thomas.wieberneit@aheadcrm.co.nz
Beyond GDPR: Is MyTerms the New Standard for Enforceable Personal Data Agreements?

Beyond GDPR: Is MyTerms the New Standard for Enforceable Personal Data Agreements?

The news IEE just released standard 7012-2025 for machine readable personal privacy terms, nicknamed MyTerms. MyTerms covers interactions and agreements between individuals and service providers they interact with on a network. It defines a way for personal privacy requirements to be expressed as standard-form contractual agreements.  MyTerms is intended to replace today’s “notice and consent” pattern with a standardized, machine-readable contract handshake between an individual and a service provider. The standard considers individuals true first parties who can proffer privacy terms as contractual terms, typically through an automated agent acting on their behalf. The system relies on a neutral, non-business entity that hosts a bounded set of standard-form privacy agreements. These agreements are designed to be understandable and usable in practice by humans and by machines. They must be available in plain-language human-readable form, maintain legally meaningful wording, and also exist in machine-readable structured formats with stable identifiers so software agents can select and process them reliably. When an individual, or their agent, proposes one of these agreements to a service provider, this service provider has a deliberately constrained set of responses to allow model scalability. The service provider may accept the proposed agreement, offer one alternative agreement from the same bounded roster, or reject the proposed agreement. The standard does not expect open-ended negotiation beyond that single alternative choice. If the service provider accepts, the agreement is recorded so that both sides retain matching, immutable copies, including contextual metadata such as time, date, and location, to support later retrieval, audits, and dispute resolution. In parallel, service providers are required to publicly disclose which of the standard agreements they...
Why privacy is not an option

Why privacy is not an option

Data breaches, ransomware, stolen identities, collecting of data for no benefit of the customer, are only some of the things that we do see every day. There does not seem to be any privacy anymore. This makes privacy and data protection hot topics not only for customers, but also for software vendors – or at least should make it hot topics. Apple put in some privacy controls and got chided for it by Facebook and the rest of the adtech industry. Google, with FLOC, tried to establish a technology that aimed at being able to track users in a post cookie world. To adapt a quote of the Asterix books: The whole world tracks users and customers. The whole world? No, there is one brave company that doesn’t. All this is reason enough to have a #CRMKonvo with one of the most accomplished and outspoken protagonists of privacy in the enterprise software arena and we were very excited about the opportunity to have an intense and interactive discussion with Raju Vegesna of...