immersive-web / webxr

Repository for the WebXR Device API Specification.
https://immersive-web.github.io/webxr/
Other
2.98k stars 381 forks source link

Normative compliance needed for calibration data #1387

Open rinchen opened 1 week ago

rinchen commented 1 week ago

This issue is generated from my review of https://github.com/w3cping/privacy-request/issues/142


Hi,

Section 13.4 Data Adjustments

Section 13.4 details actions that an implementer could consider but it lacks normative protection. This section should be adjusted so that it proactively ensures user privacy. I would prefer that section to be more precise about mandating what safeguards should be in place.

An example: The section should include normative compliance to ensure calibration data cannot be used for tracking purposes. See the paper attached to https://github.com/w3c/sensors/issues/404 as an example of how calibration data can track users.

toji commented 2 days ago

/agenda

toji commented 2 days ago

/tpac