Provide its services on a fair, reasonable and non-discriminatory basis P5 Provide Consumers with information about the operation of the eco-system free of charge P5 & P7 NOT Act as a Data Engine or Service Provider (other than for the purposes of providing a limited ‘sandbox’ test environment) P4 & P5 Store Behavioural Atoms P4 & P5 Hold any Consumer’s directly identifying personal information (DIPI) P5 MAY Request Data Engine support to deliver population-level insights for public information and the purposes of marketing the specification P6 Make a query on Data Engines to ensure a specific ConsumerID has been forgotten P7 This allows the Identity Authority to audit the forgetting process. Provide Consumers with information about their status within the i.e. ‘known’ or ‘forgotten’ and only by ConsumerID and not DIPI. P5 & P7 Provide audit services to Data Engine, Service Provider, Operator and regulators P6 Data Engine Technical requirement Guiding principles & SHALL Provide secure storage of Behavioural Atoms for a period to be agreed with the Service Provider in line with the Consumer consent P2 & P3 Provide minimal interface services for Service Providers to process joiners, movers, and leavers (e.g. Operator & Consumer trees, registration, ID forgetting) P4 Provide minimal interface services for querying Behavioural by registered Service Providers P1 Maintain an always-on, single entry point for uploading Behavioural Atoms to the Data Engine P4
Secure additional consent from Consumers when sending personal information outside the eco-system P3 & P6 When sending Behavioural Atom information outside the eco-system, remove the ConsumerID and replace with DIPI P6 This ensures that information that has left the eco-system can be clearly identified. Ensure that their Operators follow the specification P6 For any one purpose and at any one time, have only one Data Engine Avoids potential data loss for the consumer and ensures the complete audit map of the eco-system. On a request from a Consumer, supply (or require associated Operator to do so) all DIPI, Segment Data, Behavioural and any stored Report Data P2 Basic tenet of EU data protection. On a request from a Consumer to be forgotten, remove or render DIPI to be non-personal Basic tenet of EU data protection. On a request from a Consumer to be forgotten, instruct their Data Engine to remove or render data to be P2 & P3 On a request from an Operator or Consumer, provide the identity of the Data Engine P7 Notify Consumers (via Operators) of any mergers and acquisitions or other changes that would result in a change of control over the Consumers’ data P7 Check the credentials of an Operator every time a request is made to release data for a ConsumerID Security. Ensure that all Operators within a specific embodiment are working under equivalent terms (e.g. consent, purpose, retention periods etc.). P7 Use different passwords to interact with different actors in the ecosystem (within the same service embodiment). Security. Use a different ServiceProviderID for every instance of a service embodiment in which they are an actor Security. NOT Receive Behavioural Atoms directly P1 Send DIPI to a Data Engine P1