diff --git a/ua_policy_proposal.md b/ua_policy_proposal.md index 71bc21d..9da0ec9 100644 --- a/ua_policy_proposal.md +++ b/ua_policy_proposal.md @@ -59,11 +59,11 @@ For each element of the First Party Set policy, we propose an enforcement method A group identity that is easily discoverable by a users UI treatment (and co-branding in some cases)2 -None (solely the browser's and site author's responsibility) +Conduct user surveys to determine if common identity is understandable to users3 Common Privacy Policy -Technical checks3 +Technical checks4 Performs technical check to ensure Privacy Policy is the same across all sites in the same set @@ -78,7 +78,9 @@ For each element of the First Party Set policy, we propose an enforcement method + sites within the set are prominently co-branded + sites within the set prominently disclose to users the parent company owner/operator (via a notice one click away from the home page, pop-up, or other method) -3 Site authors must ensure that a hyperlink to the common group privacy policy is placed on the default page of each domain listed on their proposed set; such that an automated technical check can be used to verify its presence. +3 The IEE will conduct some user surveys on randomly selected sets, for calibration, along with surveys as needed in order to handle reports of invalid sets. + +4 Site authors must ensure that a hyperlink to the common group privacy policy is placed on the default page of each domain listed on their proposed set; such that an automated technical check can be used to verify its presence. Additional roles of enforcement entity: