[Building Sakai] EU Cookie Disclosure

[Matthew Jones]

I agree, I read it as if the cookie is used by a subscriber of the service
to store data necessary for use of the service, then it doesn't have to be
disclosed.

If the cookie is optional and placed there to enhance the experience or to
track activity, then consent is expected to be granted first.

Really this seems like it should be the up to the browser rather than every
website in the world to implement.

As far as Sakai, I don't think there's any unnecessary cookies that are
used, just the the one for the session-id.

On Tue, Mar 27, 2012 at 12:28 PM, Feliz Gouveia <fribeiro at ufp.edu.pt> wrote:

> wouldn't the following exemption apply to Universities and other
> content providers?
>
> "The Regulations specify that service providers should not have to
> provide the information and obtain consent where that device is to be
> used:
> (...)
> - where such storage or access is strictly necessary to provide an
> information society service requested by the subscriber or user. "
>
> Feliz
>
> On 27 March 2012 16:57, csev <csev at umich.edu> wrote:
> > Is anyone having issues with the new EU Cookie guide?   I am surprised
> this
> > has not come up on the list so far.
> >
> > I am wondering if this is painful enough to get it into 2.9, back-port
> it,
> > etc etc?
> >
> > Here is the summary from John Fontaine based on his research:
> >
> >
> http://www.ico.gov.uk/for_organisations/privacy_and_electronic_communications/the_guide/cookies.aspx
> >
> > Basically it means that applications like Sakai must disclose to end
> users
> > that we are using cookies and obtain their consent to the cookies
> (ideally
> > prior to setting the cookie, but can be concurrent with the cookie being
> set
> > if the cookie is strictly necessary for application functioning).   This
> > disclosure and consent can't be reliant on the web browser preferences,
> but
> > must be stated clearly.  An information page should also be provided
> > detailing all the cookies set by the application, any third party cookies
> > (e.g. Google analytics, youtube flash cookies) and any applications
> > installed on the end users "terminal device" (computer, smartphone, etc).
> >  This page should describe the item installed (cookie, etc), how it is
> used
> > and what personal information might be exposed.  The user should be
> > presented with an "opt-in" chekcbox" that tracks that they have agreed to
> > the cookie's being installed (which can ironically use a cookie to track
> > this setting).
> >
> > I am happy to figure out a place in login or in /portal to put this if
> > people are getting pressure.
> >
> > /Chuck
> >
> > _______________________________________________
> > sakai-dev mailing list
> > sakai-dev at collab.sakaiproject.org
> > http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
> >
> > TO UNSUBSCRIBE: send email to
> sakai-dev-unsubscribe at collab.sakaiproject.org
> > with a subject of "unsubscribe"
>
>
>
> --
> Feliz Ribeiro Gouveia
>
> Universidade Fernando Pessoa            http://www.ufp.pt
> Centro de Recursos Multimediaticos      Tel 351-22.507.13.06
> M.I.N.D. Lab                            Fax 351-22.550.82.69
> Pr 9 de Abril 349                       fribeiro at ufp.edu.pt
> P-4249-004 Porto
> _______________________________________________
> sakai-dev mailing list
> sakai-dev at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>
> TO UNSUBSCRIBE: send email to
> sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of
> "unsubscribe"
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20120327/a5a28ed6/attachment.html