OPN: Notice & Consent

What does the Network Profile Status mean?

The network profile produces a public status that is a key part of the privacy state, the profile status is used to modify the profile privacy icon.






    Pending





    Profile Activated & Monitored





    Profile Verified & Monitored





    Privacy Broadcasting




Privacy Ledger

 
The public privacy profile ledger is a public immutable log of changes to a privacy state.  It enables the informed consent by design protocol to provide iterative notice functionality that can be broadcasted so as to be available on demand and in context  to privacy in all contexts which personal data is processed, namely the privacy policy and any representative notices provide the initial justification (legal authority)  for processing personal data.  The policy and means of notice is logged in a publicly available and standardised privacy ledger, and a (privacy) consent receipt is provided to the individual.

Privacy Records and Receipts

 
A Privacy receipt is a record of privacy and security state provided by a company or service. It acts as a privacy notice as well a proof of privacy notice compliance.  It is generated using the public privacy profile in the privacy network. There are many types of receipts, all of which are used to help automate the use of privacy information in and out of context for people.  

The privacy state captured in a receipt includes all the privacy data required to enable privacy to be usable by the recipient  autonomously (independently of the receipt provider).  Changes in privacy state can easily be seen by comparing multiple receipts in context a task that is automated on the privacy network.  

Privacy Signalling

Informed Consent by Design

Privacy signalling has not evolved a great deal over the last 20 years. Systemic issues prevented innovation in this space, while, solutions that ignored privacy and security were more opportunistic and revenue generating. Consent by Design is a messaging protocol for providing notices in an small context driven sequence, with the capture of the viewing of the privacy notices, driving the provision of notice according to a larger policy narrative which gameify's education and awareness of privacy settings. The aim of consent by design is to curate and informed shared state of privacy so that it is always expected (or consistent) state of privacy that is maintained with permissions, and access controls.   

Privacy Controller Notice Services

 
The OpenConsent public privacy profile provides an active privacy status that is monitored to ensure the company is active, changes to privacy policies are logged publicly. The profile status is used to generate a privacy icon that is used by a company to provide an operational privacy and security signal. A signal that combines active verification of an organisation's registration of the components of usable privacy, providing a secure - privacy and security specific channel for privacy services. Among these components is the authentication of the person who has the authority to act in a role as a privacy controller.  This is used as part of the process to establish and confirm the organisation and service's public privacy profile. 

The privacy controller, once registered, is able to annotate privacy ledger changes and perform other privacy notice generating services. Changes are automatically detected and added to the privacy ledger. These are then immediately visible in context with the use of privacy icon deployed in the product or service.

Activation of the Privacy Signal

Privacy Policy Pointer

 
A Privacy Policy Pointer is a network registered  privacy policy (or notice) URL, that is logged and actively monitored by the network.  In order to activate of a public privacy profile page a verified privacy controller (or control administrator) is required to register a privacy pointer for the company or institution.  This includes a link to the company privacy policy and is the used as part of the overall profile and ledger.

Privacy Contact Pointer

 
The privacy controller is required to register a privacy contact pointer. This is used to provide a public privacy end point that is always on and operational. The privacy contact, is represented with a button in the privacy profile, it can be used by default without the use of personal data for people to make privacy information requests.

Important Note: OpenConsent does not make the privacy contact email publicly available so it can't be spammed. The privacy contact pointer is the gateway service for people to access privacy seervices. For custom privacy contact services and support, additional add-on and features are available upon request. 

Privacy Icon

 
Privacy Icon is generated once the public privacy profile is activated.  The icon should be placed in the privacy notice and policy, but can also be placed in contextual locations in addition to the privacy policy. The icon represents a combination of elements that assures high performing operational privacy. This includes, the active validated of company identity, the privacy policy ledger, the privacy services contact and the active monitoring of privacy policy.    

Instructions




Adv. Consented Information Sharing: Governance Group