...
Since the first signatory in 1980, the international standardisation of security and privacy law has been underway to become formalised into regulation that is now enforceable upon its implemented as legislation in Commonwealth countries, like the EU through the General Data Protection Regulation and Canada through Quebec Law 25. This has paved the way for the ratification of the updated to the 108 Convention from the Council of Europe to Convention 108+. The international commonwealth privacy framework, which is interoperable with the ISO/iEC 29100 security and privacy framework, also widely adopted and open access.
This Digital Trust Assessment Scheme, first identity management trust assessment scheme creates a PII Controller Record, using the Kantara Consent Receipt Schema, now also found in the ISO/IEC 27560 (2023) - Consent Record information structure.
...
when PII Controller Identity information is provided in accordance to when data is captured, to assess the security and privacy risk and compliance, to determine the legal validity of consent.
If required PII Controller Identity information is provided. to assess operational complinace for any legal justification or authority.
Accessibility & Authenticity the presentation accessibility of the PII Controller Identity Information, taking into account device accessibility, the language and number of screens to access privacy information. in order to then assess the terms and their definition against the legal (and expected) terms and definitions.
Security integrity, of a SSL Certificate (or token) - digital security certificate integrity, asses its OU, Jurisdiction, and Name, to match the PII Controller Information, registration and risks presented in notice.
In Part 2, The the record is used to send a digital privacy rights request, which is then made to operational performance and integrity of the notice, notification and disclosures.
These are used to asses if
...
| Anchor | ||||
|---|---|---|---|---|
|
...