search

privacycg / gpc-spec

Global Privacy Control Specification
https://privacycg.github.io/gpc-spec/
Other
105 stars 19 forks source link

Say that the do-not-sell-or-share preference applies unless the site has an overriding signal #80

Open jyasskin opened 1 week ago

jyasskin commented 1 week ago

Sec-GPC sets a default that users' data shouldn't be sold or shared, but users can have a special relationship with a certain site that overrides that default. The spec should say something like

A do-not-sell-or-share preference is when a person requests that their data "not be sold or shared" by default, unless they have informed a specific website that they want to override that default. This overriding preference is not necessarily communicated using the same format or channel as the original default.