15-508 / 17-801 / 19-608 / 95-818: Privacy Policy, Law, and Technology

Homework 7 - due October 14, 2004

Reading Assignment: Cranor - Foreword, 4, 13 (p. 225-235 optional); Hochheiser 2002; Byers 2003 (Optional: Cranor 14)

1. (25 points, 3 for each summary, 2 for each highlight) Write a short summary of each chapter or article in the reading assignment (2-5 sentences each). After each summary (in a separate paragraph) provide a "highlight" for that chapter. This can be something new you learned that you found particularly interesting, a point you would like to discuss further in class, a question the chapter did not fully answer, something you found confusing, a point you disagree with, or anything else you found noteworthy.

2. (25 points) What are your personal privacy preferences?

3. (25 points) For ONE of the sites you looked at in homework 6 that is not P3P enabled, create a P3P policy for the site based on information provided in that site's privacy policy. You do not need to try to research or guess anything that is not included in the privacy policy. If the site offers many services that each have their own privacy considerations, you only need to cover the main services in your policy (make a note of what you are omitting, however). If you find that the site's privacy policy does not provide enough information for you to create a complete policy, make a list of questions that would have to be answered to complete the policy. Feel free to use a P3P policy editor to create your P3P policy. Turn in the XML policy file you created, as well as your list of questions.

4. (25 points) Do Part 2 of the Mini Project.