Use Case: Kantara v0.8 Implementation

Authors: Mark & Oliver

Log Of Activities

...

To create a consent receipt the privacy policy (or existing consent notice) was reviewed for collection, use and disclosure practices, and these were collected in order to implmenet implemenet a base consent receipt template for the Kantara WG GPA sign-up form. 

...

• Disclosure 
  • Virtual
  • Emma Inc

5. Scopes

When reviewing the 3^rd Party Sharing practices for both PII and PI, it became clear that there were some sharing.

1. Google Analytics; Analytical services collect some sort of personally identifiable information as a rule of thumb, which is why it this sharing should also be disclosed this fact to people via something like a privacy policy:

 the Kantara CISWG (Consent & Information Sharing Work Group) The WG Participation agreement. This agreement on boards the work group participant to the Consent & Information Sharing Work Group.

• Review the privacy policy at Kantara,
• Review at the PI information sharing practices for Kantara WG membership.
• Review the privacy policy and membership agreement
• Review existing consent form (if there is one)

...

• Transfer of personal data to the USA can benefit from consent on the GPA form

Results

The results of the consent audit for the CIS WG participation agreement provided a number of recommendations for consent enhancement in addition to some recommendations for review by the Kantara Organisation.

Importantly, it is clear that the current priacy policy is not in compliance with consent and information regulations, nor does it reflect the brand trust that is inherent to the Kantara organization.Scpopes

...