At Last: The ICO Opens A Case!

[James Firth]

> Very interesting that they are now so heavily loaded. My case against
> DfT last autumn took only 2 months from start to successful conclusion -
> and ICO worked quite hard on it during that time (although it /was /much
> simpler than Phorm, and I was able to submit it direct to an officer who
> was already learning about smart cards in the hands of the public).

My submission was based purely on theory at the time.  A friend and I did a
"design exercise" as if we were implementing Phorm from scratch and came to
a conclusion that wasn't far adrift of Richard's (see my posts on this list
in March on false 1st party cookies and redirects).

Our basic premise was that the UUID will leak.  

But you can see how the ICO doesn't want to waste time on the tin-foil-hat
wearing speculative brigade.  

James Firth