Expressing advanced policies in P3P (Was: Policy for an Internet registry [EUreg #2656]

On Tue, Aug 13, 2002 at 06:19:19PM +0200,
 Stephane Bortzmeyer <[email protected]> wrote 
 a message of 20 lines which said:

> I'm a lazy beginner in P3P and I would like to know if there is an
> already existing policy file for an Internet domain
> registry. 

We have certain human-readable policies which I find difficult to
express in P3P. 

1) We plan to allow people to opt-out the disclosure (by whois or
whois-like services) of all contact information but one (we need to
publish at least a phone number *or* an email address *or* a fax
number). If I put all these elements in a STATEMENT which is covered
by an opt-out policy, how to ensure that at least one remains public?

2) We plan to allow people to opt-out the disclosure (by whois or
whois-like services) of their personal data only if they fulfill some
roles in the registry database. For instance, we might allow the
holder ("registrant") of a domain name to remain completely hidden,
but not the administrative contact (whose purpose is to be contacted,
after all). Again, I do not know how to express that.

Lorrie, if your book contain the replies to all my questions, I shut
up and I buy it :-)

Conclusions like "P3P is for Web sites only, you should find another
mean to formally express the privacy policy of an Internet registry"
are acceptable, too.