Skip to content

Commit 014831f

Browse files
authored
Say the suggestions for handling new ancillary personal data are examples. (#435)
1 parent d27ae18 commit 014831f

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

index.html

+5-5
Original file line numberDiff line numberDiff line change
@@ -1405,8 +1405,8 @@
14051405

14061406
Some [=ancillary uses=] don't require their data to be related to a person, but
14071407
the useful aggregations across many people are difficult to design into a web
1408-
API, or they might require new technologies to be invented. API designers have a
1409-
few choices in this situation:
1408+
API, or they might require new technologies to be invented. Some ways API
1409+
designers can handle this situation include:
14101410

14111411
* Sometimes an API can [=de-identify=] the data instead, but this is difficult
14121412
if a web page has any input into the data that's collected.
@@ -1417,9 +1417,9 @@
14171417
<a href="#unavoidable-information-exposure">unavoidably</a> revealed
14181418
by <a data-cite="dom#interface-event">DOM event</a> timing.
14191419
* [=User agents=] can ask their users' permission to enable this class of API.
1420-
To reduce [=privacy labor=], a [=user agent=] could use a first-run dialog to
1421-
ask the user whether they generally support sharing this data, rather than
1422-
asking for each use of the APIs.
1420+
This risks increasing [=privacy labor=], but as an example, a [=user agent=]
1421+
could use a first-run dialog to ask the user whether they generally support
1422+
sharing this data, rather than asking for each use of the APIs.
14231423

14241424
If an API had to make one of these choices, and then something else about the
14251425
API needs to change, designers should consider replacing the whole API with one

0 commit comments

Comments
 (0)