Recipients are permitted to redistribute the information received within the scope of redistribution, as defined by the enumerations. The enumerations "RED", "AMBER", "GREEN", and "WHITE" in this document are to be interpreted as described in the FIRST traffic light protocol policy.
Enumerations
RED Personal for identified recipients only. AMBER Limited sharing based on a need-to-know basis. GREEN Community-wide sharing. WHITE Unlimited sharing.
Required
NO
Policy statement
PROVIDER ATTRIBUTION
Type
SHARING
Description
Recipients could be required to attribute or anonymize the provider when redistributing the information received.
Enumerations
MAY recipients MAY attribute the provider when redistributing the information received. MUST recipients MUST attribute the provider when redistributing the information received. MUST NOT recipients MUST NOT attribute the provider when redistributing the information received.
Required
NO
Policy statement
OBFUSCATE AFFECTED PARTIES
Type
SHARING
Description
Recipients could be required to obfuscate or anonymize information that could be used to identify the affected parties before redistributing the information received. Examples include removing affected parties' IP addresses, or removing the affected parties names, but leaving the affected parties' industry vertical prior to sending a notification.
Enumerations
MAY recipients MAY obfuscate information concerning the specific parties affected. MUST recipients MUST obfuscate information concerning the specific parties affected. MUST NOT recipients MUST NOT obfuscate information concerning the specific parties affected.
