What are the elements of a VRM data portability policy?
The basic elements of a VRM data portability policy should include:
Data retention agreement - How long will my data be retained for? For example - for the life of the relationship plus 30 days.
Data reuse agreement - Will my data be used for purposes beyond the original transaction
Data ownership agreement - What elements of the data belong to the vendor such as a Frequent Flyer number
Data portability agreement - The data that is the subject of the agreement may be stored by the vendor, or it may be held by a data custodian in a Personal Data Store.
Data access agreement - The data that is the subject, or a sub-set, of the agreement should be accessible to third parties that have been granted access by the user. For example, granting access to my shipping address information at Amazon by a third party vendor I have performed a transaction with.
