How Does P3P Work?

P3P enables Web sites to translate their privacy practices into a standardized, machine-readable format (Extensible Markup Language - XML) that can be retrieved automatically and easily interpreted by a user's browser. Translation can be performed manually or with automated tools. Once completed, simple server configurations enable the Web site to automatically inform visitors that it supports P3P.

On the user side, P3P clients automatically fetch and read the P3P privacy policies on Web sites. A user's browser equipped for P3P can check a Web site's privacy policy and inform the user of that site's information practices. The browser could then automatically compare the statement to the privacy preferences of the user, self-regulatory guidelines, or a variety of legal standards from around the world. P3P client software can be built into web browsers, plug-ins, or other software.

Versions of P3P have already been implemented as the AT&T Privacy Bird plug-in and in Microsoft's Internet Explorer 6.0. For more information on P3P-enabled Web tools, visit the browsers and plug-ins section of P3P Toolbox.