Yes. It reads a lot like http://www.pamf.org/teen/abc/sex/consent.html and makes me wonder where authorization policy comes into the picture.

Adrian

On Tue, Feb 16, 2016 at 10:47 PM, Eve Maler <eve@xmlgrrl.com> wrote:
Don't forget about Part 3 in the series...

https://iapp.org/news/a/top-10-operational-impacts-of-the-gdpr-part-3-consent/


Eve Maler
Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl


On Sun, Feb 14, 2016 at 6:22 AM, Adrian Gropper <agropper@healthurl.com> wrote:
This is the one I think is most relevant to UMA: https://iapp.org/news/a/top-10-operational-impacts-of-the-gdpr-part-6-rtbf-and-data-portability/

I propose that a combination of #wideeco and #shoebox features would support most, maybe all of the requirements.

There are a number of very interesting things for us to consider. For example, the distinction they make around whether the data is processed under consent or not. I might interpret that as any (narrow ecosystem) process that gives the subject some control over her data automatically triggers a number of rights and corresponding duties that would be associated with a wide ecosystem or subject-controlled AS.

Adrian



On Saturday, February 13, 2016, Eve Maler <eve@xmlgrrl.com> wrote:


--

Adrian Gropper MD

PROTECT YOUR FUTURE - RESTORE Health Privacy!
HELP us fight for the right to control personal health data.

DONATE: http://patientprivacyrights.org/donate-2/





--

Adrian Gropper MD

PROTECT YOUR FUTURE - RESTORE Health Privacy!
HELP us fight for the right to control personal health data.

DONATE: http://patientprivacyrights.org/donate-2/