Consent should remain under your control

A one-time approval should not become a permanent blank check. DataStorm and KICK’S are developing a reverse consent model in which permission stays connected to a named purpose, selected data categories, an allowed scope, and an expiration date.

The word reverse describes the person’s continuing ability to change the decision. A permission can expire, be renewed through explicit action, or be revoked. A person can also block new permission requests for a particular purpose until that block is removed.

The questions every request should answer

  • Who is requesting access?
  • What purpose does the request serve?
  • Which data categories are included?
  • Is the scope limited to reading, aggregation, or sharing?
  • When does the permission expire?
  • How can the person revoke or block it?