https://wiki.idesg.org/index.php?action=history&feed=atom&title=Privacy_Req_12Privacy Req 12 - Revision history2026-05-06T10:00:02ZRevision history for this page on the wikiMediaWiki 1.38.4https://wiki.idesg.org/index.php?title=Privacy_Req_12&diff=5743&oldid=prevOmaerz: 9 revisions imported: Initial Upload of old pages from IDESG Wiki2018-06-28T04:02:58Z<p>9 revisions imported: Initial Upload of old pages from IDESG Wiki</p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<tr class="diff-title" lang="en">
<td colspan="1" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="1" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 04:02, 28 June 2018</td>
</tr><tr><td colspan="2" class="diff-notice" lang="en"><div class="mw-diff-empty">(No difference)</div>
</td></tr></table>Omaerzhttps://wiki.idesg.org/index.php?title=Privacy_Req_12&diff=5742&oldid=prevMary Hodder: updated SG for phase II2018-06-13T20:52:36Z<p>updated SG for phase II</p>
<p><b>New page</b></p><div>''<< Back to [[Baseline_Functional_Requirements_v1.0|Baseline Functional Requirements Index]]''<br />
<br />
== PRIVACY-12. ANONYMITY ==<br />
Wherever feasible, entities MUST utilize identity systems and processes that enable transactions that are anonymous, anonymous with validated [[IDEF Glossary ATTRIBUTES|attributes]], pseudonymous, or where appropriate, uniquely identified. Where applicable to such transactions, entities employing service providers or intermediaries MUST mitigate the risk of those [[IDEF Glossary THIRD PARTIES|THIRD-PARTIES]] collecting [[IDEF Glossary USERS|USER]] [[IDEF Glossary PERSONAL INFORMATION|personal information]]. Organizations MUST request individuals’ credentials only when necessary for the transaction and<br />
then only as appropriate to the risk associated with the transaction or only as appropriate to the<br />
risks to the parties associated with the transaction.<br />
<br />
=== SUPPLEMENTAL GUIDANCE ===<br />
In support of legal, policy or personal requirements for anonymous or pseudonymous USER<br />
participation, [[IDEF Glossary DIGITAL IDENTITY MANAGEMENT FUNCTIONS|digital identity management functions]] and systems should permit anonymous and<br />
(persistent across sessions) pseudonymous registration and participation, where required by law or<br />
otherwise feasible. To further facilitate that goal, identifiers and personal data (including attributes)<br />
should be kept separate wherever feasible: see [[Privacy Req 4|PRIVACY-4 (CREDENTIAL LIMITATION)]] and [[Privacy Req 15|PRIVACY-15 (ATTRIBUTE SEGREGATION)]].<br />
<br />
Risk needs to be assigned by each entity based the risk of loss to assets or reputation of that entity.<br />
<br />
See [[Interop Req 6|INTEROP-6 (THIRD-PARTY COMPLIANCE)]] on the mitigation of risks associated with third-party<br />
service providers or data users.<br />
<br />
See [[Privacy Req 5|PRIVACY-5 (DATA AGGREGATION RISK)]] regarding the risk of collecting additional information.<br />
<br />
See [[Privacy Req 13|PRIVACY-13 (CONTROLS PROPORTIONATE TO RISK)]] regarding the implementation of controls to<br />
mitigate identified privacy risk.<br />
<br />
See [[Privacy Req 11|PRIVACY-11 (OPTIONAL INFORMATION)]] regarding availability of user choices regarding optional<br />
disclosure of personal information.<br />
<br />
=== REFERENCES ===<br />
Further reference materials to aid organizations interested in conforming to these Requirements can be found at the wiki page [[Supplemental Privacy Guidance]]; this has been archived at https://workspace.idesg.org/kws/public/download.php/56/Supplemental-Privacy-Guidance.docx<br />
<br />
=== APPLIES TO ACTIVITIES ===<br />
[[IDEF Functional Model REGISTRATION|REGISTRATION]], [[IDEF Functional Model CREDENTIALING|CREDENTIALING]], [[IDEF Functional Model AUTHENTICATION|AUTHENTICATION]], [[IDEF Functional Model AUTHORIZATION|AUTHORIZATION]], [[IDEF Functional Model INTERMEDIATION|INTERMEDIATION]]<br />
<br />
=== KEYWORDS ===<br />
[[IDEF Keywords ACCOUNT|ACCOUNT]], [[IDEF Keywords ANONYMITY|ANONYMITY]], [[IDEF Keywords CHOICE|CHOICE]], [[IDEF Keywords IDENTIFIERS|IDENTIFIER]], [[IDEF Keywords PRIVACY|PRIVACY]]<br />
<br />
=== APPLIES TO ROLES ===<br />
1 - [[IDEF Glossary RELYING PARTIES|RELYING PARTIES]] <br><br />
2 - [[IDEF Glossary IDENTITY PROVIDERS|IDENTITY PROVIDERS]] <br><br />
3 - Attribute Providers <br><br />
4 – Intermediaries <br><br />
5 - Credential Service Providers (where there is user interaction) <br><br />
<br />
----<br />
----<br />
Quick Links: [[SALS]] | [[Baseline Functional Requirements v1.0]] | [[Glossary]] |<br />
<br />
----<br />
----</div>Mary Hodder