Provide its services on a fair, P5 reasonable and non-discriminatory basis Provide Consumers with information P5 & P7 about the operation of the eco-system free of charge NOT Act as a Data Engine or Service P4 & P5 Provider (other than for the purposes of providing a limited test ‘sandbox’ environment) Store Behavioural Atoms P4 & P5 Hold any Consumer’s directly identifying P5 personal information (DIPI) MAY Request Data Engine support to deliver P6 population-level insights for public information and the purposes of marketing the specification Make a query on Data Engines to P7 ensure a specific ConsumerID has been This allows the Identity Authority to forgotten audit the forgetting process. Provide Consumers with information P5 & P7 about their status within the i.e. or and ‘known’ ‘forgotten’ only by ConsumerID and not DIPI. Provide audit services to Data Engine, P6 Service Provider, Operator and regulators Data Engine Technical requirement Guiding principles & SHALL Provide secure storage of Behavioural P2 & P3 Atoms for a period to be agreed with the Service Provider in line with the Consumer consent Provide minimal interface services for P4 Service Providers to process joiners, movers, and leavers (e.g. Operator & Consumer trees, registration, ID forgetting) Provide minimal interface services for P1 querying Behavioural by registered Service Providers Maintain an always-on, single entry P4 point for uploading Behavioural Atoms to the Data Engine
Provide its services on a fair, reasonable and non-discriminatory basis P5 Provide Consumers with information about the operation of the eco-system free of charge P5 & P7 NOT Act as a Data Engine or Service Provider (other than for the purposes of providing a limited ‘sandbox’ test environment) P4 & P5 Store Behavioural Atoms P4 & P5 Hold any Consumer’s directly identifying personal information (DIPI) P5 MAY Request Data Engine support to deliver population-level insights for public information and the purposes of marketing the specification P6 Make a query on Data Engines to ensure a specific ConsumerID has been forgotten P7 This allows the Identity Authority to audit the forgetting process. Provide Consumers with information about their status within the i.e. ‘known’ or ‘forgotten’ and only by ConsumerID and not DIPI. P5 & P7 Provide audit services to Data Engine, Service Provider, Operator and regulators P6 Data Engine Technical requirement Guiding principles & SHALL Provide secure storage of Behavioural Atoms for a period to be agreed with the Service Provider in line with the Consumer consent P2 & P3 Provide minimal interface services for Service Providers to process joiners, movers, and leavers (e.g. Operator & Consumer trees, registration, ID forgetting) P4 Provide minimal interface services for querying Behavioural by registered Service Providers P1 Maintain an always-on, single entry point for uploading Behavioural Atoms to the Data Engine P4
RPE-v1.0-wd01.docx