3. HOW WILL PRIVACY ISSUES BE ADDRESSED IN THE GUIDELINES

  Some delegations have indicated a strong position for the inclusion of a separate privacy Principle. Those delegations argue that the use of crvptography is inherently linked to privacv. not only because crvptography is used for confidentiality, but also because the use of cryptographic methods and infrastructures can enable tracking of transactions. There have also been a variety of arguments against such a proposition: privacy is important but it is not a cryptographic Principle, privacy is only one application of cryptography among many, privacy is just one value protected by encryption, etc.

  The 15 July draft included a statement of privacy in the Recognition Section, which applied to the document as a whole. The September draft includes this statement (paragraph [10]), along with proposoed text for a Principle on privacy (paragraphs [80] - [87]).

  Addressing the isue of privacy is appropriate somewhere in these Guidelines. It has been suggested that a separate statement to the effect that privacy should be taken into account in development implementation and policy-making on cryptographic methods is required. Such a statement could also include a specific statement calling for privacy safeguards to be adopted in paralellwith the adoption of cryptography guidelines.

  Should the issue of privacv be addressed in a separate Principle, or in another manner? If a Principle on privacy should be included in the Guidelines is the text proposed in the September draft appropnate?

4. WHAT FOLLOW-UP WORK: SHOULD BE DONE IN THE AREA OF INTERNATIONAL CRYPTOGRAPHY POLICY?

  There is a need for practical and operational solutions in the area of international cryptography policy. One delegation proposed that these Guidelines should be used as a basis for bilateral and multilateral agreements on specific issues related to international cryptography policy, include the systems for deposit of keys or legal access to keys across national borders. Furthermore, the delegation suggested that a specific statement to that effect should be included in either the Recommendation or Aims Section of the Guidelines. This language appears in the September draft at paragraphs [21] and [22]

  Should a statement proposing follow-up work be included in the Guidelines? Whether or not a statement calling for follow-up work is included as part of the Guidelines, the Secretariat invites the delegations to consider what followup work could be undertaken after the completion of the Guidelines.