PDPP Principles
The intentions behind the Personal Data Portability Protocol, and the register of Supporters who have signed them.
Programme document
This is a programme document, not normative protocol text. Signing the Principles is a statement of intent, not a commitment to implement, and confers no conformance status under the PDP-Connect programme.
When an individual permits a service to use information held about them by another, the permission is commonly granted in general terms and recorded nowhere the individual can examine. The choice is often between all of the information and none of it, and once given, the permission is rarely visible, rarely verifiable, and rarely reversible in practice.
As more of daily life is mediated by systems that act on personal information, and as artificial intelligence increases what can be done with it, the absence of a specific, durable and enforceable account of what has been agreed has become a matter of general concern.
The Personal Data Portability Protocol is an open technical specification for the authorization and disclosure of personal data, addressed to that concern. These principles set out the intentions behind it.
-
Primacy of the individual. Decisions about how information concerning a person is shared and used should rest with that person.
-
Specificity of access. Access to personal data should be defined in terms of what is shared, for what purpose, and for how long, rather than granted in general terms.
-
A durable record. What has been agreed should be recorded in a form that can be examined afterwards by the individual concerned and by the parties relying on it.
-
Enforcement by design. Agreed limits should be applied automatically to each request, rather than depending on the continuing good conduct of the parties.
-
Reversibility. Ending an arrangement should be as straightforward as entering into one.
-
Openness. The specification should be published openly, implementable by any party, and operable without dependence on any particular provider.
Add your name
Signing places you or your organisation on the public register of Supporters of the Personal Data Portability Protocol. Supporters are notified of each comment period and published version, and invited to the open working sessions.
Support is a statement of intent, not a commitment to implement, and can be withdrawn at any time.1
Footnotes
-
Signature indicates support for the principles as versioned. It is not an undertaking to implement the Personal Data Portability Protocol, does not indicate agreement with any particular version of the specification, and confers no status under the PDP-Connect programme. Individual affiliations are shown for identification only; individuals sign in a personal capacity. Signatures may be withdrawn at any time by emailing the address used to sign. PDP-Connect is an LF Decentralized Trust lab. Announcements using the PDPP name should be cleared with the LF Decentralized Trust PR team. ↩
Not yet open