...
- The MVCR is the primary proof of concept Use Case for the core consent receipt data model.
- The MVCR is the open common consent meta-format for a legal consent notice delivered as a consent receipt when consent is provided on while registering on the website.
- The alpha MVCR instance is to be used to sign up to the CISWG, and is best explained as an advanced consent button, which calls the consent receipt generator API, (Hosted at consentreceipts.org) and delivers a consent receipt visually in the browsers as well as a jwt machine readable consent receipt to the person consenting.
- The consent receipt generator and the MVCR is intended to demonstrate how/why the most simple version of a consent receipt is a massive improvement over existing consent buttons on line, especially in the context of website/service registration.
- management better than existing consent, demonstrating that a record by itself provides transparency over policy and organisation information sharing practices
- Used as a demonstrator to evaluate the legal and binding aspects of a consent record
- Used to demonstrate how a consent receipt opens the closed privacy policy infrastructure.
Objective
- The MVCR has a downloadable record of consent, provides contact and purpose in context
- It is record the data subject receives that has a clear record of purpose, and can be used to independently manage consent after the consent has been provided.
- Usability: It is, by itself intended to transparently show organisation data sharing practices at a glance
- The MVCR implementation will be evaluated in compairison to the MVCR v0.7 specification, to create a list of issues, that will be solved in the v0.8 iteration of the MVCR spec.
...
- display the meta format that meets the minimum compliance obligations of an organisation that does not:
- share with third parties,
- does not collect sensitive data,
- includes a self assertion that context specific requirements are included, this minimum viable consent receipt provides the minimum needed for a person to interact independently with an organizations to address any additional compliance or complaint requirements.
Notes:
MVCR
...
MVCR Website Registration Walkthough for the CIS-WG Registration:
- Specific Use Case for the Kantara CISWG Registration
- non-sensitive PII, -
- e.g.no third party sharing,
- no-PII payload,
- with output into a json format of the receipt download as a text file with html version displayed on screen and pdf version available to send via email (evaluating different methods of delivery)
- includes a simple form for creating a static receipt or code that generates a receipt dynamically at point of consent.
- presents the receipt on a website, with a machine readable downloaded version
- How to documentation
- Walkthrough
- WG- Admin
- installs a consent button that calls the consent receipt generator api.
- this code (or consent receipt generator) is put on the website
- Alice Experience
- alice goes to sign up
- alice see human readable in the website page, gets download machine readable receipt message,
- WG- Admin
...