A processing consists of a service (which service wants this consent, e.g. VIS), personal data (what is consent requested for, e.g. a photo or mobile number) and a purpose (why does this service need your consent to use the personal data, e.g. to show a photo of the pupil on a pupil card).
The processing for which users can give or withdraw consent is administered by the county council via an admin interface in the customer portal (release fall 2023).
The services included in a treatment have a common vocabulary that is managed by Vigo.
In addition, the service consists of a backend that communicates with FINT Core and updates the consents that have been given or withdrawn.
Target group
All students and employees in the county authorities.
Advantages
Consents given by students or employees for given services are collected in one common place. Suppliers can then check FINT to see if consent has been given before retrieving the personal data. Suppliers can also create integrations that update consent in FINT itself, for example, they can request consent to use a profile picture in an app and consent is updated in FINT. The consent for this processing will then also be displayed in the consent portal, which shows all processing with associated consents for the user.
How to book the service?
See the section "Basic information" for a more detailed description of what preparations you need to make and what information we need to set up the service for your organization. Please contact Vigo IKS for ordering.
Additional information
See architectural sketch below.
When a user accesses the consent service (1), they are authenticated in their own azure ad and a jvt token is transferred that contains at least employeeid or student numbers and roles (2). The consent service will then ask FINT (3) for personal information based on student numbers or employeeid and retrieve treatments and any consents they have given/withdrawn.
The consents that users have given/withdrawn together with the treatments and services that the county has set up are stored in a separate database (4).
There is currently no interface for managing services and treatments, so for the time being this must be done by VIGO. This will be added to the admin portal in the future.
Architectural sketch:
