first-party-sets icon indicating copy to clipboard operation
first-party-sets copied to clipboard

[TAG feedback] Handling additional types of ownership/controllership scenarios

Open krgovind opened this issue 3 years ago • 0 comments

The TAG provided feedback here that needs to be considered in the UA Policy Document:

One example might be state-owned enterprises, where a government could have a controlling interest in organisations across a variety of different sectors, and may put them all into a valid FPS and thus be able to track users between them. Common branding in this case might also be expected by the user but identity tracking or other data sharing remains undesirable. Another might be an individual has a controlling interest in a variety of organisations in different sectors, and because of the way company ownership is defined in the relevant jurisdiction can legitimately (in a legal sense) put them in an FPS, which would pass vetting by the enforcement entity, but still result in a tracking network that is harmful to users.

Other alternate company structures I'm thinking about are things like co-operatives which might be owned equally by members. Domains registered by the co-op can be in the same FPS but be used for a variety of purposes and result in harmful tracking.

CC/ @rhiaro

krgovind avatar Nov 18 '21 22:11 krgovind