opengdpr/OpenDSR

Cross company/technology identifiers.

ydennisy opened this issue · 4 comments

Hello,
How does this work, if the user makes an erasure request on the website of a publisher - who then needs to propagate that request to various partners, however the publisher does not have a mapping of the cookie value / identifier for this user of the partners.
Thanks,
Dennis

bhox commented

Hey there @ydennisy,
The controller (publisher) should collect identifiers needed from the data subject when the erasure request is made and propagate them to partners via the opengdpr format. The Identifiers supported by each processors is published in their /discovery endpoint.

hello @benhoxie
If they support cookies, the values will not equal the value which is held by the publisher.
This seems to only work where we have persistent ids in mobile apps.

bhox commented

Yeah I think you're right. What do you think about adding support for dynamic identity_types? Something like processor_name_id?

Addressed in #22