. The website specifically notes the jurisdiction in which they operate and the contact method for complaints, inquiries, deletions, and so forth. No central processing systems, no unified trackers, no cross-site data analysis.
- jordanmitchell 7y agoSeems like you're suggesting that, to establish YOUR trust, either the website does not use any third-party vendors or services (in the delivery of the experience to you), or they use third-party vendors/services but do not send them any data ...? If so, in this age of open web services and distributed systems/infrastructure, are either of these scenarios reasonable to expect?
- Arcsech 7y agoThis comment seems rather disingenuous to me, and puts words in the mouth of the grandparent post. It’s not that my data should not be sent to any third parties ever, it’s that (as the GP said) my should not be sent to any third parties without a specific business reason that benefits me. I do not consider any form of ad targeting to be of benefit to me. Therefore, my data should not be sent to any third parties for that purpose.