Skip to content

Conversation

@darobin
Copy link
Member

@darobin darobin commented Sep 16, 2025

This is a small and simple PR that updates GPC to be more anchored in the Privacy Principles now that they have been ratified (along with a couple of typos). This helps ensure a coherent use of privacy across the platform, as intended by the TAG.

(This PR references concepts that were unfortunately not exported correctly; this should be fixed in a few hours as xref republishes. Otherwise, I will make another fix.)


Preview | Diff

index.html Outdated
person is requesting that their data not be sold to or shared with any party other than the
one the person intends to interact with, or to have their data used for cross-context ad targeting,
except as permitted by law.
except as permitted by law. In terms of the W3C's [[[privacy-principles]]], the person is
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Requesting a single controller is not all that the person may be requesting or that the law promises. (In many cases a single large controller can perpetrate more cross-context privacy harms than several small ones, and laws requiring OOPSes do put some obligations on large multi-context controllers)

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I made changes there to clarify, let me know if it works.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

New version looks much better, thank you

index.html Outdated
every website visited by the user. GPC is also not intended to limit a first party’s use of
personal information within the first-party context (such as a publisher targeting ads to a
every website visited by the user. GPC is also not intended to limit a <a data-link-type="dfn" href="https://www.w3.org/TR/privacy-principles/#dfn-first-party-0">first party</a>’s use of
personal information within the first-party <a data-link-type="dfn" href="https://www.w3.org/TR/privacy-principles/#dfn-context">context</a> (such as a publisher targeting ads to a
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

would "same context" be clearer than "first-party context" ? So:

GPC is also not intended to limit a first party’s use of personal information within the same context

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You're right, same context is clearer. See update.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thank you

<h3>Other Jurisdictions and Privacy Rights</h3>
<p>
GPC could potentially be used to indicate rights in other jurisdictions as well. For example, the
GDPR potentially affords data subjects the right to limit the sharing of personal information under
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please don't mix semantic changes into a PR that mostly just adds links. It makes it hard to notice and vet the semantic changes.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's fair of course, but this isn't much of a semantic choice. "Potentially" is repeated two sentences in a row and the existence of this right isn't hypothetical by any measure. Happy to revert this change if you prefer but it's clear that this is a simple phrasing error.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants