Omaerz: 13 revisions imported: Initial Upload of old pages from IDESG Wiki

2018-06-28T04:03:04Z

13 revisions imported: Initial Upload of old pages from IDESG Wiki

← Older revision	Revision as of 04:03, 28 June 2018
(No difference)

Mary Hodder: updated SG for phase II

2018-06-13T20:42:40Z

updated SG for phase II

New page

''<< Back to [[Baseline_Functional_Requirements_v1.0|Baseline Functional Requirements Index]]''

== PRIVACY-7. USER DATA CONTROL ==
Entities MUST provide appropriate mechanisms to enable [[IDEF Glossary USERS|USERS]] to access, correct, and delete [[IDEF Glossary PERSONAL INFORMATION|personal information]].

=== SUPPLEMENTAL GUIDANCE ===
Regarding "personal information", see [[APPENDIX_A-Defined_Terms|Appendix A]], and [[Privacy Req 1|PRIVACY-1 (DATA MINIMIZATION)]] and
[[Interop Req 7|INTEROP-7 (USER REDRESS)]].

“Appropriate” broadly means mechanisms for management of personal information should be
effective, easy to use, and accessible. (See [[Usable Req 1|USABLE-1 (USABILITY PRACTICES)]], [[Usable Req 3|USABLE-3 (PLAIN
LANGUAGE)]], and [[Usable Req 5|USABLE-5 (ACCESSIBILITY)]] for guidance on the usability of such mechanisms.)

"Deletion” generally refers to removal of the data from availability. Data disposal, its complete
removal from the complying entity's own systems and control, may depend on the legal and
contractual requirements applicable to the data; see [[Privacy Req 14|PRIVACY-14 (DATA RETENTION AND DISPOSAL)]].

Note: Intermediaries (third parties) may not have direct control over the information that flows through their systems, but should deploy mechanisms that support entity’s ability to conform to this Requirement. See [[Interop Req 6|INTEROP-6 (THIRD-PARTY COMPLIANCE)]].

See the [https://workspace.idesg.org/kws/public/download.php/53/IDEF-Functional-Model-v1.0.pdf IDESG Functional Model] for definition of Transaction Intermediation for the scope of
“intermediaries.” The functional model describes Transaction Intermediation as “Processes and
procedures that limit linkages between transactions and facilitate credential portability." This includes
functions defined as “Blinding,” “Pseudonymization/Anonymization,” and “Exchange.”

=== REFERENCES ===
Further reference materials to aid organizations interested in conforming to these Requirements can be found at the wiki page [[Supplemental Privacy Guidance]]; this has been archived at https://workspace.idesg.org/kws/public/download.php/56/Supplemental-Privacy-Guidance.docx

=== APPLIES TO ACTIVITIES ===
[[IDEF Functional Model REGISTRATION|REGISTRATION]], [[IDEF Functional Model CREDENTIALING|CREDENTIALING]], [[IDEF Functional Model AUTHENTICATION|AUTHENTICATION]], [[IDEF Functional Model AUTHORIZATION|AUTHORIZATION]], [[IDEF Functional Model INTERMEDIATION|INTERMEDIATION]]

=== KEYWORDS ===
[[IDEF Keywords CHANGES|CHANGES]], [[IDEF Keywords CHOICE|CHOICE]], [[IDEF Keywords CONTROL|CONTROL]], [[IDEF Keywords CORRECTION|CORRECTION]], [[IDEF Keywords PRIVACY|PRIVACY]], [[IDEF Keywords RETENTION|RETENTION]]

=== APPLIES TO ROLES ===
1 - [[IDEF Glossary RELYING PARTIES|RELYING PARTIES]] 
2 - [[IDEF Glossary IDENTITY PROVIDERS|IDENTITY PROVIDERS]] 
3 - Attribute Providers 
4 – Intermediaries 
5 - Credential Service Providers (where there is user interaction) 

----
----
Quick Links: [[SALS]] | [[Baseline Functional Requirements v1.0]] | [[Glossary]] |

----
----

Privacy Req 7 - Revision history

Omaerz: 13 revisions imported: Initial Upload of old pages from IDESG Wiki

Mary Hodder: updated SG for phase II