ANCR (Anchored Notice and Consent Receipt) is digital public-privacy infrastructure in compliance with privacy and cybersecurity laws and in conformance with technical standards. We use open methods to make our work accessible that includes the ISO/IEC 29100:2024 and ISO/IEC 27560:2024 technical standards and Council of Europe 108+, GDPR, and other legal frameworks to generate ANCR Transparency Performance Indicator Reports to measure for valid digital notice and consent.

ANCR refers to this record of a notice-based activity. Importantly, the individual (PII Principal) can use this to capture the state and anchor a data subject’s relationship to the PII Controller's identity. A notice receipt can be re-used as a consent receipt and token for a secondary purpose specified by the individual. Which is what makes ANCR special.

ANCR’d notice, notifications and disclosures require a record of processing activities and the associated authority to do so. It is ANCR’d by the data subject’s, notice and consent receipts, and credential-based records specific to a purpose, and the specified scope of disclosure.

The PII Controller Identification and PII Controller Notice allows the PII Principal (data subject) to measure the operational transparency of the controller and its organization. With this in hand Alice can develop an understanding and begin to make risk decisions on her own behalf. The 4 measures of transparency are referred to as Transparency Performance Indicators (TPIs) when used together create a PII Controller Record as a method for Transparency Performance Reporting. This complements, extends, and is in the spirit of the Consent Receipt work, namely tools for people to enhance personal data control and co-regulation of digital identity.