P3P Version 1.0 W3C Recommendation
World Wide Web Consortium Issues P3P 1.0 as a W3C Recommendation
P3P Gives People More Control Over Use of Personal Information On the Web
World Wide Web Consortium. April 16, 2002.
The World Wide Web Consortium (W3C) has issued the Platform for Privacy Preferences (P3P) 1.0 as a W3C Recommendation, representing cross-industry agreement on an XML-based language for expressing Web site privacy policies. Declaring P3P a W3C Recommendation indicates that it is a stable document, contributes to Web interoperability, and has been reviewed by the W3C Membership, who favor its widespread adoption. P3P was designed by a Working Group composed of privacy advocates, Web technology leaders, data protection commissioners, and global ecommerce companies.
"Web site privacy policies are good, but understanding privacy policies is better," remarked Tim Berners-Lee, W3C Director. "P3P serves as the keystone to resolving larger issues of both privacy and security on the Web."
P3P Helps People Make Informed Choices
The Platform for Privacy Preferences Project (P3P) 1.0, developed by W3C, provides a standard, simple, automated way for users to gain more control over the use of personal information on Web sites they visit.
At its most basic level, P3P is a standardized set of multiple-choice questions, covering all the major aspects of a Web site's privacy policies. Taken together, the answers present a machine readable version of the site's privacy policy, a clear snapshot of how a site handles personal information about its users. P3P-enabled Web sites make this information available in a standard, machine-readable format.
P3P enabled browsers can "read" this snapshot automatically and compare it to the consumer's own set of privacy preferences. P3P enhances user control by putting privacy policies where users can find them, in a form users can understand, and, most importantly, enables users to act on what they see.
"With P3P we are enabling the development of a whole new class of Web tools and services that will help users protect their privacy while streamlining ecommerce transactions," explained Daniel J. Weitzner, W3C Technology and Society Domain Leader, "The fact that the Web now has a standard language for describing privacy practices will enable a new level of transparency in Web-based interactions. The added facility for dealing with privacy issues will be especially important with mobile and other new forms of Web access."
P3P Results from International Cooperation
P3P is created through the consensus-based W3C Process. Participants in the development of P3P represent leadership in industry, government, and research. Chaired by Dr. Lorrie Cranor of AT&T Labs-Research; they include Akamai Technologies; American Express; America Online, Inc.; AT&T; AvenueA; University of California, Irvine; Center for Democracy and Technology, USA; Charles Schwab Consultants; Citigroup; Doubleclick Inc.; Electronic Network Consortium (ENC), Japan; Engage; Ericsson; GMD/Fraunhofer; Hewlett Packard Company; IBM; IDcide; Independent Center for Privacy Protection Schleswig-Holstein, Germany; Internet Education Foundation; Joint Research Center of the European Commission; Microsoft; NCR; NEC; Ontario Office of Information and Privacy; PrivacyBank; along with invited experts. Many organizations have provided statements of support, some are announcing implementations.
"International representation was key to providing a privacy vocabulary that meets diverse needs and requirements," explained Rigo Wenning, W3C Privacy Activity Lead. "The Working Group also benefitted from the joint presence of industry, public authorities and academics. The design of P3P takes into account the multitude of privacy frameworks all over the world."
Next Steps for P3P Focus on Implementation
W3C's lists of P3P-enabled Web sites and P3P software continue to grow, including both plug-ins and browser-based implementations, P3P policy generators, and a P3P validator.
W3C's P3P Working Group plans to continue to provide resources and assistance to implementers who wish to make their sites P3P compliant. In addition to the P3P homepage, other useful resources include p3ptoolbox.org in cooperation with the Internet Education Foundation, and the JRC P3P demonstration and research platform. W3C continues to maintain discussion fora for implementers and those interested in P3P.
About the World Wide Web Consortium (W3C)
The W3C was created to lead the Web to its full potential by developing common protocols that promote its evolution and ensure its interoperability. It is an international industry consortium jointly run by the MIT Laboratory for Computer Science (MIT LCS) in the USA, the National Institute for Research in Computer Science and Control (INRIA) in France and Keio University in Japan. Services provided by the Consortium include: a repository of information about the World Wide Web for developers and users, and various prototype and sample applications to demonstrate use of new technology. To date, nearly 500 organizations are Members of the Consortium. For more information see http://www.w3.org/.
P3P is a registered trademark of the World Wide Web Consortium.
This press release and 20 testimonials in support of P3P are available on the Web at:
W3C Contacts
World Wide Web Consortium
Contact Americas, Australia
Janet Daly
Tel: +1.617.253.5884
Tel: +1.617.253.2613
Email: janet@w3.org
Contact Europe
Marie-Claire Forgue
Tel: +33.492.38.75.94
Email: mcf@w3.org
Contact Asia
Saeko Takeuchi
Tel: +81.466.49.1170
Email: saeko@w3.org
Prepared by Robin Cover for The XML Cover Pages archive. See "Platform for Privacy Preferences (P3P) Project."
