{"id":2129,"date":"2021-12-17T03:47:41","date_gmt":"2021-12-17T11:47:41","guid":{"rendered":"https:\/\/blog.mozilla.org\/netpolicy\/?p=2129"},"modified":"2021-12-17T09:18:23","modified_gmt":"2021-12-17T17:18:23","slug":"privacy-sandbox-cma-dec2021","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/netpolicy\/2021\/12\/17\/privacy-sandbox-cma-dec2021\/","title":{"rendered":"Despite improvements, delaying the deprecation of third party cookies in the CMA\u2019s Privacy Sandbox commitments will hold back privacy on the open web"},"content":{"rendered":"<p>Recently, the UK\u2019s Competition and Markets Authority (CMA) <a href=\"https:\/\/assets.publishing.service.gov.uk\/government\/uploads\/system\/uploads\/attachment_data\/file\/1036204\/211126_FINAL_modification_notice.pdf\">initiated<\/a> a second round of <a href=\"https:\/\/www.gov.uk\/government\/consultations\/consultation-on-modified-commitments-in-respect-of-googles-privacy-sandbox-browser-changes\">consultation<\/a> on the voluntary commitments offered by Google in the Chrome Privacy Sandbox (GCPS) investigation. We welcome the inclusion of greater transparency, consultation, and restrictions on self-preferencing, as we had <a href=\"https:\/\/blog.mozilla.org\/en\/mozilla\/uk-cma-google-commitments-chrome-privacy-sandbox\/\">advocated<\/a> for in the initial consultation. However, we remain concerned by the broadening scope of the standstill period that will further delay both the deprecation of Third Party Cookies (TPCs) and the deployment of privacy forward technologies such as Privacy Budget or GNATCATCHER which have the potential to address cross-site tracking that occurs through fingerprinting and IP addresses.<\/p>\n<p>Many of the new Commitments are positive and align with our own thinking. Specifically, we commend the CMA for proposing:<\/p>\n<ul>\n<li>strengthening restrictions on how Google cannot self-preference its own services;<\/li>\n<li>clarifying the internal limits on the data that Google is allowed to use for advertising (including that Google will only be able to use GCPS technologies in the same ways as third parties will be able to use them); and<\/li>\n<li>improving the process around transparency and consultation with third parties to ensure public disclosures and engagement with third party viewpoints.<\/li>\n<\/ul>\n<p>Broadly speaking, the various initiatives that are being considered under GCPS can be split into two categories: (1) new features that support more private advertising (such as FLOC, TURTLEDOVE, etc.) and (2) mechanisms that restrict excessive data collection that already occurs right now (such as TPC deprecation, Privacy Budget, and GNATCATCHER). On the first category, we agree with the CMA that new features may merit a standstill period both because of the potential for them to be forced upon websites and\u00a0 browsers due to lopsided dynamics in the browser market as well as questions about their privacy properties (as we\u2019ve <a href=\"https:\/\/blog.mozilla.org\/en\/privacy-security\/privacy-analysis-of-floc\/\">elaborated<\/a> in the past). The formal processes and oversight at open standard development organizations (SDOs) such as the W3C and IETF provide an ideal forum to ensure these proposals and their implications are vetted by all relevant stakeholders prior to implementation.<\/p>\n<p>Our primary concern is with the framing of the standstill period to include the second category of mechanisms, because this will delay technology that can protect consumers from data collection and identification practices that are known to be harmful. Withholding these privacy forward technologies from deployment on Chrome will only entrench behaviour in the ad-tech ecosystem that should never have been permissible in the first place. For example, regulatory mandates should not prevent Google from restricting the use of TPCs \u2014something Firefox has <a href=\"https:\/\/blog.mozilla.org\/en\/products\/firefox\/todays-firefox-blocks-third-party-tracking-cookies-and-cryptomining-by-default\/\">advocated<\/a> for since 2019 to protect consumers from online tracking\u2014and which has also been adopted by several other browsers. There are also other privacy forward measures that are being worked on today to combat tracking such as the <a href=\"https:\/\/mozilla.github.io\/ppa-docs\/privacy-budget.pdf\">Privacy Budget<\/a> (which while <a href=\"https:\/\/blog.mozilla.org\/en\/mozilla\/google-privacy-budget-analysis\/\">imperfect<\/a>, at least pushes the debate forward on anti-fingerprinting) and GNATCATCHER, which helps protect against the <a href=\"https:\/\/9to5mac.com\/2021\/07\/08\/advertisers-concerned-icloud-private-relay-could-put-an-end-to-fingerprinting\/\">use of IP addresses for tracking<\/a>. We hope the CMA weighs these privacy equities to enable Chrome to quickly deploy these technologies when they are ready.<\/p>\n<p>At Mozilla, we have been working for years to drive the industry in this better direction, away from pervasive and opaque web tracking. We\u2019ve done so by <a href=\"https:\/\/blog.mozilla.org\/security\/2021\/02\/23\/total-cookie-protection\/\">limiting<\/a> the use of TPCs, <a href=\"https:\/\/blog.mozilla.org\/security\/2019\/06\/06\/next-steps-in-privacy-preserving-telemetry-with-prio\/\">developing<\/a> more <a href=\"https:\/\/datatracker.ietf.org\/doc\/html\/draft-gpew-priv-ppm-00\">privacy preserving ways to measure user interactions online<\/a>, and <a href=\"https:\/\/blog.mozilla.org\/en\/mozilla\/the-future-of-ads-and-privacy\/\">working<\/a> on advancing privacy preserving advertising. In our view, the CMA has an incredible opportunity to show the world that privacy and competition are not mutually exclusive, and smart regulation can equally enhance both ideals. To achieve this, we hope to see final Commitments that do not encourage Google to leave Chrome users unprotected by indefinitely delaying the rollout of technologies that could lead to a more privacy preserving internet.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Recently, the UK\u2019s Competition and Markets Authority (CMA) initiated a second round of consultation on the voluntary commitments offered by Google in the Chrome Privacy Sandbox (GCPS) investigation. We welcome &hellip; <a class=\"go\" href=\"https:\/\/blog.mozilla.org\/netpolicy\/2021\/12\/17\/privacy-sandbox-cma-dec2021\/\">Read more<\/a><\/p>\n","protected":false},"author":144,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[452990,6744,452992,452991],"tags":[],"coauthors":[306191],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Despite improvements, delaying the deprecation of third party cookies in the CMA\u2019s Privacy Sandbox commitments will hold back privacy on the open web - Open Policy &amp; Advocacy<\/title>\n<meta name=\"description\" content=\"Mozilla remains concerned by the broadening scope of the standstill period in CMA&#039;s Google Privacy Sandbox Commitments that will further delay both the deprecation of Third Party Cookies and the deployment of privacy forward technologies such as Privacy Budget or GNATCATCHER.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/netpolicy\/2021\/12\/17\/privacy-sandbox-cma-dec2021\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mozilla\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2021\/12\/17\/privacy-sandbox-cma-dec2021\/\",\"url\":\"https:\/\/blog.mozilla.org\/netpolicy\/2021\/12\/17\/privacy-sandbox-cma-dec2021\/\",\"name\":\"Despite improvements, delaying the deprecation of third party cookies in the CMA\u2019s Privacy Sandbox commitments will hold back privacy on the open web - Open Policy &amp; Advocacy\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#website\"},\"datePublished\":\"2021-12-17T11:47:41+00:00\",\"dateModified\":\"2021-12-17T17:18:23+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/33edd7d4d73723140487082573041c83\"},\"description\":\"Mozilla remains concerned by the broadening scope of the standstill period in CMA's Google Privacy Sandbox Commitments that will further delay both the deprecation of Third Party Cookies and the deployment of privacy forward technologies such as Privacy Budget or GNATCATCHER.\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2021\/12\/17\/privacy-sandbox-cma-dec2021\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/netpolicy\/2021\/12\/17\/privacy-sandbox-cma-dec2021\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2021\/12\/17\/privacy-sandbox-cma-dec2021\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/netpolicy\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Despite improvements, delaying the deprecation of third party cookies in the CMA\u2019s Privacy Sandbox commitments will hold back privacy on the open web\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/netpolicy\/\",\"name\":\"Open Policy &amp; Advocacy\",\"description\":\"Mozilla&#039;s official blog on open Internet policy initiatives and developments\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/netpolicy\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/33edd7d4d73723140487082573041c83\",\"name\":\"Mozilla\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/image\/f32381c01597770b1131dff44b9d6de1\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f84bd67e8e3ab3bcc9676910aecf5700?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f84bd67e8e3ab3bcc9676910aecf5700?s=96&d=mm&r=g\",\"caption\":\"Mozilla\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Despite improvements, delaying the deprecation of third party cookies in the CMA\u2019s Privacy Sandbox commitments will hold back privacy on the open web - Open Policy &amp; Advocacy","description":"Mozilla remains concerned by the broadening scope of the standstill period in CMA's Google Privacy Sandbox Commitments that will further delay both the deprecation of Third Party Cookies and the deployment of privacy forward technologies such as Privacy Budget or GNATCATCHER.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/netpolicy\/2021\/12\/17\/privacy-sandbox-cma-dec2021\/","twitter_misc":{"Written by":"Mozilla","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/netpolicy\/2021\/12\/17\/privacy-sandbox-cma-dec2021\/","url":"https:\/\/blog.mozilla.org\/netpolicy\/2021\/12\/17\/privacy-sandbox-cma-dec2021\/","name":"Despite improvements, delaying the deprecation of third party cookies in the CMA\u2019s Privacy Sandbox commitments will hold back privacy on the open web - Open Policy &amp; Advocacy","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/#website"},"datePublished":"2021-12-17T11:47:41+00:00","dateModified":"2021-12-17T17:18:23+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/33edd7d4d73723140487082573041c83"},"description":"Mozilla remains concerned by the broadening scope of the standstill period in CMA's Google Privacy Sandbox Commitments that will further delay both the deprecation of Third Party Cookies and the deployment of privacy forward technologies such as Privacy Budget or GNATCATCHER.","breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/2021\/12\/17\/privacy-sandbox-cma-dec2021\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/netpolicy\/2021\/12\/17\/privacy-sandbox-cma-dec2021\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/netpolicy\/2021\/12\/17\/privacy-sandbox-cma-dec2021\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/netpolicy\/"},{"@type":"ListItem","position":2,"name":"Despite improvements, delaying the deprecation of third party cookies in the CMA\u2019s Privacy Sandbox commitments will hold back privacy on the open web"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/netpolicy\/#website","url":"https:\/\/blog.mozilla.org\/netpolicy\/","name":"Open Policy &amp; Advocacy","description":"Mozilla&#039;s official blog on open Internet policy initiatives and developments","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/netpolicy\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/33edd7d4d73723140487082573041c83","name":"Mozilla","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/image\/f32381c01597770b1131dff44b9d6de1","url":"https:\/\/secure.gravatar.com\/avatar\/f84bd67e8e3ab3bcc9676910aecf5700?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f84bd67e8e3ab3bcc9676910aecf5700?s=96&d=mm&r=g","caption":"Mozilla"}}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/posts\/2129"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/users\/144"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/comments?post=2129"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/posts\/2129\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/media?parent=2129"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/categories?post=2129"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/tags?post=2129"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/coauthors?post=2129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}