Some Notes, Wrt to today’s call, we decided to continue next week, finishing up the spec while we likely await a barrage of last minute inputs, and we havent even discussed the idea of extending the deadline. (Common practice ;-) Today, we actually accomplished work on terms, draft list now here <https://kantara.atlassian.net/wiki/x/EQDTNw> We also decided to be specific to scope of legal terms, and notice obligations that are specified legally, in particular those with regards to permission to be identified. (Of using a cookie) To this point, I invite everyone to interpret - Quebec Law 25, wherein, it references in 8.1 (quoted below) and see if there is a missing control we can add ? "any person who collects personal information from the person concerned using technology that includes functions allowing the person concerned to be identified,located or profiled must first inform the person (1) of the use of such technology; and (2) of the means available to activate the functions that allow a person to be identified, located or profiled.” The complaint for the TPR focuses online identified, (not location or profiling) and the law here indicates a control that is not opt-in, but turn on. Does this resemble an online control ? (An example would be nice) While the current T&C environment is opt-out, as it is mainly US Service based, -could this be a - turn on - identification, button? Would this also be. Notice record (in our spec), a ROPA in the EU, and a consent receipt? Best, Mark