Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

All information may be sensitive #420

Merged
merged 3 commits into from
May 8, 2024
Merged

All information may be sensitive #420

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
1583891
remove tail end of section
May 8, 2024
38494ff
rephrase sensitive principle
May 8, 2024
12b9458
Update index.html
darobin May 8, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 5 additions & 17 deletions index.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1476,11 +1476,11 @@
<div class="practice" data-audiences="websites user-agents api-designers">
<p>
<span class="practicelab" id="principle-sensitive">
System designers
should not assume that particular information is or is not sensitive.
Whether information is considered sensitive can vary depending on a
[=person=]'s circumstances and the [=context=] of an interaction, and it can
change over time.
There is broad consensus that some categories of information such as credit card numbers
or precise geolocation are sensitive, but system designers should not assume that other
categories of information are therefore <em>not</em> sensitive. Whether information is
considered sensitive can vary depending on a [=person=]'s circumstances and the [=context=]
of an interaction, and it can change over time.
</span>
</p>
</div>
Expand Down Expand Up @@ -1514,18 +1514,6 @@
data-cite="RFC6772#section-13.5">RFC6772</a>].
</aside>

When considering whether a class of information is likely to be sensitive to
a person, consider at least these factors:

* whether it serves as a persistent [=identifier=] (see
[severity](https://www.w3.org/TR/fingerprinting-guidance/#identifying-fingerprinting-surface-and-evaluating-severity) in
[[[fingerprinting-guidance]]]);
* whether it discloses substantial (including intimate details or inferences)
information about the person using the system or other people;
* whether it can be used to infer particular characteristics that put the person at risk of greater harm;
* whether it enables other threats, like intrusion.


## Data Rights {#data-rights}

<div class="practice" data-audiences="websites user-agents api-designers">
Expand Down