MOBILE-ID · TRUSTED LTANS
Customer-data processing controls
Reconcile data rights, stores, copies, export and deletion with provider and customer responsibilities.
Assign responsibilities before agreeing processing scope
This is an agreement/acceptance framework, not a jointly approved processing addendum.
| Item | Mobile-ID / operator | Customer / data owner |
|---|---|---|
| Purpose and data | Describe technical flows, components and required access. | Define authority, permitted data and purpose limits. |
| Custody / keys | Identify operator-managed storage/keys within scope. | Confirm BYOS, reread rights, key custody and original-data duties. |
| Data requests | Provide authorized lookup/export/handling procedures under contract. | Assess requests against retention/holds and approve scope. |
| Incidents | Contacts, records and notices under approved procedures. | Assign decision owners and coordinate impact assessment. |
| Exit | Prepare packages and reconcile residual custody/disposition. | Validate packages, acknowledge custody and decide source handling separately. |