Page created: 4 Feb 2020
|
Page updated: 22 Jul 2020
The Consent Service is an HTTP-based REST API hosted by the PingDirectory Server or PingDirectoryProxy Server. The service enables the collection of consent from application users, the enforcement of consent, a user's management of his or her consent, and auditing of consent actions. Enterprises can integrate these features into their applications to give users transparency and control of their data privacy.
For the purpose of this document, the following terms are used:
Term | Meaning |
---|---|
collaborators | A list of individuals for whom access to this consent record is shared. |
Consent definition | The terms of the fine-grained contract, which describes the data that can be processed or shared, and a purpose for processing or sharing the data. The consent definition is stored in the server configuration. |
Consent localization | A child object of a definition that contains versioned, localized text for the consent definition, to be used when prompting an individual. This is stored in the server configuration. |
Consent record | A record of a consent interaction with a user. Consent records are stored in the directory tree. |
Subject | The individual whose data can be collected, processed, or shared. |
Actor | The individual who granted/denied/revoked consent. This is usually the same as the subject. |
Audience | The entity, application, or service that is granted or denied access to a subject's data for a specific purpose. |