Providing Trust Capacity Metrics
Editors: Sharon Polsky, Mark Lizar
...
Every publication, in every domain, is capable of improvement. Kantara welcomes and values your contribution through membership, sponsorship and active participation in the working group that produced this and participation in all our endeavors endeavours so that Kantara can reflect its value back to you and your organizationorganisation.
...
Copyright: The content of this document is copyright of Kantara Initiative, Inc.
© 2022 Kantara Initiative, Inc.
...
TPI’s are recorded in an ANCR Notice Record Format, fully filled in, useable as a Controller Notice Receipt Credential. This is used to generate a Directed, explicit or Altruistic Consent Receipt.[1] This specification introduces a standardized standardised record format for the capture of attributes that are required by law for the legal and trustworthy processing of personal identifiers.
The format is defined with the ISO/IEC 29100 security and privacy techniques framework. This format is used to collect identifier and session based attributes, notice, notification, and disclosure text mapped directly to the analogue (brick and mortar) legal requirements. We present here that standardized TPI creation process and how it can be used to complement, in fact necessarilly precede, (any) identifier creation workflow. in the context of
The Notice Record format can also be used to measure conformance with the ISO/IEC 29184 Online privacy notice and consent standard (2020), in which, the Consent Notice Receipt is provided in Annex B.
...