Modèles

Once a year, review every active consent: check validity, plan renewals, and make sure consent language matches your current privacy policy.

License your spending patterns to a fintech for credit scoring or analysis. Data is pseudonymised, with configurable retention and subscription pricing.

Multiple organisations share control of the same data. Equal voting rights, shared responsibilities, and clear withdrawal terms.

Publish a periodic report on how you handle data: requests received, data shared, breaches disclosed, and retention statistics.

Two financial services agree on data sharing, API availability, rate limits, and data retention obligations.

Request access to education records as a student or parent. Parental consent is required for students under 18.

Consent for AI tools used in classroom settings including transcription, tutoring, and assessment

Set baseline data terms for healthcare services: US-only processing, mandatory encryption, 24-hour breach notification, and audit logging.

Hospitals form a network for continuity of care. Equal governance, minimum necessary disclosure, and 90-day withdrawal notice.

Two universities share research data under peer governance. Either party can withdraw with 30-day notice. IRB approval required.

Let a friend or family member shop on your behalf for up to 30 days. They can view your cart, check out, and process returns.

Quarterly audit for open banking: verify strong customer authentication, confirm third-party provider registration, and review consent validity.

Require age verification before accessing gaming services. Block minors from age-restricted content and enforce parental consent.

Set your shopping privacy terms: no sale of purchase history, automatic data deletion after 180 days, and no behavioural ad profiling.

A group of retailers collaborates on shared privacy standards. Policy changes require a 3-of-5 quorum vote with a 14-day voting window.

Monthly audit of employee record access and annual confirmation of labour law compliance.

Set data terms for entertainment platforms: control how your viewing history, preferences, and activity data are used and shared.

Two entertainment services agree on content data sharing, API availability, and user experience standards.

Keep employee data within the company, delete records 30 days after termination, and prevent third-party HR data sharing.

Grant an HR administrator authority to manage employee records, issue credentials, and file data requests. All access is monitored.

Delegate content moderation authority to a trusted team or AI agent. Define scope, escalation rules, and appeal procedures.

Gaming studios collaborate on shared player data standards. Majority vote on policy changes with a 14-day voting window.

Monthly compliance checks: age verification audit, loot box disclosure review, and player protection measures.

Monthly review of online safety measures: content moderation effectiveness, age-appropriate access controls, and reporting mechanism audits.