Objective

This ANCR Record specification provides a methodology to audit a notice and produce a consent receipt.  The objective of this documents is to

1. Provide a set of instructions for recording a notice and its purpose specification
2. To then compare the conformance of the record with a set of rules or regulations referred to here as a code of practice. 

Methodology

This method describes, how to audit a notice to generate an ANCR Record using ISO/IEC 29100 receipt format, which is published in the ISO/IEC 29184 Annex D, 

The resulting audit is then used for assessing conformance with an ISO/IEC 29184 Online Privacy Notice and Consent control.  In order to demonstrate how the ANCR Notice Record for assessing conformance when creating a digital identifier and processing personal data.

Instructions 

1. Read a notice 
   1. collect down the PII Controller Name 
   2. collect down the PII Controller Address
   3. collect contact information 
   4. collect link to privacy policy 
   5. collect any links to privacy access information 
2. Indicate in which concentric manner data has been 
3. Capture the legal justifications for processing 
4.  Capture the Notice
   1.  indicate what the expected consent type is  prior to the notice
   2. indicate if personal identifiers are collected prior to presenting the notice
5. Indicate the legal justification from the 6 categories - 
6. indicate the personal data is sensitive 
7. capture purpose description 
8. capture the authorization scope
   1. frequency 
   2. duration

• This audits a notice for information that is required for capture, creations , or use of identifiers.
• For meaningful consent in Canada we also capture
• A - is there notice of risk and harms, and if there is a privacy information service point / api for dynamic data controls