...

Simply put, standardized notice infrastructure, for messaging  (aka receipt) architectures.   These semantics standards are usable to enhance  privacy policies with semantics made with privacy law.  

As humans we are decentralized, in the physical world the trust framework is about social protection, policing, justice etclocal to a person.   To  To extend this digitally, these set of interoperable semantic standards ( are used to provide a broadcasted identity and trust  UI) that a is human 'Consent Centric" .  Conceptually this is and a legal baseline for notice and consent receipts.   

This PaE signalling enables consent lifecycles.  Which is why it is referred to as a consent gateway.  Conceptually this is a public set of rules/laws that  people can use locally to see, share and communicate about the data surveillance, security and privacy risks, independently of the systems that grant consented permission for surveillance of identifiers. Independently of a digital identity management system or protocol.  Another term for this, is co-regulation.

Method of Signalling:  Active State Risk Transparency

PaECG project, implements a simple visual signal to show if the that compares the anchor receipt against the current digital notice (using the standardized notice control language) to show the active state of the digital identity in a decentralized way.

The privacy and consent is what is expected.  The first step, is display the  controller PII Controller's credential, (a bound legal entities and accountable person credential ) for a specific service and data processing context.  Privacy as Expected,  can also be seen as a legal expression of the active state of notice people should have over privacy risk, in order to have relative to the individual, so the person can see if this the privacy they expect.  

Online, these privacy risks extend to digital identity, surveillance and the security of the surveillance.  Without transparency over these relationships, the technology is un-trustworthy.

To achieve this a first consent receipt is generated and this then provides the baseline for the active state of the controller.   This is then compared against the current state of privacy by comparing the next notice receipt state to that of the ANCR anchor receipt.   This produces a standards based universal privacy active state security signal, and that can scale trust to consent. This is demonstrated with the PaE:Consent Gateway project funded by the EU NGI Trust grant. 

https://privacy-as-expected.org/

In the PaE.G project we specifying specify the use of the Active State Tranparency Risk (ASR) signal for use with web browsers, and aim to show the active state of Surveillance capitalism is what people expect, and to provide a way for people to use their rights (with a receipt) independent of the website. 

...