[WG-P3] Anna Slomovic's Follow up thread (RE: IAWG P3 Agendas going into Berlin)

Susan Landau susan.landau at privacyink.org
Sun May 8 21:07:05 EDT 2011


On 5/8/11 9:04 PM, Anna Slomovic/Equifax wrote:
> I disagree. Notice has been part of privacy work since the first work on Fair Information Practices in the early 1970s. It is part of every privacy framework of which I am aware anywhere in the world. I would urge this group not to ignore the work of decades done by the privacy community without a very good reason.
>
> I do not believe that we want to measure Principles. AICPA and CICA have come up with a framework for measuring individual principles, and I sent it around. This is not, in my view, where we want to go. We want to come up with composite measures, like LOA, which include multiple principles and concepts, but are easy for people to understand.
I think Anna is completely right here.  Otherwise we run the risk of a 
P3P situation.
> i think it's pretty easy to explain LOA (the extent to which I am sure in someone's claimed identity) without going into details about levels of complexity in passwords. That's what we should be after.
>
Susan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://kantarainitiative.org/pipermail/wg-p3/attachments/20110508/5b6f3cb6/attachment.html 


More information about the WG-P3 mailing list