The day after: Obligations
- When trust negotiation succeeds and personal data are exchanged, then promises must be kept.
- Access control policies, privacy policies, and user preferences turn into obligations.
- Obligations are long-lived.
- Obligations must follow data within the enterprise.
- Obligations must follow data between enterprises.
- They must be enforced in a different business with different staff in 20 years.
- Enforcement must be demonstrable.