Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: GDPR CoCo is done, fix Cookbook URLs

...

Info
titleGDPR update forthcoming

An updated version of the "GÉANT The GÉANT (now: REFEDS) Data Protection Code of Conduct for Service Providers " is being worked on and will be submitted to the Data Protection Authorities for approval, now that GDPR has come into effect. Due to the expanded territorial scope of GDPR over the previous Data Protection Directive the new version can also be used globally (if adopted). Until that happens the existing version should provide sufficient justification and safeguards to continue its use under GDPR until its replacement is ready to be usedfinally has been updated for GDPR. We'll be updating our documentation soon.

As part of the GÉANT Data Protection Code of Conduct's Cookbook you'll find the Recipe for a Home Organisation providing complete instructions on the steps necessary for deployment. This Service Category only applies when the Service Provider (as well as the Identity Provider, which trivially will be case for all eduID.at Identity Providers) is based in the EU/EEA or countries with adequate data protection and uses the EU Data Protection Directive 95/46/EC as common frame for disparate implementations thereof throughout the EU. As such it is mostly meant as a reminder and a reassurance to both service owners and home organizations that the services covered are already subject to (national implementations of) EU data protection law.

...

Expand
titleShow example Shibboleth IDP policy for the European Student Identifier

Include Page
IDP 4 include-ESIMyAcacemicID-rules
IDP 4 include-ESIMyAcacemicID-rules

Again, be sure to check out the more general attribute release documentation in our Shibboleth IDP documentation, which contains more ready-to-use examples and approaches.