FW: JTC1/SC36 view- on the development of Privacy protection standards - Liaison statement with respect to TMB/OSC N0051 & N0054

["Michael Willett" <mwillett@nc.rr.com>]

FYI:

Three interesting content items (maybe more):

   - Selects 11 privacy principles from existing instruments.
     If only groups like this would simply reference the 
     ISTPA document: Analysis of Privacy Instruments.
     The 14 composite principles developed in the Analysis
     are more complete than other lists based simply on extraction
     and not analysis.

   - Argues for an "IT-Neutral" approach to privacy.
     Meaning: Do not pre-select the specific low-level mechanisms for doing
     privacy management, but stick with higher-level constructs.
     Read: This is an endorsement of the PMRM Privacy SERVICES!

   - "Learning Transaction" sounds a lot like the PMRM Agreement Service.  

Michael                 

-----Original Message-----
From: James McCabe [mailto:jmccabe@ANSI.ORG] 
Sent: Thursday, December 16, 2010 3:13 PM
To: IDSPPRIVACY@MAILLIST.ANSI.ORG
Subject: JTC1/SC36 view- on the development of Privacy protection standards
- Liaison statement with respect to TMB/OSC N0051 & N0054
Importance: High



-----Original Message-----
From: Passia, Krystyna [mailto:Krystyna.Passia@din.de]
Sent: Thursday, December 16, 2010 11:43 AM
Subject: WG: JTC1/SC36 view- on the development of Privacy protection
standards - Liaison statement with respect to TMB/OSC N0051 & N0054
Importance: High

Dear All,

Due to the fact that I just learned that JTC 1/SC 36 Information technology
for learning, education and training is highly interested in participating
in the PSC work I am forwarding this e-mail kindly provided by the JTC 1/SC
36 liaison representative Jake Knoppers. It provides the following message
to you and the accompanying document FYI and consideration.

**********

1. As mentioned earlier I do not know whether I will be able to participate
in the TMB/PSC meeting later today. The reason is that  I did not know about
this meeting until early this morning via an e-mail received from  the
JTC1/SC32 Secretariat because I am a formally nominated delegate/liaison
from ISO/IEC JTC1/SC32 - Data Management and Interchange to the ISO/TMB/PSC.

I am also one of the formally nominated delegate/liaison from ISO/IEC
JTC1/SC36 -Information technology - Learning, Education, and Training
(ITLET).

2. Please distribute the attached ISO/IEC JTC1/SC36/WG document N315 titled
" Privacy Protection and the Internet: Need for an IT-Neutral Approach" to
all ISO TMB/ PSC participants. It is a publicly available document.

as well as this covering e-mail.

The points made in this document are the following

1) one needs to make a distinction between

a) internal behaviour and rules governing privacy protections with respect
to employees, officers, etc. within an organization and/or public
administration; and

b) those which apply when that organization and/or public administration
communicates "personal information`to another Person (party)

2. The primary need for standards development  never has been nor ever will
be of a `security servives`" related nature. Here I draw your attention and
that of all the ISO/TMB/PSC participants attention to Clause/Chapter 10 in
the attached document.

Most of the privacy protection requirements are of a data management and
interchange nature. Existing JTC1/SC32, ISO TC 215 and other ISO standards
already address generic , i.e. JTC1/SC32. or and specific privacy
requirements, i.e ISO 68, 204, 215, etc. (see further pages
37-38 in the attached document

3. I therefore recommend that ISO/TMB/PSC adopt the ISO/IEC 14662 Open-edi
reference model as a normative reference for its work (It is a public and
freely available standard). Here I note that the ISO/IEC
14662 Open-edi Reference Model serves as the common basis for the joint ISO,
IEC and ITU Memorandum of Understanding (MOU) regarding and governing a
harmonized approach to e-business/e-commerce related standards development.

 From an e-business/e-commerce perspective the 3rd edition of ISO/IEC
recognizes and positions the tool of JTC1/SC27  as a functional support
service  in support of Open-edi activities, via another e-mail I will
address this matter.

Regards - Jake Knoppers
JTC 1/SC 36
******************

Many thanks for your kind consideration.

Looking forward to speaking you today,

Krystyna

WG3_315_Privacy_Protection_and_the_Internet.pdf