Discuss multi-party consent

[jyasskin]

Not feasible to get this consent in many cases, but some examples where more people are involved than just the end-user:

• Sharing my contacts reveals private information about the people in my contacts.
• Sharing my browsing history or information aggregated from it reveals information about the websites I visited.
• Sharing details of my life reveals information about people similar to me.

[dmarti]

Another example of a multi-party problem is the case where the user is consenting to use of their information by a controller that has information on lots of other people, and the valuable data is in the negative space -- people who do not have a particular quality.

For example, if a user builds a profile on an ad-supported social site that reveals their interest in double-entry accounting, that information helps target investment scam ads that have a higher response rate among users with low accounting knowledge.

There is some kind of common problem here, where the user might want to disclose that they are a member of a high-information or high-status group, in order to push risks away from themselves and toward non-members of the group.

[darobin]

Related to #135.

This is group consent (under one form) and not multi-party consent. It's related to the section on group privacy but from the other angle.

[npdoty]

I think this might be more commonly described as privacy of people other than the user. (Not always just about consent, either.)

There's also some related existing text about group privacy.

[darobin]

Fixed by #287. (@npdoty used "addresses" instead of "fixes" so it didn't auto-close)

[npdoty]

haha, Nick's careful verbosity strikes again