ANCR Record Extensions

Owned by Mark Lizar
Aug 26, 2022
2 min read

There are 3 Extension and a protocol for how to use the extensions for trustworthy. id.

 

The anchor record is captured or generated for the explicit control of the PII Principal.  This record, standardized with ISO/IEC 29100 security and privacy technique framework, can then be used for transparency interoperability.   

The Anchor record and linked consent ledger is used by the PII Principal to track the state of privacy and status of consent for dynamic data controls for bilateral (peer to peer) interaction.    The anchor record is minted with the PII Controller ANCR record and in this way extended by a product or service purpose specification.  

  1. Privacy State (tentative)  

 

  • The legitimate interests of a controller, including those of a controller to which the personal data may be disclosed, or of a third party, may provide a legal basis for processing, provided that the interests or the fundamental rights and freedoms of the data subject are not overriding, taking into consideration the reasonable expectations of data subjects based on their relationship with the controller....  

  • At any rate the existence of a legitimate interest would need careful assessment including whether a data subject can reasonably expect at the time and in the context of the collection of the personal data that processing for that purpose may take place. The interests and fundamental rights of the data subject could in particular override the interest of the data controller where personal data are processed in circumstances where data subjects do not reasonably expect further processing  

  • The processing of personal data strictly necessary for the purposes of preventing fraud also constitutes a legitimate interest of the data controller concerned. The processing of personal data for direct marketing purposes may be regarded as carried out for a legitimate interest.  

  • (GDPR Rec 47 

  1. Privacy State Notification Types (tentative) 

reference the expected processing for a specified purpose in reference to common law  (  

  • The processing of personal data strictly necessary for the purposes of preventing fraud also constitutes a legitimate interest of the data controller concerned. The processing of personal data for direct marketing purposes may be regarded as carried out for a legitimate interest.  

  •  

  • Processing is ‘as expected’ Notification 

  • unverified  

  • As expected,  

  • not as expected,  

  • minor change in state,  

  • material change in state ,  

  • PII Principal  

  •  

  1. Transparency Status  

 

  • Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, the controller and the processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including, inter alia, as appropriate:  

  •  

(Conv. 108+ Art 33.1) 

  1. Transparency Status Types 

  • Not-Available 

  • In-Active 

  • Active 

  • Active & Operational 

  • Active & Dynamic