PrivacyPortfolio is a Limited Liability Corporation in the State of California, USA.
Craig Erickson is the sole member of PrivacyPortfolio LLC, which acts as his authorized agent.
'Campaigns' are initiatives led by Craig Erickson to promote consumer empowerment and responsible AI practices.
While research experiments discover a range of impacts, campaigns already know the likely outcome.
Campaigns are designed to influence these likely outcomes through calls-to-action by impacted stakeholders.
Request-to-LIMIT Processing
*Overview*
Request-to-LIMIT Processing is a Yo-AI Assurance Campaign designed to
ENCOURAGE Organizations to improve data governance over YOUR information,
and ensure consent for all digital transactions by limiting their processing activities.
*Why This Campaign Exists*
Organizations cannot delete information for anonymous individuals.
Organizations cannot provide access to information they don't control and don't store.
Organizations can only limit processing of information for individuals they can identify.
*What Request-to-LIMIT Processing Does*
Request-to-LIMIT Processing is a request from an individual consumer who wants to
opt-out of processing their SENSITIVE personal information by an Organization.
This is born from the CCPA and other California State regulations,
although other jurisdictions may have similar laws protecting consumers.
Whether you have the legal right or not to LIMIT PROCESSING,
it is generally speaking, NOT AGAINST THE LAW to ask for whatever you want!
Request-to-LIMIT Processing has legal precedence BUT
-- is best achieved as a simple request OR Data Processing Agreement.
This campaign is intended to CONVINCE organizations it is in their best interest
to ensure that they honor their own policies,
so that individual consumers AND OTHER ORGANIZATIONS can honor THEIR POLICIES AND PROMISES.
*Who This Campaign Helps*
Request-to-LIMIT Processing is designed for Consumers who want control over their personal information,
and Organizations that seek data-minimization.
*Risk Summary*
The risk of NOT LIMITING PROCESSING exposes Organizations to consumers (in this case, medical patients) whose SPI/PHI was breached.
The risk of NOT LIMITING PROCESSING by One (Controlling) Organization exposes its Partner Organizations (subprocessors) to consumers who demand written authorization to process their SPI/PHI.
The risk of NOT LIMITING PROCESSING by ANY of the Organizations
exposes them all to data breach investigations,
which could find them liable for unauthorized processing and sharing of highly-sensitive personal information.
*How Request-to-LIMIT Processing Works*
Consumers use Yo-AI to issue Requests to Organizations.
Consumers use Yo-AI to discover all the downstream third-parties involved in processing their sensitive personal information.
Consumers use Yo-AI to monitor the digital supply-chain for indicators of unauthorized data-sharing.
Consumers use Yo-AI to request resolution of their complaints with ALL Organizations in the supply-chain.
Organizations use Yo-AI to mimic this entire process to discover all the downstream third-parties involved and conduct their own assessments.
*Guarantee / Disclaimer*
Discovering an Organization's Partners and Vendors is not simple or straightforward.
Engaging in this campaign is risky:
organizations "circle the wagons" and fiercely protect their "trade secrets" with NDAs and other instruments.
Yo-AI mitigates some of this risk by fingerprinting its agents,
but the heuristic patterns will resemble those characterized as fraudulent or malicious activity.
*Call to Action*
IF ASKED, would YOUR ORGANIZATION BE CAPABLE of LIMITING PROCESSING of a Consumer's Sensitive Personal Information?
