ISO_IEC_19944-1_2020-Character_PDF_documenten.pdf

Cloud computing and distributed platforms Data flow,data categories and data use Part 1:FundamentalsInformatique en nuage et plates-formes distribues Flux de donnes,catgories de donnes et utilisation des donnes Partie 1:Principes de base ISO/IEC 2020INTERNATIONAL STANDARDISO/IEC19944-1Reference numberISO/IEC 19944-1:2020(E)First edition2020-10 ISO/IEC 19944-1:2020(E)ii ISO/IEC 2020 All rights reservedCOPYRIGHT PROTECTED DOCUMENT ISO/IEC 2020All rights reserved.Unless otherwise specified,or required in the context of its implementation,no part of this publication may be reproduced or utilized otherwise in any form or by any means,electronic or mechanical,including photocopying,or posting on the internet or an intranet,without prior written permission.Permission can be requested from either ISO at the address below or ISOs member body in the country of the requester.ISO copyright officeCP 401 Ch.de Blandonnet 8CH-1214 Vernier,GenevaPhone:+41 22 749 01 11Email:copyrightiso.orgWebsite:www.iso.orgPublished in Switzerland ISO/IEC 19944-1:2020(E)Foreword.viIntroduction.vii1 Scope.12 Normative references.13 Terms and definitions.13.1 Terms related to data categories.23.2 Terms related to cloud services and devices ecosystem.23.3 Terms related to privacy.33.4 Terms related to organizational data.33.5 Terms related to artificial intelligence.43.6 General terms.64 Abbreviated terms.65 Structure of this document.75.1 Document organization.75.2 Overview and reference architecture.75.3 Data taxonomies,data categories and data use statement structure.76 Overview of devices and cloud services ecosystems.76.1 Background and context Impact of devices and personalized cloud services.76.2 Ecosystem of devices and cloud services.86.3 Devices and multiple user sub-roles.96.3.1 General.96.3.2 Bring your own device.107 Extending the CCRA to the devices and cloud services ecosystem.127.1 Overview.127.2 Personal and organizational environments.127.3 Device impact on the CCRA:User view.127.3.1 Cloud service provider.127.3.2 Cloud service customer.137.4 Device impact on the CCRA:functional view.147.4.1 General.147.4.2 Functional components in the functional view.157.4.3 Functional view:data flows.168 Data taxonomy.188.1 Overview.188.2 Data categories.198.2.1 General.198.2.2 Customer content data.208.2.3 Derived data.218.2.4 Cloud service provider data.238.2.5 Account data.248.3 Data identification qualifiers.248.3.1 General.248.3.2 Identified data.258.3.3 Pseudonymized data.258.3.4 Unlinked pseudonymized data.258.3.5 Anonymized data.258.3.6 Aggregated data.258.4 Orthogonal facets of data.268.4.1 General.268.4.2 Perspective used in the definition of data facets.288.4.3 Common orthogonal data facets.28 ISO/IEC 2020 All rights reserved iiiContents Page ISO/IEC 19944-1:2020(E)8.4.4 Use of data facets to describe data taxonomy.349 Data processing and use categories.349.1 Overview.349.2 Data processing categories.349.2.1 General.349.2.2 Data partitioning.359.2.3 Data integration.359.2.4 Data fusion.369.2.5 Data improvement.369.2.6 Encryption.369.2.7 Replication.369.2.8 Data Deletion.369.2.9 Re-identification.379.3 Data use categories.379.3.1 General.379.3.2 Provide.389.3.3 Improve.389.3.4 Personalize.399.3.5 Offer upgrades or upsell.399.3.6 Market/advertize/promote.399.3.7 Share.409.3.8 Collect.419.3.9 Train(AI system).419.4 Scopes:Boundaries of collection and use of data.419.4.1 Scope concepts.419.4.2 Scope types.419.4.3 Scope characteristics.439.4.4 Network connection between scopes.439.4.5 Control of source scope over result scope.4410 Data use statements.4410.1 Overview.4410.2 Data use statement structure.4510.2.1 Structure definition.4510.2.2 Describing the scope of applications and cloud services that apply to use statements.4710.2.3 Assumptions about when data are collected and used.4710.2.4 Defining promotion targets.4810.2.5 Data types.4810.2.6 Data qualifiers for data types.4910.2.7 Examples of statements about data flow in the devices and cloud services ecosystem.4910.2.8 Exceptional use statements.5010.2.9 Data sharing.5310.3 Use of orthogonal data facets in data use statement.5410.3.1 General.5410.3.2 Use of elements in the data facets as attributes.5410.3.3 Hierarchy of elements/attributes of data based on facets.5510.3.4 Use of attributes to describe PII.5510.3.5 Use of attributes to tag IP data.5610.3.6 Use of attributes to tag IP data from shared pools,while respecting partner IP.5711 Data lineage and data provenance.5911.1 General.5911.2 Tracing data lineage.5912 Use of taxonomy and data use statement in other computing environments.6013 Use of data taxonomy and use statements in Artificial Intelligence scenarios.60iv ISO/IEC 2020 All rights reserved ISO/IEC 19944-1:2020(E)Annex A(informative)Diagrams of data categories and data identification qualifiers.63Bibliography.64 ISO/IEC 2020 All rights reserved v ISO/IEC 19944-1:2020(E)ForewordISO(the International Organization for Standardization)and IEC(the International Electr