Re: IETF privacy policy - update

[Eliot Lear <[e-mail]>]

 Alissa,

Thanks very much for your elaboration.  I would agree with your
conclusion at the bottom of your note:

> With that said, laying out the core of the policy in an RFC and then
> having a speedier mechanism to publish changes (which can also be
> incorporated into the core policy when the RFC publication schedule
> allows) seems like a decent option.

A good policy allows for appropriate levels of delegation of authority
and flexibility.  It also allows the community to set bars beyond which
those charged with decisions may not go.  For instance, it may be the
case that the community values privacy so much that it would not be
possible to meet both the IETF privacy policy and local laws of certain
places, leading to an understanding of what venues would be available,
and what venues would not.

Eliot