Long Term Mission to come up with an alternative policy framework for authorization and privacy online which is more performative, beneficial, compliant and empowering than what is online today.
To produce an alternative to the 'I Agree" (to things i don't read or understand) a significant challenge in the use of online services that have entrenched contract based policy in to terms of services. And to produce an alternative that scales, by working towards common international specifications that can be used to standardize consent online to make this happen.
The objective to produce standards for an alternative format focused on transparency laws and standards which are operationally consistent across privacy jurisdictions. people can trust and that scales online. The mission has been to provide people with choices to choose what is best for them in context. This specification for 2FN is designed to produce 'Privacy Assurance', a new category for eConsent and identity management, which produces legal proofs to help facilitate people (not enterprise) in making choices that are for them trustworthy and accountable.
After a tremendous amount of work, iteration and implementation, we are happy to announce an alternative to the Opt In and Opt-Out terms and policies online a tool for digital identity access and management that evolves the authorization process to include the PII Principal in the scope of access and data controls.
2FN and 2FC is an alternative negotiation and policy agreement format which can be used independently by both parties (the PII Controller and the PII Principal) or together by both parties for preference and permission exchange and negotiation.
Use to provide another choice, or an alternative notification layer to checkboxes like:
- I have read and understand this privacy policy
- I agree to these terms and conditions
To learn more, check out the first draft of the 2FN and 2FC Introduction
Take a look at ANCR: Consent Receipt Section 1 - which is the work to specify the ANCR Notice Record Format for generating Notice and Consent Receipts - for PII Controller and Principal processing records