Everyone agreed that it’s the publisher’s responsibility to protect those parts of user data that could be considered sensitive. The question is, where does the boundary lie? Here the
premium publisher panel agreed only that there still is no agreement, with different companies following different standards, employing various physical metaphors for ambiguity. This situation is
inherently dangerous as some of the more shady practitioners (my word, not theirs) will naturally push the envelope until they provoke a crackdown. Thus the industry needs to establish its own
standards or risk official regulatory by the powers that be.
