DEFINITIONS

• AAI - The GEANT AAI Service
• DPO - Data Protection Officer
• CIRT: Computer Incident Response Team
• Service: A service using the AAI for authentication and authorisation of End Users
• Participant - An entity providing, managing, operating, supporting or coordinating one or more Service(s) connected to the AAI. 
• Personal Data - Any information relating to an identified or identifiable natural person [GDPR].
• Policy - This document
• Processing (Processed) - Any operation or set of operations, including collection and storage, which is performed upon Personal Data [GDPR].
• End User - An individual who by virtue of their membership of on the AAI is authorized to use the Participant's Services.

Introduction

You are reading this because You wish to rely on the AAI for user authentication and authorisation in your Service. These Terms of Use govern Your use of the AAI. By using the AAI You accept that Your use of the AAI will be subject to these Terms. 

...

• Service Operations security policy 
• Security Incident Response ProcedureIncident response procedures ← FIXME
  
• Policy for processing personal data 

...