https://wiki.idesg.org/index.php?action=history&feed=atom&title=Privacy_Req_8Privacy Req 8 - Revision history2026-05-06T10:00:04ZRevision history for this page on the wikiMediaWiki 1.38.4https://wiki.idesg.org/index.php?title=Privacy_Req_8&diff=5905&oldid=prevOmaerz: 10 revisions imported: Initial Upload of old pages from IDESG Wiki2018-06-28T04:03:05Z<p>10 revisions imported: Initial Upload of old pages from IDESG Wiki</p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<tr class="diff-title" lang="en">
<td colspan="1" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="1" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 04:03, 28 June 2018</td>
</tr><tr><td colspan="2" class="diff-notice" lang="en"><div class="mw-diff-empty">(No difference)</div>
</td></tr></table>Omaerzhttps://wiki.idesg.org/index.php?title=Privacy_Req_8&diff=5904&oldid=prevMary Hodder: updated SG phase II2018-06-13T20:43:55Z<p>updated SG phase II</p>
<p><b>New page</b></p><div>''<< Back to [[Baseline_Functional_Requirements_v1.0|Baseline Functional Requirements Index]]''<br />
<br />
== PRIVACY-8. THIRD-PARTY LIMITATIONS ==<br />
Wherever [[IDEF Glossary USERS|USERS]] make choices regarding the treatment of their [[IDEF Glossary PERSONAL INFORMATION|personal information]], those choices MUST be communicated effectively by that entity to any [[IDEF Glossary THIRD PARTIES|THIRD-PARTIES]] to which it transmits the personal information.<br />
<br />
=== SUPPLEMENTAL GUIDANCE ===<br />
Regarding "personal information", see [[APPENDIX_A-Defined_Terms|Appendix A]], and [[Privacy Req 1|PRIVACY-1 (DATA MINIMIZATION)]].<br />
<br />
One example of a USER's choice that creates a use limitation would be their election to restrict the<br />
use of their personal information to specific purposes only. This Requirement broadly means that<br />
entities convey all such restrictions to the "downstream" recipients of personal information, when they<br />
share that information. However, this Requirement does not dictate what elective choices a USER<br />
should be prompted to make; and it does not require an entity to convey (or enforce) a USER's choices<br />
or instructions if those choices contradict law, regulation or legal process.<br />
<br />
Please note, [[Interop Req 6|Requirement INTEROP-6 (THIRD-PARTY COMPLIANCE)]] also includes certain specific<br />
duties in connection with THIRD-PARTIES receiving personal information from an entity.<br />
<br />
Responsibilities for liability should be spelled out in agreements between organizations exchanging<br />
personal information in the identity ecosystem, as well as the format and style of the communication of<br />
user-stated privacy preferences and information.<br />
<br />
This only applies instances of personal information passed to third parties.<br />
<br />
=== REFERENCES ===<br />
Further reference materials to aid organizations interested in conforming to these Requirements can be found at the wiki page [[Supplemental Privacy Guidance]]; this has been archived at https://workspace.idesg.org/kws/public/download.php/56/Supplemental-Privacy-Guidance.docx<br />
<br />
=== APPLIES TO ACTIVITIES ===<br />
[[IDEF Functional Model REGISTRATION|REGISTRATION]], [[IDEF Functional Model CREDENTIALING|CREDENTIALING]], [[IDEF Functional Model AUTHENTICATION|AUTHENTICATION]], [[IDEF Functional Model AUTHORIZATION|AUTHORIZATION]], [[IDEF Functional Model INTERMEDIATION|INTERMEDIATION]]<br />
<br />
=== KEYWORDS ===<br />
[[IDEF Keywords CHOICE|CHOICE]], [[IDEF Keywords LIMITATION|LIMITATION]], [[IDEF Keywords NOTICE|NOTICE]], [[IDEF Keywords PORTABILITY|PORTABILITY]], [[IDEF Keywords PRIVACY|PRIVACY]], [[IDEF Keywords THIRD PARTIES|THIRD-PARTIES]]<br />
<br />
=== APPLIES TO ROLES ===<br />
1 - [[IDEF Glossary RELYING PARTIES|RELYING PARTIES]] <br><br />
2 - [[IDEF Glossary IDENTITY PROVIDERS|IDENTITY PROVIDERS]] <br><br />
3 - Attribute Providers <br><br />
4 – Intermediaries <br><br />
5 - Credential Service Providers (where there is user interaction) <br><br />
<br />
----<br />
----<br />
Quick Links: [[SALS]] | [[Baseline Functional Requirements v1.0]] | [[Glossary]] |<br />
<br />
----<br />
----</div>Mary Hodder