1、raising standards worldwide NO COPYING WITHOUT BSI PERMISSION EXCEPT AS PERMITTED BY COPYRIGHT LAW BSI Standards Publication BS ISO/IEC 15944-8:2012 Information technology Business Operational View Part 8: Identification of privacy protection requirements as external constraints on business transact
2、ions BS ISO/IEC 15944-8:2012 BRITISH STANDARD National foreword This British Standard is the UK implementation of ISO/IEC 15944-8:2012. The UK participation in its preparation was entrusted to Technical Committee IST/40, Data management and interchange. A list of organizations represented on this co
3、mmittee can be obtained on request to its secretary. This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application. The British Standards Institution 2012. Published by BSI Standards Limited 2012 ISBN 978 0 580 62616 6 ICS
4、35.240.60 Compliance with a British Standard cannot confer immunity from legal obligations. This British Standard was published under the authority of the Standards Policy and Strategy Committee on 30 April 2012. Amendments issued since publication Date Text affectedBS ISO/IEC 15944-8:2012 Reference
5、 number ISO/IEC 15944-8:2012(E) ISO/IEC 2012 INTERNATIONAL STANDARD ISO/IEC 15944-8 First edition 2012-04-01 Information technology Business Operational View Part 8: Identification of privacy protection requirements as external constraints on business transactions Technologies de linformation Vue op
6、rationnelle daffaires Partie 8: Identification des exigences de protection de la vie prive en tant que contraintes externes sur les transactions daffaires BS ISO/IEC 15944-8:2012 ISO/IEC 15944-8:2012(E) COPYRIGHT PROTECTED DOCUMENT ISO/IEC 2012 All rights reserved. Unless otherwise specified, no par
7、t of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or ISOs member body in the country of the requester. ISO copyright office Case postale 5
8、6 CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail copyrightiso.org Web www.iso.org Published in Switzerland ii ISO/IEC 2012 All rights reservedBS ISO/IEC 15944-8:2012 ISO/IEC 15944-8:2012(E) ISO/IEC 2012 All rights reserved iiiContents Page Foreword . vii 0 Introduction . viii
9、0.1 Purpose and overview . viii 0.1.1 ISO/IEC 14662 “Open-edi Reference Model“ . viii 0.1.2 ISO/IEC 15944-1 “Business Agreement Semantic Descriptive Techniques” (“Business Operational View (BOV”) . x 0.2 Introducing the use of “Person“, “organization“ and “party“ in the context of business transacti
10、on and commitment exchange . xi 0.3 Importance and role of terms and definitions . xiii 0.4 Importance of the two classes of constraints of the Business Transaction Model (BTM) . xiii 0.5 Need for a standard based on rules and guidelines . xiv 0.6 Use of “jurisdictional domain“, and “jurisdiction“ (
11、and “country“) in the context of business transaction and commitment exchange . xv 0.7 Use of “identifier“ as “identifier (in business transaction)“ to prevent ambiguity xvi 0.8 Use of “privacy protection” in the context of business transaction and commitment exchange . xvi 0.9 Organization and desc
12、ription of this document xvii 1 Scope 1 1.1 Statement of scope . 1 1.2 Exclusions 2 1.2.1 Functional Services View (FSV) . 2 1.2.2 Internal behaviour of organizations (and public administration) . 2 1.2.3 “organization Person” 2 1.2.4 Overlap of and/or conflict among jurisdictional domains as source
13、s of privacy protection requirements 2 1.2.5 Publicly available personal information 3 1.3 Aspects currently not addressed 4 1.4 IT-systems environment neutrality 7 2 Normative references 9 2.1 ISO/IEC, ISO and ITU . 9 2.2 Referenced specifications 10 3 Terms and definitions . 11 4 Symbols and abbre
14、viations 41 5 Fundamental principles and assumptions governing privacy protection requirements in business transactions involving individuals (external constraints perspective) . 43 5.1 Introduction 43 5.2 Exceptions to the application of the privacy protection principles . 46 5.3 Fundamental Privac
15、y Protection Principles . 46 5.3.1 Privacy Protection Principle 1: Preventing Harm 46 5.3.2 Privacy Protection Principle 2: Accountability 47 5.3.3 Privacy Protection Principle 3: Identifying Purposes 50 5.3.4 Privacy Protection Principle 4: Informed Consent 50 5.3.5 Privacy Protection Principle 5:
16、Limiting Collection . 52 5.3.6 Privacy Protection Principle 6: Limiting Use, Disclosure and Retention 54 5.3.7 Privacy Protection Principle 7: Accuracy . 57 5.3.8 Privacy Protection Principle 8: Safeguards 58 5.3.9 Privacy Protection Principle 9: Openness 59 5.3.10 Principle Protection Principle 10:
17、 Individual Access 60 5.3.11 Privacy Protection Principle 11: Challenging Compliance . 62 BS ISO/IEC 15944-8:2012 ISO/IEC 15944-8:2012(E) iv ISO/IEC 2012 All rights reserved5.4 Requirement for tagging (or labelling) data elements in support of privacy protection requirements 63 6 Collaboration space
18、 and privacy protection .65 6.1 Introduction 65 6.2 Basic Open-edi collaboration space: Buyer and seller .65 6.3 Collaboration space: The role of buyer (as individual), seller and regulator 66 7 Public policy requirements of jurisdictional domains .69 7.1 Introduction 69 7.2 Jurisdictional domains a
19、nd public policy requirements .69 7.2.1 Privacy protection70 7.2.2 Person and external constraints: Consumer protection .72 7.2.3 Individual accessibility 73 7.2.4 Human rights 74 7.2.5 Privacy as a right of an “individual” and not the right of an organization or public administration 74 8 Principle
20、s and rules governing the establishment, management and use of identities of an individual .77 8.1 Introduction 77 8.2 Rules governing the establishment of personae, identifiers and signatures of an individual 78 8.3 Rules governing the assignment of unique identifiers to an individual by Registrati
21、on Authorities (RAs) .84 8.4 Rules governing individual identity, authentication, recognition, and use .85 8.5 Legally recognized individual identifies (LRIIs) .90 9 Person component individual sub-type .93 9.1 Introduction 93 9.2 Role qualification of a Person as an individual 93 9.3 Persona and le
22、gally recognized names (LRNs) of an individual 94 9.4 Truncation of legally recognized names of individuals .94 9.5 Rules governing anonymization of individuals in a business transaction .95 9.6 Rules governing pseudonymization of personal information in a business transaction 97 10 Process componen
23、t 99 10.1 Introduction 99 10.2 Planning 99 10.3 Identification .99 10.4 Negotiation 100 10.5 Actualization 100 10.6 Post-Actualization . 100 11 Data component 101 11.1 Introduction . 101 11.2 Rules governing the role of Business Transaction Identifier (BTI) in support of privacy protection requireme
24、nts 101 11.3 Rules governing state of change management of business transactions in support of privacy protection requirements . 102 11.4 Rules governing records retention of personal information in a business transaction . 102 11.5 Rules governing time/date referencing of personal information in a
25、business transaction 103 12 Template for identifying privacy protection requirements on business transactions 105 12.1 Introduction and basic principles . 105 12.2 Template structure and contents 105 12.3 Template for specifying the scope of an Open-edi scenario . 106 12.4 Consolidated template of a
26、ttributes of Open-edi scenarios, roles and information bundles 113 13 Conformance statement . 119 13.1 Introduction . 119 13.2 Conformance to the ISO/IEC 14662 Open-edi Reference Model and the multipart ISO/IEC 15944 eBusiness standard 119 13.3 Conformance to ISO/IEC 15944-8 119 BS ISO/IEC 15944-8:2
27、012 ISO/IEC 15944-8:2012(E) ISO/IEC 2012 All rights reserved vAnnex A (normative) Consolidated list of terms and definitions with cultural adaptability: ISO English and ISO French language equivalency . 120 A.1 Introduction 120 A.2 ISO English and ISO French . 120 A.3 Cultural adaptability and quali
28、ty control. 120 A.4 Organization of Annex A Consolidated list in matrix form 121 A.5 Consolidated list of ISO/IEC 15944-8 terms and definitions . 122 Annex B (normative) Consolidated set of rules in existing Parts of ISO/IEC 15944 of particular relevance to privacy protection requirements as externa
29、l constraints on business transactions . 185 B.1 Introduction 185 B.2 Organization of Annex B: Consolidated list in matrix form 185 B.3 Consolidated list of rules in ISO/IEC 15944-1 pertaining to external constraints relevant to supporting privacy protection requirements . 186 B.4 Consolidated list
30、of rules in ISO/IEC 15944-2 pertaining to external constraints of relevance to supporting privacy protection requirements . 189 B.5 Consolidated list of rules in ISO/IEC 15944-5 pertaining to external constraints of relevance to supporting privacy protection requirements . 190 B.6 Consolidated list
31、of rules in ISO/IEC 15944-7 pertaining to external constraints of relevance to supporting privacy protection requirements . 194 Annex C (normative) Business Transaction Model (BTM): Classes of constraints 200 Annex D (normative) Integrated set of information life cycle management (ILCM) principles i
32、n support of information law compliance 205 D.1 Introduction 205 D.2 Purpose 205 D.3 Approach 206 D.4 Integrated set of information life cycle management (ILCM) principles 206 Annex E (normative) Key existing concepts and definitions applicable to the establishment, management, and use of identities
33、 of a single individual. 209 Annex F (normative) Coded domains for specifying state change and record retention management in support of privacy protection requirements . 211 F.1 Introduction 211 F.2 State changes 212 F.2.1 Introduction 212 F.2.2 Specification of state changes allowed to personal in
34、formation . 213 F.2.3 Store change type . 214 F.3 Records retention 216 F.4 Records destruction 218 Bibliography 220 BS ISO/IEC 15944-8:2012 ISO/IEC 15944-8:2012(E) vi ISO/IEC 2012 All rights reservedFigures Page Figure 1 Open-edi environment Open-edi Reference Model ix Figure 2 Integrated view - Bu
35、siness operational requirements: External constraints focus. xi Figure 3 Primary sources for privacy protection principles . 45 Figure 4 Concept of a business collaboration . 66 Figure 5 Privacy collaboration space (of a business transaction) including the role of a regulator . 68 Figure 6 Common pu
36、blic policy requirements, i.e., external constraints, applying to a business transaction where the “buyer” is an “individual” 70 Figure 7 Illustration of relationships of links of a (real world) individual to (its) persona (e) to identification schemas and resulting identifiers to associated Person
37、signatures in the context of different business transactions and governing rules . 80 Figure 8 Illustration of range of links between personae and identifiers of an individual identity(ies) of an individual 86 Figure 9 Illustration of two basic options for establishment of a recognized individual id
38、entity (rii) 89 Figure C.1 Business Transaction Model - Fundamental components (Graphic illustration) 200 Figure C.2 UML-based Representation of Figure C.1 Business Transaction Model . 201 Figure C.3 Business Transaction Model: Classes of constraints 204 Tables Page Table 1 Template for specifying t
39、he scope of an Open-edi scenario 106 Table 2 Consolidated template of attributes of Open-edi scenarios, roles and information bundles . 113 Table F.1 ISO/IEC 15944-5:05 Codes for specifying state changes allowed for the values of Information Bundles and Semantic Components 213 Table F.2 ISO/IEC 1594
40、4-5:06 Codes representing store change type for Information Bundles and Semantic Components . 215 Table F.3 ISO/IEC 15944-5:02 Codes Representing Specification of Records Retention Responsibility 216 Table F.4 ISO/IEC 15944-5:04 Codes representing retention triggers . 218 Table F.5 ISO/IEC 15944-5:0
41、3 Codes representing disposition of recorded information 219 BS ISO/IEC 15944-8:2012 ISO/IEC 15944-8:2012(E) ISO/IEC 2012 All rights reserved viiForeword ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for w
42、orldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborat
43、e in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work. In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. International Standards are
44、drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The main task of the joint technical committee is to prepare International Standards. Draft International Standards adopted by the joint technical committee are circulated to national bodies for voting. Publication as an I
45、nternational Standard requires approval by at least 75 % of the national bodies casting a vote. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent right
46、s. ISO/IEC 15944-8 was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 32, Data management and interchange. ISO/IEC 15944 consists of the following parts, under the general title Information technology Business Operational View: Part 1: Operational aspect
47、s of Open-edi for implementation Part 2: Registration of scenarios and their components as business objects Part 4: Business transaction scenarios Accounting and economic ontology Part 5: Identification and referencing of requirements of jurisdictional domains as sources of external constraints Part
48、 6: Technical introduction to e-Business modelling Technical Report Part 7: eBusiness vocabulary Part 8: Identification of privacy protection requirements as external constraints on business transactions Part 10: Coded domains The following parts are under preparation: Part 3: Open-edi description t
49、echniques (OeDTs) Part 9: Traceability framework BS ISO/IEC 15944-8:2012 ISO/IEC 15944-8:2012(E) viii ISO/IEC 2012 All rights reserved0 Introduction 0.1 Purpose and overview Modelling business transactions using scenarios and scenario components is done by specifying the applicable constraints on the data content using explicitly stated rules. The Open-edi Reference Model identified two basic classes of constraints, “internal constraints“ and “external constraint
