15-508 / 17-801 / 19-608 / 95-818: Privacy Policy, Law, and Technology

Homework 7 - due October 14, 2004

Reading Assignment: Cranor - Foreword, 4, 13 (p. 225-235 optional); Hochheiser 2002; Byers 2003 (Optional: Cranor 14)

1. (25 points, 3 for each summary, 2 for each highlight) Write a short summary of each chapter or article in the reading assignment (2-5 sentences each). After each summary (in a separate paragraph) provide a "highlight" for that chapter. This can be something new you learned that you found particularly interesting, a point you would like to discuss further in class, a question the chapter did not fully answer, something you found confusing, a point you disagree with, or anything else you found noteworthy.

2. (25 points) What are your personal privacy preferences?

(a) (5 points) First express them in English as a set of 3 to 5 rules. For example one rule might be "I don't want companies to share my data." If you can't capture all of your privacy preferences in 5 rules, just write down the 5 rules you consider most important.
(b) (8 points) Translate your rules into P3P vocabulary elements (for example, the above rule would translate to "RECIPIENT=ours").
(c) (12 points) Create an APPEL ruleset that represents your set of 3 to 5 privacy preference rules (plus a catch-all rule).

3. (25 points) For ONE of the sites you looked at in homework 6 that is not P3P enabled, create a P3P policy for the site based on information provided in that site's privacy policy. You do not need to try to research or guess anything that is not included in the privacy policy. If the site offers many services that each have their own privacy considerations, you only need to cover the main services in your policy (make a note of what you are omitting, however). If you find that the site's privacy policy does not provide enough information for you to create a complete policy, make a list of questions that would have to be answered to complete the policy. Feel free to use a P3P policy editor to create your P3P policy. Turn in the XML policy file you created, as well as your list of questions.

4. (25 points) Do Part 2 of the Mini Project.