UMA Legal

...

What is the purpose of this model? The UMA technical protocol enables individuals to apply protection policies to their digital assets by using services to issue "permission tokens". The UMA business model maps those permission tokens and related artifacts to licenses as legal devices. This licensing mechanism is valuable to individuals, organizations, legal professionals, and privacy professionals because it allows Alice to license Bob to use her digital resources on her terms.

Mission

• Produce a set of toolkits and associated educational materials whose purpose is to accelerate the ability of those in the following roles to adopt, deploy, and use UMA-enabled services in a manner consistent with protecting privacy rights:
  • Individuals ("natural persons")
  • Organizations ("legal persons" such as businesses and governments)
  • Legal representatives of the above
• Focus on GDPR-related toolkits first. A toolkit could be anything that helps use or leverage an existing piece of legislation or framework, such as an SDK, a checklist, consent receipt templates or profiles, or a set of CommonAccord text, and could be related to the GDPR itself, the EU-U.S. Privacy Shield, BCRs, and so on.
• To inform the roadmap work, develop:
  
  • Comparative analysis of UMA and GDPR concepts such as data subject, processor, and controller
  • Roundup of contractual and regulatory use cases
• Leverage specialist legal expertise wherever possible to complete and review the deliverables.

...

The subgroup's meeting times and notes are here. We meet most Fridays at 8am PT. Legal topics are currently being covered in the main Work Group call series. See the UMA home page, UMA calendar, and main Meetings and Minutes page for details.

If you are just visiting and are interested to join the UMA Work Group and take part in this subgroup's efforts, we invite you to join! Visit our home page and see the Join link there. Note: Since the legal subgroup meetings do not count towards WG quorum, it's advised to join as a "non-voting participant" unless you also intend to join the WG meetings on Thursdays at 9am PT.

Sources of liability tension

...