[Fim4l] a few meta-comments about the LexisNexis Advance Thread

Ken Klingenstein kjk at internet2.edu
Tue Mar 16 04:18:34 CET 2021


All,
  I just wanted to make a few comments about the thread going on about attribute release/consent for LexisNexis et al.
  First of all, it is the best discussion that I have seen about the details of attribute release, legal bases, personalization, etc. in the federated landscape. I really appreciate the issues and subtleties that we are exploring.
  Peter’s proposal was rich with topics worth some exploring on their own. For example, the pluses and minuses of IdP vs SP consent approaches, including trust, consolidated user consent consoles, purpose of use fields. For example, developing a modest purpose of use taxonomy for R&E. (The new cookie-based consent taxonomy that the advertising industry did recently under GDPR prodding doesn’t work for us but is indicative that a simple set of purposes is possible.) For example, combining consent and notification (e.g. of a release based on legitimate interest) in a single UI. I hope we continue discussion on these and other topics.
  Finally, I share Peter’s realism about the scale issues in changing behaviors of IdP’s, but the FIM4R community has been successful in driving large scale IdP behavior changes (such as in incident handling). It is possible that FIM4L can find success in fostering privacy-preserving behaviors.
                Ken

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.daasi.de/pipermail/fim4l/attachments/20210316/9cc7e439/attachment-0001.html>


More information about the FIM4L mailing list