Conflict in Rules

• Rule1• <appel:RULE behavior=“request" description="Site may use health or medical information for marketing.">-• <p3p:POLICY>- • <p3p:STATEMENT >-• <p3p:PURPOSE appel:connective=“or"> • <p3p:contact required="always" /> •   <p3p:telemarkting required="always" /> • <p3p:historical required=“always”/>  • </p3p:PURPOSE>- • <p3p:DATA-GROUP>- • <p3p:DATA>-• <p3p:CATEGORIES appel:connective=“or”> • <p3p:health /> • <p3p:online/>• </p3p:CATEGORIES>•   </p3p:DATA> • </p3p:DATA-GROUP>•   </p3p:STATEMENT> • </p3p:POLICY> • </appel:RULE>• Rule2

• <appel:RULE behavior="limited" description="Site may contact you to interest you in other health or medical services or products and does not allow you to remove yourself from marketing/mailing list">-

• <p3p:POLICY>-

• <p3p:STATEMENT>

• - <p3p:PURPOSE appel:connective="or">•   <p3p:contact required="always" /> •   <p3p:telemarketing required="always"/>

<p3p:other purpose required="always"/>

• <p3p:admin/>•   </p3p:PURPOSE> • <p3p:DATA-GROUP>-

• <p3p:DATA>-

• <p3p:CATEGORIES appel:connective=“or”> • <p3p:online/>

• <p3p:physics/> 

• </p3p:CATEGORIES>•   </p3p:DATA> • </p3p:DATA-GROUP>

• </p3p:STATEMENT> • </p3p:POLICY> • </appel:RULE>

-<STATEMENT>

-- <PURPOSE> 

- <tailoring />  

- <customization required="always" />  

- <admin />  

- <current />

-  <contact required="always" />

-  <other-purpose required="opt-out" />

-   <telemarketing required=“always" />  

- <pseudo-analysis required="always" />

-  <pseudo-decision required="always" />

-  <individual-analysis required="always" />  

- </PURPOSE>-

-- <CATEGORIES><physical/></CATEGORIES>

- </DATA>

- <DATA ref="#dynamic.miscdata">

- <CATEGORIES><health/></CATEGORIES>

- </DATA>

- <DATA ref="#dynamic.miscdata">

- <CATEGORIES><online/></CATEGORIES>

- </DATA>

- <DATA ref="#dynamic.miscdata">

- <CATEGORIES><uniqueid/></CATEGORIES>

- </DATA>

- <DATA ref="#dynamic.miscdata">

- <CATEGORIES><purchase/></CATEGORIES>

- </DATA>

- <DATA ref="#dynamic.miscdata">

- <CATEGORIES><computer/></CATEGORIES>

- </DATA>

- <DATA ref="#dynamic.miscdata">

- <CATEGORIES><navigation/></CATEGORIES>

-</DATA-GROUP>

- </STATEMENT>

-</POLICY>

Rule1 Rule2

behaviour=“request”

Purpose:historical

Contact

telemarketing

behaviour= “limited”

Purpose: Contact

telemarketing

other-purpose

All website’s policy including contact or telemarketing may result conflict

Why we need to detect conflict?

R1 R2 R2 R3 R3 R1

R1<R2 R2<R3 R3<R1