ISO/IEC TS 27560:2023 PDF

Name: ISO/IEC TS 27560:2023 — Privacy technologies — Consent record information structure
SKU: ISO/IEC TS 27560:2023
Price: 25 EUR
Availability: InStock

Privacy technologies — Consent record information structure

Название (английский):

ISO/IEC TS 27560:2023

Privacy technologies — Consent record information structure

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 52
Дата публикации:: 8 августа 2023 г.
Издание:: ISO/IEC TS 27560 edition 1 version 1
ICS:: 35.030

Тип поставки:

Full version780 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:9 раб. дн. (перевод)

Цена:780 €

Описание (английский):

This document specifies an interoperable, open and extensible information structure for recording PII principals' consent to PII processing. This document provides requirements and recommendations on the use of consent receipts and consent records associated with a PII principal's PII processing consent, aiming to support the: — provision of a record of the consent to the PII principal; — exchange of consent information between information systems; — management of the life cycle of the recorded consent.

Abstract

Похожие стандарты

Упомянутые в описании и другие стандарты ISO

Overview

ISO/IEC TS 27560:2023 - "Privacy technologies - Consent record information structure" defines an interoperable, open and extensible information structure for recording personally identifiable information (PII) principals’ consent to PII processing. The technical specification standardizes both the consent record (the controller’s recordkeeping artifact) and the consent receipt (an acknowledgement or artefact provided to the PII principal). Its aims are to support provision of a consent record to individuals, enable exchange of consent information between systems, and manage the life cycle of recorded consent. It is the first edition (2023) and builds on ISO/IEC 29184.

Key topics and technical requirements

Consent record vs. consent receipt: formal definitions and intended roles - records are for controller recordkeeping; receipts are for PII principals and references to records.

Interoperable data structure: an extensible information model that includes sections such as record header, PII processing, PII information, party identification, and event history.

Recordkeeping controls: requirements and recommendations for how PII controllers must structure, store and maintain consent records and receipts.

Consent lifecycle management: guidance for recording events (granting, withdrawal, modification) and timestamps to support lifecycle workflows.

Formats and examples: informative Annexes provide example encodings (JSON), lifecycle examples, performance/efficiency considerations, and mapping to ISO/IEC 29184.

Security & integrity: informative guidance on protecting consent records and receipts (see Annex E), including integrity considerations for exchanges.

Scope limits: the standard specifies structure and content but does not mandate a specific exchange protocol.

Terminology & consent types: aligns with ISO/IEC 29100 and ISO/IEC 29184 for consent definitions and types (explicit, implied, etc.).

Practical applications and target users

Who uses ISO/IEC TS 27560:2023:

Privacy engineers and system architects designing consent management systems and privacy dashboards.

Software developers and vendors of consent management platforms (CMPs) implementing consent receipts and records (JSON examples provided).

Data Protection Officers (DPOs), compliance and legal teams establishing auditable, standardised consent recordkeeping for regulatory compliance.

Organizations and controllers seeking interoperable mechanisms to exchange consent metadata across services and third parties.

Regulators and auditors evaluating consent lifecycle evidence.

Typical applications:

Issuing machine-readable consent receipts to data subjects.

Centralized consent repositories for audit and compliance.

Cross-system consent portability and synchronization.

Supporting data subject requests and dispute resolution with authoritative consent records.

Related standards

ISO/IEC 29184 (Online privacy notices and consent) - complements and maps to ISO/IEC TS 27560 (see Annex H).

ISO/IEC 29100 (Privacy framework) - source terminology and principles.

Keywords: ISO/IEC TS 27560:2023, consent record, consent receipt, consent management, PII, privacy technologies, interoperability, JSON, data protection, lifecycle, recordkeeping.

ISO/IEC TS 27560:2023 PDF

Abstract

Похожие стандарты

Overview

Key topics and technical requirements

Practical applications and target users

Related standards

Технические детали

BS EN ISO/IEC 29184:2023

Information technology. Online privacy notices and consent.

SIST EN ISO/IEC 29100:2020

Information technology - Security techniques - Privacy framework (ISO/IEC 29100:2011, including Amd 1:2018)

ISO 8689-1:2000

Water quality — Biological classification of rivers — Part 1: Guidance on the interpretation of biological qu…

ISO/ASTM51540-04(2012)

Standard Practice for Use of a Radiochromic Liquid Dosimetry System (Withdrawn 2020)

ISO/ASTM51204-04

Standard Practice for Dosimetry in Gamma Irradiation Facilities for Food Processing (Withdrawn 2013)

ISO/ASTM51431-05

Standard Practice for Dosimetry in Electron Beam and X-Ray (Bremsstrahlung) Irradiation Facilities for Food P…

ISO/ASTM52628-20e1

Standard Practice for Dosimetry in Radiation Processing

ISO/ASTM52921-13(2019)

Standard Terminology for Additive Manufacturing—Coordinate Systems and Test Methodologies