+

DEFINE

Define data agreements with the purpose of data processing, lawful basis as per ISO27560. This could be based on on a DPIA or similar.
+

PUBLISH

Publish the data agreements towards individuals, e.g. via a digital rights management page, privacy dashboard or similar.
+

CAPTURE

Individual reviews the data agreement and, once agreed, it is captured as a mutually signed receipt as proof of processing.