The user's policy choices are permit, deny, "ask me" and "use my institution's advice." For example:
- "permit release of my email address to LibrarySite"
- "ask me about release of my surname to LearningManagementVendor"
- "use my institution's advice about release of my faculty role to SomeOtherSite"
- etc
The institution's policy choices are permit and deny.
- if the user's choice "wins," the institutional decision of permit or deny becomes "advice" the user can see and choose to use or not.
- institutional policy allows for groupings of vendors and groupings of users for ease of administration. For example:
- "permit release of email for students to all Research & Scholarship vendors"
- "deny release of given name and surname for staff and faculty to all other sites"
CAR's policy language document describes the policy statements in glorious, geeky detail. You can find it in the In-depth Technical Materials section below.