| Tip | ||
|---|---|---|
| ||
The Data protection Code of Conduct v2 describes an approach to meet the requirements of the EU Data Protection Directive GDPR in federated identity management. The Data protection Code of Conduct defines behavioral rules for Service Providers which want to receive user attributes from the Identity Providers managed by the Home Organisations. It is expected that Home Organisations are more willing to release attributes to Service Providers who manifest conformance to the Data protection Code of Conduct. For more information, see Introduction to |
REFEDS Data Protection Code of Conduct ver 2.
Contents:
| Table of Contents | ||
|---|---|---|
|
0
Normative documents
- Code of Conduct 2.0 for Service Providers
- SAML 2 Profile for the Data Protection Code of Conduct 2.0 Entity Category Definition: Data protection Code of Conduct
Non-normative, Informational Documents
- Introduction to Code of Conduct
- Introduction to Data protection directive
- Managing Data Protection Risks Using the Code of Conduct
- Privacy policy guidelines for Service Providers
- What attributes are relevant for a Service Provider
- Data protection good practice for Home Organisations
- Operator guidelines
- Handling non-compliance
- Notes on Implementation of INFORM/CONSENT GUI Interfaces
Supporting materials
- Privacy Notice Template
- Handling non-compliance
- Good practice for Home Organisations
- How the Home Organisation should inform the End User
Cookbook
- Recipe for a Service Provider
- Recipe for a Home Organisation
- Recipe for a Federation Operator
Tools and resources
- eduGAIN entity browser to check the current # of check SPs/IdPs using the using the CoCo in eduGAIN (TBD: update to support CoCo2)
- Monitoring tool to monitor eduGAIN SPs' CoCo compliance (TBD: update to support CoCo2)
- Test SP to to test IdPs' attribute release
- Attribute release training on 15th June 2015 at TNC15 conference
- Endorsement letter signed by European research infrastructures and projects
License to the documents above is granted under the Creative Commons BY-SA 3.0 license.
Work in progress
- Data Protection Code of Conduct version 2.0
- Data Protection Code of Conduct for Service Providers outside EU/EEA
- (TBD: update to support CoCo2)
Recent space activity
| Recently Updated | ||||||||
|---|---|---|---|---|---|---|---|---|
|
Space contributors
| Contributors | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
|