|
Published Articles >> Table of Contents >> Abstract
November-December 2003 (Vol. 1, No. 6)
pp. 50-55
P3P: Making Privacy Policies More Useful
Lorrie Faith Cranor, AT&T Labs-Research
Full Article Text:
   
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/MSECP.2003.1253568
Send link to a friend
| Abstract |
|
This article provides an introduction to the World Wide Web Consortium's Platform for Privacy Preferences (P3P) specification. P3P provides a standard way for Web sites to convey their privacy policies in a computer-readable format. The article describes the motivations behind P3P and how it works. In addition, it includes an overview of P3P-related software, discusses P3P adoption, and describes future P3P standardization efforts. Finally, the article discusses critics' views of P3P and discusses the standards' potential impacts.
|
 References
|
[1] Harris Interactive, Privacy Leadership Initiative: Privacy Notices Research Final Results, Dec. 2001; www.ftc.gov/bcp/workshops/glb/supporting harris%20results.pdf.
[2] W. Rodger,"Privacy Isn't Public Knowledge: Online Policies Spread Confusion with Legal Jargon," USA Today,1 May 2003, p. 3D.
[3] J. Turow,Americans&Online Privacy: The System is Broken, Annenberg Public Policy Ctr., Univ. of Pennsylvania, June 2003; www.asc.upenn.edu/usr/jturow/ internet-privacy-report 36-page-turow-version-9.pdf .
[4] L. Cranor et al., The Platform for Privacy Preferences 1.0 (P3P1.0) Specification, World Wide Web Consortium Recommendation, April 2002; www.w3.org/TRP3P/.
[5] L. Cranor,P. Guduru, , and M. Arjula,"User Interfaces for Privacy Agents," submitted for publication, 2003.
[6] L. Cranor,M. Arjula,, and P. Guduru,"Use of a P3P User Agent by Early Adopters," Proc. ACM Workshop on Privacy in the Electronic Society, ACM Press, 2002, pp. 1-10.
[7] L. Cranor,M. Langheinrich,, and M. Marchiori,"A P3P Preference Exchange Language 1.0 (APPEL 1.0)," World Wide Web Consortium working draft, April 2002; www.w3.org/TRP3P-preferences.html.
[8] L. Cranor,Web Privacy with P3P, O'Reilly&Associates, 2002; http:/p3pbook.com/.
[9] S. Byers,L. Cranor,, and D. Kormann,"Automated Analysis of P3P-Enabled Web Sites," Proc. 5th Int'l Conf. Electronic Commerce (ICEC2003), ACM Press, 2003; http://lorrie.cranor.org/pubsicec03.html .
[10] B. Krishnamurthy and M. Arlitt,"PRO-COW: Protocol Compliance on the Web—A Longitudinal Study," Proc. Usenix Symp. Internet Technologies and Systems (USITS 2001), Usenix, 2001, pp. 109-122; www.usenix.org/events/usits01krishnamurthy.html .
[11] R. Agrawal et al., "An XPath-based Preference Language for P3P," Proc. 12th Int'l Conf. World Wide Web, ACM Press, 2003, pp. 629-639.
[12] P. Ashley,C. Powers,, and M. Schunter,"From Privacy Promises to Privacy Management: A New Approach for Enforcing Privacy Throughout an Enterprise," Proc. 2002 Workshop on New Security Paradigms, ACM Press, 2002, pp. 43-50; http://doi.acm.org/10.1145844102.844110.
[13] G. Karjoth,M. Schunter,, and E. Van Herreweghen,"Translating Privacy Practices into Privacy Promises—How to Promise What You Can Keep," Proc. 4th IEEE Int'l Workshop on Policies for Distributed Systems and Networks, IEEE Press, 2003, pp. 135-146.
[14] H. Hochheiser,"The Platform for Privacy Preference as a Social Protocol: An Examination Within the US Policy Context," ACM Trans. Internet Technology, vol. 2, no. 4, 2002, pp. 276-306.
[15] L. Cranor and R. Wenning,"Why P3P Is a Good Tool for Consumers and Companies," GigaLaw.com, 2002, www.gigalaw.com/articles/2002cranor-2002-04.html .
|
 Additional Information
|
Index Terms- privacy, privacy policy, P3P, XML
Citation:
Lorrie Faith Cranor,
"P3P: Making Privacy Policies More Useful,"
IEEE Security and Privacy,
vol. 01,
no. 6,
pp. 50-55,
November-December,
2003
|
|
RSS Feed