Ext: Third Party Relationship Listing Specification V.01
Extension Example: Third Party Sharing Extension V.1
The first extension for the minimum viable consent receipt is that of linking to the consent receipt of list of third parties personal data is shared with. In some jurisdictions it is only required that the categories of personal data be provided.
If in the MVCR the "Third Party Sharing" flag is true, this is an extension they can use to make the receipt show this level of compliance.
Enter Table: For Extension structure of 3rd party transparency
(link to Table:
- Categories of personal data shared & (or)
- Name of third party shared with
- Purpose of sharing
- Link to third party CR & Policies
This is the first party relationship format for organisations to list who they will share personal data with and for what purpose. The intention is that this can be an independent format for organisations, but this specific version of the listing will be used for the Open Notice registry when organisations sign up to it.
...