CSA ISO/IEC 15944-8 : 2015

Specifies: - method(s) for identifying, in Open-edi modelling technologies and development of scenarios, the additional requirements in Business Operational View (BOV) specifications for identifying the additional external constraints to be applied to recorded information in business transactions relating to personal information of an individual, as required by legal and regulatory requirements of applicable jurisdictional domains having governance over the personal information exchanged among parties to a business transaction; - existing normative elements in support of privacy and data protection requirements as are already identified in the current editions of ISO/IEC 14662 and ISO/IEC 15944-1, ISO/IEC 15944-2, ISO/IEC 15944-4, and ISO/IEC 15944-5 which apply to information concerning identifiable living individuals as buyers in a business transaction or whose personal information is used in the transaction; - overarching operational 'best practice' statements for associated (and not necessarily automated) processes, procedures, practices and governance requirements that must act in support of implementing and enforcing technical mechanisms needed to support privacy/data protection requirements necessary for the implementation in Open-edi transaction environments; - and provides a sample scenario and implementation (use case) for one or more use cases of privacy/data protection in business transactions; and - guidelines on the need for procedural mechanisms in the event that mandatory disclosure rules of transactional information must be implemented.