Invoer naar derden
Wat de bezoeker intypte of zocht, bereikt een derde partij.
- Familie
- Gegevens
- Status
- actief
- Geldt voor
- web
Wat er gebeurt
A search term, form field or URL path that reveals intent is passed to an analytics or advertising party, usually as a parameter or as part of a page title.
Waarom het ertoe doet
The content of a query says far more than the fact of a visit. A search on a health site, a benefits portal or a legal service is close to a statement about the person, and it leaves in plain text.
Veelvoorkomende oorzaken
- query string included in the page URL that analytics reports verbatim
- form values passed into event parameters
- page titles constructed from user input
Dit is het níet
An identifier alone is not this entry; that is ordinary tracking. What matters here is that the content itself travels.
Hoe je het vaststelt
Indicator
A value entered or searched by the visitor appears verbatim, or trivially encoded, in a request to a host under a different registrable domain.
Methode
network-observed
Kwaliteit van de detectie
90 van 100
De grenzen van deze bevinding
Wat dit patroon zou weerleggen
- The value is hashed or truncated beyond recovery before leaving.met de hand te toetsende bevinding wordt zwakker
- The receiving host belongs to a processor acting on the controller's instructions, and the value is used only to deliver the function the visitor invoked, such as a site search.niet uit de meting af te leidende bevinding krijgt een ander patroonCannot be settled from the capture. It is a question for the operator and it belongs in the request for comment. The content still left the controller's environment, so the finding narrows rather than disappears.
Wat dit patroon níet vaststelt
- harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
- severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
- unlawfulness; that is for a supervisory authority or a court
- intent; a fault is usually a build decision, not a plan
- absence: not finding it in one capture is not evidence that it is not there
Reproduceren
- manual
METHOD.mdno dedicated reproduction exists yet; follow the general method and the indicator above
Ook zichtbaar met openbare scanners
Juridisch kader
Bepalingen
Veelgehoorde tegenwerpingen
We do not send personal data, only the page URL.
If the URL contains what the visitor typed, then the URL is the personal data. The container does not change the content.
Geldt wanneer
to-processing