Draft Individual Access Services Provider Privacy and Security Notice and Practices SOP

The RCE is seeking feedback on the draft Individual Access Services (IAS) Provider Privacy and Security Notice and Practices SOP released June 21 2022. In addition to engaging the RCE through the public, virtual events, organizations and individuals may have choose to submit written feedback until July 21, 2022. Please do not include anything in your feedback submission that you do not wish to share with the general public.

Draft IAS Provider Privacy and Security Notice and Practices SOP Feedback Form

Please submit your feedback for each section of the draft SOP in the corresponding fields below.

Name(Required)

First Last

Email(Required)

Organization

Organization URL

Common Agreement Section 10.3.1.(i): “Be publicly accessible and kept current at all times, including updated versions”

Common Agreement Section 10.3.1.(ii): “Be shared with an Individual prior to the Individual’s use/receipt of services from [the IAS Provider]”

Common Agreement Section 10.3.1.(iii): “Be written in plain language and in a manner calculated to inform the Individual of such privacy practices”

Common Agreement Section 10.3.1.(iv): “Include a statement regarding whether and how the Individual’s TI may be accessed, exchanged, Used, and/or Disclosed by [the IAS Provider] or by other persons or entities to whom/which [the IAS Provider] Discloses or provides access to the information, including whether the Individual’s TI may be sold at any time (including the future)”

Common Agreement Section 10.3.1.(v): “Include a statement that [the IAS Provider] is required to act in conformance with the Privacy and Security Notice and must protect the security of the information it holds in accordance with Section 10 of [the] Common Agreement”

Common Agreement Section 10.3.1.(vi): “Include information regarding whom the Individual may contact within [the IAS Provider] for further information regarding the Privacy and Security Notice and/or with privacy-related complaints”

Common Agreement Section 10.3.1.(vii): “Include a requirement by [the IAS Provider] to obtain express written consent to the terms of the Privacy and Security Notice from the Individual prior to the access, exchange, Use, or Disclosure (including sale) of the Individual’s TI, other than Disclosures that are required by Applicable Law”

Common Agreement Section 10.3.1.(viii): “Include information on how the Individual may revoke consent”

Common Agreement Section 10.3.1.(ix): “Include an explanation of the Individual’s rights, including, at a minimum, the rights set forth in Section 10.4” [of the Common Agreement]

Common Agreement Section 10.3.1.(x): “Include a disclosure of any applicable fees or costs related to IAS including the exercise of rights under Section 10.4 of [the] Common Agreement”

Common Agreement Section 10.3.1.(xi): “Include an effective date” [of the written Notice and an effective date of any subsequent material changes to such Notice]

Draft Individual Access Services Provider Privacy and Security Notice and Practices SOP

Draft IAS Provider Privacy and Security Notice and Practices SOP Feedback Form

Stay Connected