105
edits
Changes
→Eligibility for Default on Data Collection: Clarify the wording about Category 3 data on Release.
* Category 3 (Web activity data)
** Pre-Release: May be eligible for default on data collection, provided there is an opt-out.
** Release: Default off. May be eligible for opt-out on *** On a case-by-case basis collections may be eligible to be "default on" if mitigations are identified. Mitigations may include UX changes that make users aware of additional risk, technical mechanisms that remove the risk, or a risk assessment done of a case-by-case basis that determines the risk is limited.
* Category 4 (Highly Sensitive data)
** Pre-Release: Default off. May be eligible for opt-in data collection by specific users, provided there is (i) advance user notice (ii) consent and (iii) an opt-out.
** Release: Default off. May be eligible for opt-in data collection by specific users, provided there is (i) advance user notice (ii) consent and (iii) an opt-out.
== Other Practices ==
