immersive-web / webxr

Repository for the WebXR Device API Specification.
https://immersive-web.github.io/webxr/
Other
3k stars 386 forks source link

Normative compliance needed for calibration data #1387

Open rinchen opened 2 months ago

rinchen commented 2 months ago

This issue is generated from my review of https://github.com/w3cping/privacy-request/issues/142


Hi,

Section 13.4 Data Adjustments

Section 13.4 details actions that an implementer could consider but it lacks normative protection. This section should be adjusted so that it proactively ensures user privacy. I would prefer that section to be more precise about mandating what safeguards should be in place.

An example: The section should include normative compliance to ensure calibration data cannot be used for tracking purposes. See the paper attached to https://github.com/w3c/sensors/issues/404 as an example of how calibration data can track users.

toji commented 2 months ago

/agenda

toji commented 2 months ago

/tpac