FW: NCSC Webinar: XACML privacy policy enforcement

From: Christina Abernathy [mailto:CAbernathy@iir.com]
Sent: Friday, May 13, 2016 5:08 PM
To: Hal Lockhart; Rich Levinson
Subject: NCSC Webinar: XACML privacy policy enforcement

Mr. Lockhart and Levinson:

The National Center for State Courts (NCSC) has asked if you might forward this announcement to the OASIS XACML Technical Committee as the members may be interested in learning how their standard was implemented in justice.

Attached is an article announcing an NCSC Webinar, hosted May 24, 2016 at 2:00 pm EST, to highlight the great work by the Rhode Island Department of Corrections (RIDOC) to successfully automate privacy policy and access-controls in a cross-boundary juvenile criminal history exchange. A key requirement of this project was to fully apply and enforce privacy policy requirements that any data pertaining to juveniles would only be released to those RIDOC personnel who were authorized and whose jobs involved the classification of adult offenders. These rules were implemented following the Global Privacy Technical Framework which uses the Extensible Access Control Mark-up Language (XACML) to enforce these rules at a technical level. This exchange between the RI Department of Children, Youth, and Families (DCYF) and RIDOC was established for the purpose of providing validated juvenile criminal history information to inform the Level of Service Inventory-Revised (LSI-R) risk/needs assessment performed at offender intake.

The announcement/article is attached for your reference.

Thank you for your consideration and we hope members of the committee will be able to attend this virtual event.

Respectfully,

Christina Abernathy

Senior Research Associate

Institute for Intergovernmental Research

Phone: (850) 385-0600 ext. 318

E-mail: cabernathy@iir.com

xacml message