Completing my action item. Please let me know what you think! Current mission statement(s) http://kantarainitiative.org/confluence/display/uma/UMA+Legal Recent discussion on this point http://kantarainitiative.org/confluence/display/uma/UMA+legal+subgroup+notes... - Produce a set of toolkits and associated educational materials by the end of 2017 whose purpose is to accelerate the ability of those in the following roles to adopt, deploy, and use UMA-enabled services in a manner consistent with UMA's charter http://kantarainitiative.org/confluence/display/uma/Charter*, particularly where the resource owner is an individual: - Individuals themselves ("natural persons") - Organizations ("legal persons" such as businesses and governments) - Legal representatives of the above - Focus on GDPR-related toolkits first and foremost. A toolkit could be anything that helps use or leverage an existing piece of legislation or framework, such as an SDK, a checklist, consent receipt templates or profiles, or a set of CommonAccord text, and could be related to the GDPR itself, the EU-U.S. Privacy Shield, BCRs, and so on. - Develop a roadmap by the end of 2016 that identifies specific deliverables and timelines within 2017. - By the end of 2016, develop two initial deliverables to inform the roadmap work: - Comparative analysis of UMA and GDPR concepts such as data subject, processor, and controller - Roundup of contractual and regulatory use cases - Leverage specialist legal expertise wherever possible to complete and review the deliverables. *What I mean here, specifically, is: "enable a resource owner to control the authorization of data sharing and other protected-resource access made between online services on the owner’s behalf or with the owner’s authorization by an autonomous requesting party" *Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl