...
In December 2015, the European Parliament and Council reached agreement on data protection reform [DPREFORM]. This will require legal and federation consultation and analysis of eduGAIN’s policies focused on attribute release (Code of Conduct, EU and international variants, Research and Scholarship Entity Categories, recommendations on User consent), in particular focusing on service implications for eduGAIN members.
| 1.1.1 | eduGAIN policy review | Involved (lead) | Timeframe | Comments | ||
|---|---|---|---|---|---|---|
| Working group on eduGAIN constitution review | Nicole, Brook, Justin, Peter S, Alessandra, Marina, Chris P (advising), Tomasz | |||||
| Community consultation and vote on eduGAIN constitution | Brook and Nicole | |||||
| Create a SAML Technology Profile that combines the current Metadata and WebSSO profiles. Consider making this mandatory (although not all the pieces within it REQUIRED or MUST) | Nicole, Brook, Justin, Peter S, Alessandra, Marina, Chris P (advising), Tomasz | |||||
| Review the requirements in the existing eduGAIN metadata profile and add areas that are missing | Nicole, Brook, Justin, Peter S, Alessandra, Marina, Chris P (advising), Tomasz | |||||
| Add in details to the eduGAIN SAML Technology Profile that are SAML specific requirements but have currently not been covered or removed from constitution (certificates, metadata url, MDRPS) | Nicole, Brook, Justin, Peter S, Alessandra, Marina, Chris P (advising), Tomasz | |||||
Manage issues associated with current SAML2int problems, liaise with Kantara and define WebSSO requirements for edugain | ?? | |||||
| Introduce MRPS developed by REFEDS as standard template | Nicole and Justin | |||||
| Deprecate current Attribute Profile and work on a best practice document to replace this | Nicole? | |||||
| Position Code of Conduct as a best practice document and not a profile | Tomasz and Brook | |||||
| Write eduGAIN Operational Practice Statement | (this is currently a 1.2 workitem) | |||||
| Write eduGAIN Metadata Aggregation Practice Statement | (this is currently a 1.2 workitem) | |||||
| 1.1.2 | Review text of GDRP | M4-M6 | Get input from Andrew C | |||
| Review Federation interpretations of impact on their local and eduGAIN systems | M6-M8 | |||||
| Develop statements and recommendations for stakeholders | M8-12 | |||||
| M9.2 Assessment of DP Legislation Implications | M8 (EC Milestone | M8 | ) | Does not need full TA review | ||
| 1.1.23 | CoCo V2 | Mikael | Ongoing | Dependencies - GDRP, Privacy Shield. Cross-ref with REFEDs | ||
| International CoCo Development | Mikael | Ongoing | Dependencies - GDRP, Privacy Shield. Cross-ref with REFEDs |
...
GREY Milestone M9.2: Assessment of DP Legislation Implications, M8, White PaperPape