Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Objective

This ANCR Specification Record specification provides instructions a methodology to audit a notice and produce a consent receipt.  The objective of this documents is to:

  1. Provide a set of instructors for creating and recording a notice and its specified purpose specification
  2. Compare To then compare the conformance of the record with a set of rules or regulations referred to here as a code of practice. 

Methodology

This method describes, how to audit a notice to make generate an ANCR Record using ISO/IEC 29100 receipt format, which is published in the ISO/IEC 29184 Annex D, 

The resulting audit is then used for assessing conformance with an ISO/IEC 29184 Online Privacy Notice and Consent control.  In order to demonstrate how the ANCR record is used Notice Record for assessing conformance when processing with creating a digital identifier .   Note: The assessment of the Consent Receipt and Conformance with the GDPR was accomplished in 2018 in the Kantara CISWG Work Groupand processing personal data.

Instructions 

  1. read a notice 
    1. collect down the PII Controller Name 
    2. collect down the PII Controller Address
    3. collect contact information 
    4. collect link to privacy policy 
    5. collect any links to privacy access information 
  2. Indicate in which concentric manner data has been 
  3. Capture the legal justifications for processing 
  4.  Capture the Notice
    1.  indicate what the expected consent type is  prior to the notice
    2. indicate if personal identifiers are collected prior to presenting the notice
  5. Indicate the legal justification from the 6 categories - 
  6. indicate the personal data is sensitive 
  7. capture purpose description 
  8. capture the authorization scope
    1. frequency 
    2. duration

...