To find more information
Overview
A consent receipt is a record of a consent provided to an individual at the point in a person agrees to the sharing of personal information. Its purpose is to capture the privacy policy and its purpose for sharing personal information so it can be easily used by people to communicate and manage consent and sharing of personal information once it is provided.
- GitHub Repo: https://github.com/KantaraInitiative/CISWG/issues
- Meeting Notes: Meetings and Minutes
- Known Implementations: 2 - Consent Receipt Implementations
- Consent Receipt v0.7 test api on display at ConsentReceipt.org: http://api.consentreceipt.org,
- Consent Receipt CRG JSN - Documentation
- IIW XXIII Consent Receipt presentation: IIW XXIII - Wed 4E Consent Receipts.pptx
Current Status - Version 1.1 has been published
Title: Consent Receipt Specification (download here)
Version: 1.1.0
Date: 2018-02-20
Editors: Mark Lizar, David Turner
Status: This document is a Kantara Initiative Technical Specification Recommendation produced by the Consent & Information Sharing Work Group, and has been approved by the Group. The Public Comment and Intellectual Property Rights Review has been completed. It has been approved by the Membership of the Kantara Initiative. See the Kantara Initiative Operating Procedures for more information.
Abstract: A Consent Receipt is record of authority granted by a Personally Identifiable Information (PII) Principal to a PII Controller for processing of the Principal's PII. The record of consent is human-readable and can be represented as standard JSON. This specification defines the requirements for the creation of a consent record and the provision of a human-readable receipt. The standard includes requirements for links to existing privacy notices & policies as well as a description of what information has been or will be collected, the purposes for that collection as well as relevant information about how that information will be used or disclosed. This specification is based on current privacy and data protection principles as set out in various data protection laws, regulations and international standards.
Consent Receipt Technical Specification Supporting Material
HISTORICAL STATUS
Feb 20 2018
- Eighth draft of version 1.1.0 (Revisions based on comments from public review period)
- Marked up version - Consent Receipt Specification 1_1_0 DRAFT 8.docx
- Clean version - Consent Receipt Specification 1_1_0 DRAFT 8 - clean.docx
- Disposition of comments from public review - Consent Receipt Specification V1.1.0_Comment Submissions-response 2-21-2018.xlsx
Nov 20 2017
- Seventh draft of version 1.1.0
- Marked up version - Consent Receipt Specification 1_1_0 DRAFT 7.docx
- Clean version - Consent Receipt Specification 1_1_0 DRAFT 7 clean.docx
Nov 19 2017
- Sixth draft of version 1.1.0
- Marked up version - Consent Receipt Specification 1_1_0 DRAFT 6.docx
- Clean version - Consent Receipt Specification 1_1_0 DRAFT 6 clean.docx
- JSON scehma - CR Schema v1_1_0 DRAFT 6.json
Oct 25 2017
- Fifth draft of version 1.1.0
- Marked up version - Consent Receipt Specification 1_1_0 DRAFT 5a.docx
- Clean version - Consent Receipt Specification 1_1_0 DRAFT 5a - clean.docx
- JSON schema - CR Schema v1_1_0 DRAFT 5.json
Oct 19 2017
- Fourth draft of version 1.1.0 incorporating changes based on Sprint 4 - Sprint 6 Consent Receipt Specification 1_1_0 DRAFT 4.docx
Aug 28 2017
- Purpose Specification: Draft 1: Purpose Category Specification for a Consent Receipt v.0.8
Aug 24 2017
- Third draft of version 1.1.0 incorporating changes based on Sprint 3 Consent Receipt Specification 1_1_0 DRAFT 3.docx
July 13 2017
- Second draft of version 1.1.0 Consent Receipt Specification 1_1_0 DRAFT 2 (1).docx
June 2017
- First draft of version 1.1.0 Consent Receipt Specification 1_1_0 DRAFT 1.docx
April 2017