Use Case: Kantara v0.8 Implementation
Authors: Mark & Oliver
Log Of Activities
| Activities | Date | Status | Notes |
|---|---|---|---|
| Converted Api to Plugin | Finished | ||
| Updating JSON to v0.8 | 16/Jun/2016 | in progress | |
| Adding 2 conformance modes to this doc |
...
Kantara has a trusted and unique brand in trusted services, in that it is a community of people invested in standards development, developing trusted technology, policy, protocols around identity and policy. As a result, it is important to Kantara to be transparent around the collection use and disclosure of PII as Kantara Initiative is comprised of open and transparent Work Groups, where members agree to participate in a WG by consenting to a workgroup participation agreement.
In the current CISWG Participation Agreement sign up form there are 4 active options.
...
To create a consent receipt the privacy policy (or existing consent notice) was reviewed for collection, use and disclosure practices, and these were collected in order to implemenet a base consent receipt template for the Kantara WG GPA sign-up form.
...
- In the privacy policy there is a reference to an implied consent to transfer personal information across jurisdictional borders which is not compliant with current Privacy Shield practices
- Recommend adding an explicit consent to the WPA form
- Member data shared on WG WIKI in participation roster (link to participant roster)
- All post to mailing list are captured in a public achieved (link to mailing list for m)
WG PI Sharing practicesPII Disclosure
- Disclosure
- Virtual
- Emma Inc
Scopes
...
In the current CISWG Participation Agreement sign up form there are 4 active options.
- Consent to Join WG
- Authority to consent on behalf of organisation (requires link to withdraw authority)
- Consent Preference - voting or non-voting (link to policy for changing voting status)
- Kantara PII Disclosure