In the face of not just GDPR, but many nations' new mandates for consumer data rights, organizations with a variety of business models face what may be their most serious dilemma of the information age: how can we deal in personal data safely? Proponents of the User-Managed Access vision would say the only way is to offer individuals "context, control, choice, and respect". This session will explore new UMA work that maps the flow of on-the-wire technical artifacts to legal devices such as contracts and licenses, designed to allow provable end-to-end control by data subjects of access rights to personal digital assets.
