+
DEFINE
Define data agreements with the purpose of data processing, lawful basis as per ISO27560. This could be based on on a DPIA or similar.
+
PUBLISH
Publish the data agreements towards individuals, e.g. via a digital rights management page, privacy dashboard or similar.
+
CAPTURE
Individual reviews the data agreement and, once agreed, it is captured as a mutually signed receipt as proof of processing.