Compact policy declaration

The WebSEAL configuration file provides a set of configuration options that match the compact policy XML syntax as specified in the World Wide Web Consortium Platform for Privacy Preferences specification. The complete specification can be accessed at the following URL:

http://www.w3.org/TR/P3P/

WebSEAL provides configuration file entries that map to the following XML elements in the compact policy:

• access

  Whether the site provides access to various kinds of information.

• categories

  Type of information stored in the cookie.

• disputes

  Whether the full P3P policy contains some information regarding disputes over the information contained within the cookie.

• non-identifiable

  Signifies that either no data is collected (including Web logs), or the organization collecting the data will make the data anonymous.

• purpose

  Purposes for data processing relevant to the Web.

• recipients

  Legal entity, or domain, beyond the service provider and its agents where data can be distributed.

• remedies

  Remedies in case a policy breach occurs.

• retention

  Type of retention policy in effect.

• p3p-element

  Specifies any elements to add to the P3P header in addition to the compact policy. This element can be used to supply a reference to a full XML policy.

The values for purpose (except current) and recipients (except ours) have an additional option describing how the cookie data can be used. This option defines Whether the user is given a choice to opt-in or opt-out.

Parent topic: Platform for Privacy Preferences (P3P)