(1) WG NAME (and any acronym or abbreviation of the name): The WG name, acronym and abbreviation must not include trademarks not owned by the Organization, or content that is infringing, harmful, or inappropriate.
Consent and Information Sharing Work Group (CISWG)
(2) PURPOSE: Please provide a clear statement of purpose and justification why the proposed WG is necessary.
The amount and frequency of sharing of information about, by, and from individuals is outpacing our ability to manage it. Our contention is that when individuals are forced to "consent" to confusing organization-centric privacy policies and terms of use, the flow of quality information is limited. If such constraints were removed, and capabilities built on the side of the individual, then new, rich information will flow - including actual demand data (as opposed to derived/ predicted demand).
The individual is the optimal point of integration and origination for more and more information services. This architectural shift/ reversal to the pre-computing age norm changes the burden on companies when managing data correlation and protection, reducing the scope of toxic data while increasing the need to be responsive to individual requirements regarding the use of that data.
The goal of this working group is to identify and document the use cases and scenarios that illustrate the various sub-sets of individual-driven information sharing, the benefits therein, and specify the policy and technology enablers that should be put in place to enable this information to flow. Our role is to shepherd new specifications by which personal information can be enabled to flow under the control of the individual, improving the relationship between demand and supply.
(3) SCOPE: Explain the scope and definition of the planned work.
The founding Work Group participants recognize that developers are working in an ever-evolving heterogeneous environment that requires interoperability of identity services (i.e. identity- and SOA-enabled applications), both internal and external to the enterprise. In order to advance the identity-enabled marketplace - specifically application domains that rely upon information sharing - this Work Group is chartered to:
- Become an active public discussion forum for the collection, development, and analysis of use cases, scenarios, and specifications that improve individual-driven information sharing.
- Foster awareness of and participation in this effort from the broadest stakeholder cross-section possible, both the near-term use case phase taking place in this working group, the mid-term specification and practical framework build phase, and the long-term adoption of the newly emerged individual-driven information sharing.
- Advocate the adoption of specific standard practices, policies, and terms to increase the quality of privacy practices and improve compliance across all jurisdictions.
(4) DRAFT TECHNICAL SPECIFICATIONS: List Working Titles of draft Technical Specifications to be produced (if any), projected completion dates, and the Standards Setting Organization(s) to which they will be submitted upon approval by the Membership.
- The Standard Information Sharing Label – a clear, simple presentation of the essential details about what happens with information shared online: what data, who gets it, for what purpose, etc. AKA The Standard Label. Projected specification completion: 2013-12-31. Submission Target: 2013-06-31 Projected SSO: ISO.
- Open Notice – An interoperable mechanism for specifying the applicable notices, disclosures, terms, and policies for a given context, e.g., a website. Target Project completion date: 2014-12-31. Project SSO: World Wide Web Consortium
It is the intention of the Information Sharing WG to ultimately submit the specifications listed above to an appropriate Standards Settings Organization for full life-cycle maintenance. The receiving organizations will be determined on a per-specification basis.
(5) OTHER DRAFT RECOMMENDATIONS: Other Draft Recommendations and projected completion dates for submission for All Member Ballot.
(6) LEADERSHIP: Proposed WG Chair and Editor(s) (if any) subject to confirmation by a vote of the WG Participants.
Iain Henderson, The Customers Voice (Co-Chair)
Joe Andrieu, SwitchBook (Co-Chair, Editor of The Standard Information Sharing Label)
Mary Hodder (Co-Editor of the Open Notice Specification)
Valentino Spataro (Co-Editor of the Open Notice Specification)
(7) AUDIENCE: Anticipated audience or users of the work.
Developers entrepreneurs, policy makers, developers, and deployers, both internal and external, to large organizations who manage services for individual customers.
(8) DURATION: Objective criteria for determining when the work of the WG has been completed (or a statement that the WG is intended to be a standing WG to address work that is expected to be ongoing).
The Kantara Leadership Council charters the Information Sharing Work Group for five years. It may be amended from time to time, with changes approved by the Leadership Council. This charter will expire in August 2018.
(9) IPR POLICY: The Organization approved Intellectual Property Rights Policy under which the WG will operate.
Kantara IPR Policy - Option Patent and Copyright (RAND)
(10) RELATED WORK AND LIAISONS: Related work being done in other WGs or other organizations and any proposed liaison with those other WGs or organizations.
- User Managed Access
- Identity Assurance Framework
- Identity Governance Framework
- Project VRM
- Emerging VRM .dot org
- Open ID Foundation
- Identity Commons
- DataPortability Project
OpenID Connect
- SAML
- XACML
- ISO/IEC 29100
- IDESG
- PDEC
- OpenPDS
- OECD (e.g., http://www.oecd.org/internet/ieconomy/oecdguidelinesontheprotectionofprivacyandtransborderflowsofpersonaldata.htm)
- Docracy
- TOD;DR
- Common Terms
- TosBack
- TOSSOS
- Youlah
- Clearware.org
- Customer Commons
- Disconnect.me
- Ghostery.com
- iagreeto.org
- iusondemand.eu
- Know Privacy
(11) CONTRIBUTIONS (optional): A list of contributions that the proposers anticipate will be made to the WG.
Use cases (from prior VPI SIG)Design documentation for personal data store and VPI sharing (Mydex)Reference deployment for personal data store and VPI sharing using ID WSF, Information Cards, XRI / OpenID (Mydex). Open Notice preliminary work and partial draft specification.
(12) PROPOSERS: Names, email addresses, and any constituent affiliations of at least the minimum set of proposers required to support forming the WG.
- Iain Henderson, The Customers Voice
- Colin Wallis,
- Nat Sakimura
- Joe Andrieu, SwitchBook
- Mark Lizar
History
Date | Note |
|---|---|
July 23, 2013 | First complete draft for consideration by work group |
July 1, 2013 | Initial partial draft |