Ce diaporama a bien été signalé.
Nous utilisons votre profil LinkedIn et vos données d’activité pour vous proposer des publicités personnalisées et pertinentes. Vous pouvez changer vos préférences de publicités à tout moment.
Privacy Control Panel
An Introduction
Identiverse June 2019
Andrew Hughes
AndrewHughes3000@gmail.com
Leadership CouncilCha...
2
» PersonalData(Consent) Receipt
» TheKantaraInitiative
PrivacyControlPanelDemo
» KantaraInitiativeConsent& InformationSh...
3
A simpleapproach
A standardizeddata format
A basis for invention& innovation
Copyright © 2019 Kantara Initiative Inc.
WHAT IS A RECEIPT?
4Copyright © 2019 Kantara Initiative Inc.
5
Asalesreceipt is:
» A personalrecord
» Independent of the receipt issuer
» Evidence of the event
» Containsinteraction‘m...
RECEIPTS AND THE ‘AGREEMENT FLOW’
6Copyright © 2019 Kantara Initiative Inc.
7Copyright © 2019 Kantara Initiative Inc.
8Copyright © 2019 Kantara Initiative Inc.
9Copyright © 2019 Kantara Initiative Inc.
10Copyright © 2019 Kantara Initiative Inc.
11Copyright © 2019 Kantara Initiative Inc.
12Copyright © 2019 Kantara Initiative Inc.
13Copyright © 2019 Kantara Initiative Inc.
The ‘agreementflow’ illustratesimportant interactions
» Offer—acceptterms
» ‘Me...
14Copyright © 2019 Kantara Initiative Inc.
Salesreceiptsare requiredby law
(AUS,NZ, others) or bycustom
Why not Personal D...
15
Whenpersonal data is involved:
» PrivacyNotice
» Privacy Statement
» Purpose of processing
» Data controller contact in...
16Copyright © 2019 Kantara Initiative Inc.
The Kantara
Initiative
Consent Receipt
*
Privacy Statement
& Notice
Personal Da...
17Copyright © 2019 Kantara Initiative Inc.
The ‘agreementflow’ illustrates
that theindependentpersonal
record-keepingfunct...
18
Apersonal data receiptis:
» A personalrecord
» Independent of the receipt issuer
» Evidence of the event
» Containsinte...
19
Standardized Personal Data Receipts
offered to you whenever you agree
to personal dataprocessing
willhelp enable a prod...
20Copyright © 2019 Kantara Initiative Inc.
THE DEMO NARRATIVE
21Copyright © 2019 Kantara Initiative Inc.
Imaginein a few years:
you have‘agreed’at 500 services
Copyright © 2019 Kantara Initiative Inc. 22
Now
What?
Use Your KantaraInitiative
PrivacyControlPanel!
(ofcourse)
Copyright © 2019 Kantara Initiative Inc. 24
25Copyright © 2019 Kantara Initiative Inc.
FeaturingKantaraMembers
Copyright © 2019 Kantara Initiative Inc. 26
Live Demo@Identiverse
Friday,June 28,2019
Copyright © 2019 Kantara Initiative Inc. 27
Live Demo@Identiverse
Friday,June 28,2019
8:30 am
Copyright © 2019 Kantara Initiative Inc. 28
29Copyright © 2019 Kantara Initiative Inc.
Automatic Receipt Generation& Offer
 Definethe‘Shoebox’ API
 Sites should off...
30Copyright © 2019 Kantara Initiative Inc.
31Copyright © 2019 Kantara Initiative Inc.
Next work items
 Discover more implementations
 Next version of the specifica...
32Copyright © 2019 Kantara Initiative Inc.
Known Implementations
Tell us about your project!
kantarainitiative.org/conflue...
Kantara Initiative Groups Contact
Kantara Initiative:
- the global consortium improving
trustworthy use of identity and
pe...
Nurture. Develop. Operate. – that’s
what we do
Colin Wallis,Executive Director
colin@kantarainitiative.org
Twitter: @Kanta...
Prochain SlideShare
Chargement dans…5
×

2019 | Keeping Up With The Kantarians - Andrew Hughes | Identiverse | Day 1, June 25 | Washington D.C.

44 vues

Publié le

2019 marks Kantara's 10 year anniversary. What a ride! Kantara's provenance can help folks newer to the digital identity domain appreciate why recent history informs the current challenges. It also helps contextualize Kantara's 'raison d'etre' in drawing the community together to work on a range of specifications, best practice, R&D and conformity assessment programs. This session will connect the recent past with the 'here and now' to give attendees a rich tapestry of understanding to appreciate the role of industry consortia and standards development organizations to transition the digital economy to a more mature state.

Publié dans : Technologie
  • Soyez le premier à commenter

  • Soyez le premier à aimer ceci

2019 | Keeping Up With The Kantarians - Andrew Hughes | Identiverse | Day 1, June 25 | Washington D.C.

  1. 1. Privacy Control Panel An Introduction Identiverse June 2019 Andrew Hughes AndrewHughes3000@gmail.com Leadership CouncilChair, Kantara Initiative 1
  2. 2. 2 » PersonalData(Consent) Receipt » TheKantaraInitiative PrivacyControlPanelDemo » KantaraInitiativeConsent& InformationSharingWork Group Copyright © 2019 Kantara Initiative Inc.
  3. 3. 3 A simpleapproach A standardizeddata format A basis for invention& innovation Copyright © 2019 Kantara Initiative Inc.
  4. 4. WHAT IS A RECEIPT? 4Copyright © 2019 Kantara Initiative Inc.
  5. 5. 5 Asalesreceipt is: » A personalrecord » Independent of the receipt issuer » Evidence of the event » Containsinteraction‘metadata’ » Timestamps, Contact information, Verification codes » Transaction details, Cryptographic elements & signatures » Points to or containsissuer’s policy statements Copyright © 2019 Kantara Initiative Inc.
  6. 6. RECEIPTS AND THE ‘AGREEMENT FLOW’ 6Copyright © 2019 Kantara Initiative Inc.
  7. 7. 7Copyright © 2019 Kantara Initiative Inc.
  8. 8. 8Copyright © 2019 Kantara Initiative Inc.
  9. 9. 9Copyright © 2019 Kantara Initiative Inc.
  10. 10. 10Copyright © 2019 Kantara Initiative Inc.
  11. 11. 11Copyright © 2019 Kantara Initiative Inc.
  12. 12. 12Copyright © 2019 Kantara Initiative Inc.
  13. 13. 13Copyright © 2019 Kantara Initiative Inc. The ‘agreementflow’ illustratesimportant interactions » Offer—acceptterms » ‘Meeting of the minds’ » Intent to enter intoagreement » Record keeping » Exchange of ‘valuableconsideration’
  14. 14. 14Copyright © 2019 Kantara Initiative Inc. Salesreceiptsare requiredby law (AUS,NZ, others) or bycustom Why not Personal Data Receipts?
  15. 15. 15 Whenpersonal data is involved: » PrivacyNotice » Privacy Statement » Purpose of processing » Data controller contact information » PLUS Additional detailsthatare very familiarto Data ProtectionOfficers (but not to regular people) Copyright © 2019 Kantara Initiative Inc.
  16. 16. 16Copyright © 2019 Kantara Initiative Inc. The Kantara Initiative Consent Receipt * Privacy Statement & Notice Personal Data Receipt* Data Subject Rights
  17. 17. 17Copyright © 2019 Kantara Initiative Inc. The ‘agreementflow’ illustrates that theindependentpersonal record-keepingfunction is not supported fordata-related interactions!
  18. 18. 18 Apersonal data receiptis: » A personalrecord » Independent of the receipt issuer » Evidence of the event » Containsinteraction‘metadata’ » Timestamps, Contact information, Verification codes » Transaction details, Cryptographic elements & signatures » Points to or containsissuer’s policy statements Copyright © 2019 Kantara Initiative Inc.
  19. 19. 19 Standardized Personal Data Receipts offered to you whenever you agree to personal dataprocessing willhelp enable a product ecosystem that assists you to exercise your data rights… Copyright © 2019 Kantara Initiative Inc.
  20. 20. 20Copyright © 2019 Kantara Initiative Inc.
  21. 21. THE DEMO NARRATIVE 21Copyright © 2019 Kantara Initiative Inc.
  22. 22. Imaginein a few years: you have‘agreed’at 500 services Copyright © 2019 Kantara Initiative Inc. 22
  23. 23. Now What?
  24. 24. Use Your KantaraInitiative PrivacyControlPanel! (ofcourse) Copyright © 2019 Kantara Initiative Inc. 24
  25. 25. 25Copyright © 2019 Kantara Initiative Inc.
  26. 26. FeaturingKantaraMembers Copyright © 2019 Kantara Initiative Inc. 26
  27. 27. Live Demo@Identiverse Friday,June 28,2019 Copyright © 2019 Kantara Initiative Inc. 27
  28. 28. Live Demo@Identiverse Friday,June 28,2019 8:30 am Copyright © 2019 Kantara Initiative Inc. 28
  29. 29. 29Copyright © 2019 Kantara Initiative Inc. Automatic Receipt Generation& Offer  Definethe‘Shoebox’ API  Sites should offer receipts by default  Develop browser add-ons to convert existinginformation to Kantara standard receipt  Once people have many receipts, apps can be inventedfor management,control and action
  30. 30. 30Copyright © 2019 Kantara Initiative Inc.
  31. 31. 31Copyright © 2019 Kantara Initiative Inc. Next work items  Discover more implementations  Next version of the specification  Functional & structural updates  Additional use case requirements  Specification update project has started  Introduce personal data receipt concept to Privacy Engineeringcommunity  Adapt/adopt controlled vocabularies (e.g. W3C DPV)
  32. 32. 32Copyright © 2019 Kantara Initiative Inc. Known Implementations Tell us about your project! kantarainitiative.org/confluence/display/infosharing
  33. 33. Kantara Initiative Groups Contact Kantara Initiative: - the global consortium improving trustworthy use of identity and personal data kantarainitiative.org kantarainitiative.org/membership/ colin@kantarainitiative.org Consent & Information Sharing WG: - Consent Receipt specification - Interop demo development - Data sharing specifications kantarainitiative.org/confluence/display/infosharing andrewhughes3000@gmail.com JOIN: https://kantarainitiative.org/gpa-signup/?selectedGroup=3 Consent Practices WG: - Common practices for consent management kantarainitiative.org/confluence/display/consentmanagement andrewhughes3000@gmail.com JOIN: https://kantarainitiative.org/gpa-signup/?selectedGroup=40 Copyright © 2019 Kantara Initiative Inc. 33
  34. 34. Nurture. Develop. Operate. – that’s what we do Colin Wallis,Executive Director colin@kantarainitiative.org Twitter: @KantaraColin, @KantaraNews Join us at https://kantarainitiative.org/membership/ Ethics & Conformance Trust Marked 34

×