WG: Privacy definition

[martinthomson]

This is mostly good:

without compromising security principles for IdPs, RPs, and user agents as well as user privacy. Here "privacy" minimally refers to the appropriate processing of personal information.

It might be a good to include a different definition of privacy in this context. The primary thing I am concerned about in this context is that users retain some amount of control and awareness of the interactions between different sites. So I might suggest:

Here "privacy" minimally refers to the ability of users to exercise control over the exchange of information between IdPs and RPs, plus being able to maintain awareness of any ongoing exchange.

[timcappalli]

general consensus in the room at TPAC that changing this text is a good idea.