Obtaining P3P Privacy Policies for Composite Services

Algorithm 10

P3P privacy policy for TravelBroker.

Policy{Entity (#business.name): TravelBroker,…,

 𝑆₁{Purpose: (current),

  Recipient: (ours),

  Retention: (1 month),

  Data: (#user.IDCardNo, #user.BankCardNo)}

 𝑆₂{Purpose: (current, contact [opt-out]),

  Recipient: (ours,same_{1_user.Name}, unrelated_{2_user.Name} [opt-out]),

  Retention: (indefinitely),

  Data: (#user.Name)}

 𝑆₃{Purpose: (current, contact [opt-out]),

  Recipient: (ours, same_{1_user.Mobile}, unrelated_{2_user.Mobile} [opt-out]),

  Retention: (indefinitely),

  Data: (#user.Mobile)}}