4
edits
Changes
Adding section for eligibility for default-on data collection
# '''Category 4 “Highly sensitive data”''' means information that directly identifies a person, or if combined with other data could identify a person.
#* Examples include e-mail, usernames, identifiers such as google ad id, apple id, fxaccount, or certain cookies. It may be embedded within specific website content, such as memory contents, dumps, captures of screen data, or DOM data.
== Eligibility for Default on Data Collection ==
* Categories 1 & 2 (Technical & Interaction data)
** Pre-Release & Release: Default on, provided the data is exclusively in these categories (it cannot be in any other category). In Release, an opt-out must be available for most types of Technical and Interaction data.
* Category 3 (Web activity data)
** Pre-Release: May be eligible for default on data collection, provided there is (i) advance user notice (ii) consent and (iii) an opt-out.
** Release: Default off. May be eligible for opt-in data collection by specific users, provided there is (i) advance user notice (ii) consent and (iii) an opt-out.
* Category 4 (Highly Sensitive data)
** Pre-Release: Default off. May be eligible for opt-in data collection by specific users, provided there is (i) advance user notice (ii) consent and (iii) an opt-out.
** Release: Default off. May be eligible for opt-in data collection by specific users, provided there is (i) advance user notice (ii) consent and (iii) an opt-out.
== Requirements ==
