That
might be very convenient from the usability standpoint, but you
can??™t say you had much control over the information about you
that ?¬‚ew from your company to the hardware vendor website.
From what you can see, the partner website was able to determine
your name and your status of employee. But what if much
more information was transmitted without your knowledge or
consent? If the hardware vendor acquires information about
your salary or your home address, something that typically you
would not want to disclose, consequences vary from targeting
according to the advertisement on the web store to selling that
information to marketers, junk mailers, or worse, burglars.
Wouldn??™t it be much better to be warned that your identity is
about to be disclosed and to whom and what information is
speci?¬?cally being requested? Wouldn??™t you require, after you
realize what is going on, a mechanism for opting out if you feel
it is risky?
That??™s the essence of the ?¬?rst law. Knowledge is power.
Awareness of the situation brings the ability to take action responsibility,
which in turn brings con?¬?dence and the feeling of
being in control.
Minimal Disclosure for a Constrained Use
The solution which discloses the least amount of identifying
information and best limits its use is the most stable
long term solution.
Pages:
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175