What are the elements of a VRM data portability policy?

The basic elements of a VRM data portability policy should include:

• Data retention agreement - How long will my data be retained for? For example - for the life of the relationship plus 30 days.



• Data reuse agreement - Will my data be used for purposes beyond the original transaction



• Data ownership agreement - What elements of the data belong to the vendor such as a Frequent Flyer number



• Data portability agreement - The data that is the subject of the agreement may be stored by the vendor, or it may be held by a data custodian in a Personal Data Store.



• Data access agreement - The data that is the subject, or a sub-set, of the agreement should be accessible to third parties that have been granted access by the user. For example, granting access to my shipping address information at Amazon by a third party vendor I have performed a transaction with.