pmrm — archive

[John Sabo]

Submitter's message As the TC analyzes the NISTR 8062 for committee comments, it may be useful to read this 2007 ISTPA study, which illustrates the core components of 12 representative privacy las, regulations and best practices documents. This document helped inform the development of the PMRM. The draft NISTR (line 302 ff. critiques FIPPs as merely conceptual, which this study shows is an inaccurate characterization. -- John Sabo Document Name : ISTPA Analysis of Privacy Principles Description The Analysis of Privacy Principles, published in 2007 by the ISTPA, analyzed twelve international privacy regulations and best documents [instruments] in order to determine if a common set of FIPPs could be extracted or inferred. The study methodology included the use of a working set of privacy principles in order to facilitate cross-instrument mapping while also accommodating their many variations in the twelve instruments: Accountability, Notice, Consent, Collection Limitation, Use Limitation, Disclosure, Access and Correction, Security/Safeguards, Data Quality, Enforcement, and Openness. Using direct references extracted from each instrument, mapped against these terms in tabular format, the Analysis compares and correlates the language in each instrument associated with these key principles and identifies in nine instances where a particular principle is composed of additional, definable components. Download Latest Revision Public Download Link Submitter : John Sabo Group : OASIS Privacy Management Reference Model (PMRM) TC Folder : Standards Date submitted : 2015-06-22 09:48:47