OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

security-services message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [security-services] SAML deployments that use consent step?

I previously wrote that:
> There is certainly a place for consent, but it needs to be used  
> judiciously. It is certainly not (in the EU context, at least) the  
> silver bullet or "best practice" that proponents of "user centric"  
> approaches sometimes suggest.

One of my colleagues who specialises in DP law (and understands this  
stuff, unlike me) informed me today that the UK Information  
Commissioner's Office (the body charged with "upholding information  
rights in the public interest") has issued a statement to the effect  
that consent should be considered the cause-of-last-resort for  
releasing PII.


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]