Normative compliance needed for calibration data

[rinchen]

This issue is generated from my review of w3cping/privacy-request#142

---

Hi,

Section 13.4 Data Adjustments

Section 13.4 details actions that an implementer could consider but it lacks normative protection. This section should be adjusted so that it proactively ensures user privacy. I would prefer that section to be more precise about mandating what safeguards should be in place.

An example: The section should include normative compliance to ensure calibration data cannot be used for tracking purposes. See the paper attached to w3c/sensors#404 as an example of how calibration data can track users.

[toji]

/agenda

[toji]

/tpac