Transparent privacy practices for Chrome Extensions

Transparent privacy practices for Chrome Extensions
2020-11-19 03:13:00 Author: www.blogger.com(查看原文) 阅读量:142 收藏

tag:blogger.com,1999:blog-2471378914199150966.post-64283673976393924672020-11-18T10:13:00.000-08:002020-11-18T10:13:52.838-08:00Transparent privacy practices for Chrome Extensions<img height="258" src="https://lh5.googleusercontent.com/JwRHwUX4dV8F7GB1alb1FD7cmT_JaeU6uu99XM89mDrQ67PmyPfJnsQpg4IEefgaq881-VpijNYtXJerpROl6xSgPt06gyR4G7CLGBzmiNB2YusLhdeEEIM0CqAiBMZGCRWtuITMAw" style="margin-left: 0px; margin-top: 0px;" width="620" />Protecting users and their data is a fundamental aspect of the work we do on Chrome. Last year, as part of Google’s <a href="https://blog.google/technology/safety-security/update-project-strobe-new-policies-chrome-and-drive/" style="text-decoration-line: none;"><span style="color: #1155cc; font-family: Roboto, sans-serif; font-size: 11pt; font-variant-east-asian: normal; font-variant-numeric: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">Project Strobe</a>, we announced an important <a href="https://blog.chromium.org/2019/07/project-strobe-updates.html" style="text-decoration-line: none;"><span style="color: #1155cc; font-family: Roboto, sans-serif; font-size: 11pt; font-variant-east-asian: normal; font-variant-numeric: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">set of policies</a> for extensions to protect users and their data. These policies require extensions to request only the permissions needed to implement their features. Additionally, we required more extensions to post privacy policies and handle user data securely.   Today, we are announcing changes that build upon those protections with an update to our developer policy that limits what extension developers can do with the data they collect. The new policy also requires developers to certify their data use practices, and display that information directly on the Chrome Web Store listing to help users understand an extension’s privacy practices.  <h1 dir="ltr" style="line-height: 1.38; margin-bottom: 6pt; margin-top: 20pt;">Simplifying privacy practices for our users</h1> Starting January 2021, each extension’s detail page in the Chrome Web Store will show developer-provided information about the data collected by the extension, in clear and easy to understand language. Data disclosure collection is available to developers today. <img height="327.0314381855526" src="https://lh3.googleusercontent.com/D8qVbFpZNHjEBQM9QZvkpxGCaLnGJICnjm2XrEp4taf6e9BkjYF_0DRWa2GlCkvxXL_L_xTn5IiV2OkEIP3gKkTK6N1PSw7W_9WZUXzO1XGTyyNmoJDx7zrGqV0DxRtNmcXyl-UXZw" style="margin-left: 0px; margin-top: -0.015719092776306565px;" width="624" /><h1 dir="ltr" style="line-height: 1.38; margin-bottom: 6pt; margin-top: 20pt;">Updating our user data privacy policy</h1>We are also introducing an <a href="https://developer.chrome.com/webstore/program_policies" style="text-decoration-line: none;"><span style="color: #1155cc; font-family: Roboto, sans-serif; font-size: 11pt; font-variant-east-asian: normal; font-variant-numeric: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">additional policy</a> focused on limiting how extension developers use data they collect. More specifically:<ul style="margin-bottom: 0; margin-top: 0;"><li dir="ltr" style="color: #434343; font-family: Roboto, sans-serif; font-size: 11pt; font-variant-east-asian: normal; font-variant-numeric: normal; list-style-type: disc; vertical-align: baseline; white-space: pre;">Ensuring the use or transfer of user data is for the primary benefit of the user and in accordance with the stated purpose of the extension.</li><li dir="ltr" style="color: #434343; font-family: Roboto, sans-serif; font-size: 11pt; font-variant-east-asian: normal; font-variant-numeric: normal; list-style-type: disc; vertical-align: baseline; white-space: pre;">Reiterating that the sale of user data is never allowed. Google does not sell user data and extension developers may not do this either.</li><li dir="ltr" style="color: #434343; font-family: Roboto, sans-serif; font-size: 11pt; font-variant-east-asian: normal; font-variant-numeric: normal; list-style-type: disc; vertical-align: baseline; white-space: pre;">Prohibiting the use or transfer of user data for personalized advertising. </li><li dir="ltr" style="color: #434343; font-family: Roboto, sans-serif; font-size: 11pt; font-variant-east-asian: normal; font-variant-numeric: normal; list-style-type: disc; vertical-align: baseline; white-space: pre;">Prohibiting the use or transfer of user data for creditworthiness or any form of lending qualification and to data brokers or other information resellers. </li></ul> The item listing page will also display whether the developer has certified that their extension complies with this new policy.  <h1 dir="ltr" style="line-height: 1.38; margin-bottom: 6pt; margin-top: 20pt;">Developer-provided privacy disclosures</h1>To publish or update an extension, our new policy will require developers to provide data usage disclosures directly from the privacy tab of the <a href="https://chrome.google.com/webstore/developer/dashboard" style="text-decoration-line: none;"><span style="color: #1155cc; font-family: Roboto, sans-serif; font-size: 11pt; font-variant-east-asian: normal; font-variant-numeric: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">developer dashboard</a>. These disclosures include:<ul style="margin-bottom: 0; margin-top: 0;"><li dir="ltr" style="color: #434343; font-family: Roboto, sans-serif; font-size: 11pt; font-variant-east-asian: normal; font-variant-numeric: normal; list-style-type: disc; vertical-align: baseline; white-space: pre;">The nature of the data being collected from users.  </li><li dir="ltr" style="color: #434343; font-family: Roboto, sans-serif; font-size: 11pt; font-variant-east-asian: normal; font-variant-numeric: normal; list-style-type: disc; vertical-align: baseline; white-space: pre;">The developer’s certification that they comply with the new Limited Use policy. </li></ul> The disclosure form is grouped by category to make it simpler for developers, and maps exactly to the disclosures that will be displayed to Chrome users. Most of this information will be consistent with existing privacy policies that developers have provided to the Chrome Web Store. <img height="445" src="https://lh6.googleusercontent.com/p0Z3g1UIKCOlowhkkKM79Etwf4kpn8NMp0R29w5mMA6Jf-9QHucxKmmAEghnNletu5i0Yc2bpQuNXPf6VJ6daopnJ5CFwZlpOtvFWNTbCJ85Pnh5mPARLyGO9238nvn-cVpOfOWzNw" style="margin-left: 0px; margin-top: 0px;" width="624" /> Data disclosures collection will be made available to developers <span style="color: #434343; font-family: Roboto, sans-serif; font-size: 11pt; font-variant-east-asian: normal; font-variant-numeric: normal; font-weight: 700; vertical-align: baseline; white-space: pre-wrap;">today, and will be displayed on the Chrome Web Store listing starting <span style="color: #434343; font-family: Roboto, sans-serif; font-size: 11pt; font-variant-east-asian: normal; font-variant-numeric: normal; font-weight: 700; vertical-align: baseline; white-space: pre-wrap;">January 18, 2021.  For developers who have not yet provided privacy disclosures by January 18, 2021, a notice will be shown on their Chrome Web Store listings to inform users that the developer hasn’t certified that they comply with the Limited Use policy yet. <img height="405" src="https://lh5.googleusercontent.com/7I-nP3x2bonpzmNEA-c3IDHka0LN2GHzuTWkJY5vJ093v2GuzhOhLAHujTTFc4kXsXzepvDxCyQVA7NEzdl1DZoUvabOLiJvpgzAk8gLsP9Oev4WZ68_Rlj2YUUSaSUhz5f1N0c7QQ" style="margin-left: -42.77914110429443px; margin-top: 0px;" width="773.5582822085888" /> You can find the full policy in the <a href="https://developer.chrome.com/webstore/program_policies" style="text-decoration-line: none;"><span style="color: #1155cc; font-family: Roboto, sans-serif; font-size: 11pt; font-variant-east-asian: normal; font-variant-numeric: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">Developer Program Policies page</a> as well as additional details in the <a href="https://developer.chrome.com/webstore/user_data" style="text-decoration-line: none;"><span style="color: #1155cc; font-family: Roboto, sans-serif; font-size: 11pt; font-variant-east-asian: normal; font-variant-numeric: normal; text-decoration-line: underline; text-decoration-skip-ink: none; vertical-align: baseline; white-space: pre-wrap;">User Data FAQ</a> . Thank you for working with us to build a better web with transparency, choice, and control for everyone.<div> </div> Posted by Alexandre Blondin and Mark M. Jaycox, Chrome Product & Policy<div> </div>Chromium Bloghttps://www.blogger.com/profile/06394244468194711527[email protected]

文章来源: http://www.blogger.com/feeds/2471378914199150966/posts/default/6428367397639392467
如有侵权请联系:admin#unsafe.sh