Amending P3P for Clearer Privacy Promises

The Platform for Privacy Preferences (P3P) can be a viable tool for organizations to clarify their privacy promises. In this paper, we summarize our experiences and describe some of the problems we have encountered when using P3P. Our main criticisms on P3P are its complicated structure, ambiguities in the specification, and missing guidelines for user agents. We suggest several improvements such as an extended but simplified syntax and a revised consent model that groups opt-in/opt-out choices into one ‘consent block’, which can be associated with multiple statements. Trust and Privacy in Digital Business - TrustBus 03. In 14th Int’l Workshop on Database and Expert Systems Applications (DEXA), Prague, 2003. c IEEE Computer Society

• Type: Conference
• Year: 2003
• Where: DEXAW
• Authors: Günter Karjoth, Matthias Schunter, Els Van Herreweghen, Michael Waidner
• Keywords: Database, DEXAW 2003, IEEE Computer Society, Privacy, Privacy Preferences