This is a hack location for exploring a Prose Object/CCS (Cascading Content Sheet) approach to https://github.com/Sage-Bionetworks/governanceGreenPaper/tree/7ef288619fb46e6d9319433c64fbc5bef6250fe7
The goal is to impplement modular data governance agreements in CCS format, and to connect that with standards for documents, ontologies and technologies that implement them.
We'll work from a couple of directions towards a full solution.
- From a modular data sharing agreement.
AdvCIS
From international standards 1.1 OECD Trans-border Guidelines
1.2 AdvCIS v1.2: Operational Notice & Consent - ISO/IEC 29100 Security Privacy Framework - Terms & Definitions
1.3 Legal Jurisdiction Privacy Regulation : GDPR
1.4 Consent Type Profile : Explicit Consent
1.5 Code of Conduct & Practice - Yes/No - link
From AdvCIS v1.2 Specification ontologies. 2.1. High Level Entities: Privacy Stakeholders Identities
2.2.2 PII Controller
2.1.2. PII Joint Controller
2.1.3. PII Processors
2.1.4. PII Principal
2.1.5. 3rd Party (ies)
Purpose Specification 3.1. Category : Education
3.2 Purpose : Provide e-learning education platform
Special or Sensitive Person Data Categories - Yes
Personal Data Categories
5.1. Externally Identifying Behaviour
5.2. Internal Knowledge & Belief
5.3. Family
5.4. Social Network
5.5. Communications
5.6. Tracking: contact, computer device, Location
5.6 Historical Education Record
Personal Data Treatment 6.1. Collection Method
6.1.1 Processing Frequency
6.1.1.1 Timing and location of the collection
6.1.2 Processing Duration
6.2. Meta Data Collection, Use or Disclosures: Public or Private Sector
6.4. 3rd Party Disclosures
6.4.1. Parents
6.4.2. School & School Board / Province / Police
6.4.3. Software Service Provider
Resources:
Operationl Privacy Notice v0.07 - Transnational Transparency for Master Data Controls Standards with Standardized Notice & Consent
AdvCIS/Kantara CISWG: Operational Notice & Consent Reciept v1.2 (latest specification) https://docs.google.com/document/d/1UjwYuu_-0_JnskDA29PfzRq5XXQYVZHu7QIeEduBS6w/edit?usp=sharing
AdvCIS/Kantara CISWG: Data Control & Governance Notice & Rights - Consent Type Profiles https://openconsent.atlassian.net/wiki/spaces/IHD/pages/768245803/Data+Subject+Master+Data+Controls+Profiles+Consent+Type
AdvCIS/Kantara CISWG: Personal Data Categories https://openconsent.atlassian.net/wiki/spaces/IHD/pages/1364918273/Personal+PII+Data+Categories