Consent Management for personal data sharing

[ma3u]

Some data spaces like in the mobility, education, health area need to manage the consent of their users. GAIA-X suggested two types of participants: legal person and natural persons.

The EDC is covering legal persons today. But users need to agree which data they are willing to share with other providers.

The Educational dataspace Prometheus-X suggested building blocks we want to suggest to discuss with the EDC community. IDSA started a working group to discuss the consent management.

Prometheus-X suggested following architecture to enable human-centric data-flow and rely on data intermediaries. The Data Governance Act introduced the principal of the trusted data intermediary. The Data Space Support Centre also discuss the element of trusted data intermediary for data spaces.

Prometheus-X suggested a personal approval workflow between Data Provider and Service Provider through an additional Consent Service on both sides. The key role will play a decentralized federation service of intermediaries:

Prometheus-X also shared a detailed sequence diagram