Appendix A: Common Types

An opaque marker that represents the amalgam of all underlying PODs tied to a specific DataProcessor-DataController relationship.

URL where the related abbreviation comes from.

Namespace where the related abbreviation comes from.

Alternate purposes for which the data may be used.

Alternate purpose for which the data may be used.

List of application identifiers.

An application identifier.

An opaque (to the SIF standard) element which contains any required Consumer authentication information. The content of this element is site-specific. For a Direct Environment which accepts Consumer Registration Requests from a mobile application, this element might contain a combination of the User ID and Password.

The version of the SIF infrastructure which the Consumer supports.

The namespace of the data payloads conveyed by this environment. Returns may be of a diffrent minor version. Utility payloads will be of the infrastructure namespace.

The transport which the Consumer expects the infrastructure to use to interoperate with it. The default is whichever transport the create request was issued on

A List of benchmarks - where a benchmark is a set of technical or process standards to ensure the clause is met.

A benchmark is a set of technical or process standards to ensure the clause is met.

A set of technical or process standards to ensure the clause is met.

The name of the Benchmark

The local id of the benchmark.

A description of what the benchmark is and how it should be applied.

A link to any authoritative source of the benchmark.

A list of the legal clauses within the contract.

Details of a legal clause within the contract.

Details of a legal clause within the contract.

The label which should include a brief description.

The formal clause reference.

The actual detailed content of the clause.

List of obligations.

Official abbreviation for the given value.

URL where the related abbreviation comes from.

Namespace where the related abbreviation comes from.

What the code represents.

Human readable explanation of what the code represents.

Human readable explanation provided by the source!

The last action to be taken for this code item.

The date and time of the last action taken on this code item. So that only updates can be queried efficiently (where applicable).

Indicates the alias code has been deprecated or deleted, even if it no longer appears in the register.

Indicates the alias code is an official one; however the locale uses this one to represent that concept, at least in part.

Alternate abbreviation that might need to be more specific or correct.

URI Associated with contract

Name associated with contract

Date the contract is valid from.

Date the contract is valid to.

Version of contract that this POD applies to.

List of laws covered referenced by the contract.

Who owns the IP rights of this contract?

List of impacted countries in or through which the data transits or is stored.

Name of a country impacted in or through which the data transits or is stored.

Name of a country impacted in or through which the data transits or is stored.

Details of the usage within the country, how the data is handled e.g. stored permanently, operational store, back-up, archived, etc.

A list of the data that can be accessed and any rules that specifically apply.

A list of clauses that specifically apply to these technical requirements.

A list of fields that can be accessed under this POD. Equivalent to a "green list".

The data controller, "means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data", see GDPR.

Name of the data controller.

URL Associated with contract

The details of the privacy contact.

The details of the individual to be contacted if there are issues in fulfilling the obligations of the contract.

Details and requirements for data deletion.

Must data be deleted when no longer required to the primary purpose?

If allowed, how long can the data be retained for when no longer required for the primary purpose?

By which specific date should this data be removed from systems?

Who is responsible for deletion of this data?

In how many days should any request for information around this data and it's deletion be responded to?

Do all the rules surrounding this data need to be ported with any data that is transmeitted?

The data processor, "means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller", see GDPR.

Name of the Data Processor.

URL Associated with contract

The details of the privacy contact.

Do we need to advise the data controller of access requests?

The details of the person to contact for access requests.

A list or purposes for which the data may be used.

Alternate purposes for which the data may be used.

The purposes for which deidentified data is able to be used (if any).

Can the data be used for marketing purposes?

The frequency at which personal information is to be updated from source systems.

In the event there is a breach event is notification of the breach contact required?

Contact details for the individual/s to be notified in the event of a data breach.

Must employees of the data controller comply the with agreement?

Are employees of the data controller required to comply with a confidentiality agreement?

A list of the data controller employee’s training requirements.

A list of the data controller employee’s password access standards.

A list of security testing required to be completed by the data controller.

List of impacted countries in or through which the data transits or is stored.

The specific clauses obligations and benchmarks that applies to the subject - teacher, student or parent.

A list of fields that can be accessed under this POD. Equivalent to a "green list".

n how many days should any request for information around this data subject be responded to?

Do all the rules surrounding this data need to be ported with any data that is transmeitted?

The list of data sub-Processors who are the bodies that process data on behalf of the Data Processor.

A data sub-Processors who are the bodies that process data on behalf of the Data Processor.

Details of organisations who process data on behalf of the data processor.

Name of the sub processor.

URL Associated with contract

Details of the data sub processor's privacy contact.

The purpose for which data is supplied to the data sub processor by the data processor.

Zone identifiers are chosen by the administrator and can follow any convention that best meets the needs of the deploying organization. The Zone in which the Service is to be found always qualifies every Consumer request for any Provider Service. Each Service Consumer is assigned a "default" Zone at Registration time, which is used whenever a specific Zone is not explicitly included in one of its Provider Service Requests.

A short (possibly multi-sentence) description of the Zone

The purposes for which deidentified data is able to be used (if any).

The purpose for which deidentified data is able to be used (if any).

An endpoint covered by the POD.

A type of endpoint.

The url of the endpoint.

The name of the provider of the endpoint.

Individual setting

An acceptable parameter value for this query.

If enumerated value has an equivalent code, this field may be used for conversion.

A list of fields that can be accessed under this POD. Equivalent to a "green list".

Details of a field that can be accessed under this POD, equivalent to an element in a "green list".

Details of a field that can be accessed under this POD, equivalent to an element in a "green list".

Name of the "green listed field"

What are the control rights around this "green listed field"?

A list of Address elements.

This element contains address data.

Date the address became active.

Date the address ceases to be active.

Address line 1.

Address line 2.

Address line 3.

The city or Suburb part of the address.

The state or province or county.

The country code.

The ZIP/postal code.

Common element used to supply information for a contact person at a school, LEA, or other institution.

The contact person's position title.

Examples
Superintendent

Role played by this contact in this instance.

Examples
Report Contact
Primary Contact
Alternate Contact

Address of the contact.

List of Email elements.

List of PhoneNumber elements.

List of Contacts associated with an entity.

A country code or name.

A list of e-mail addresses associated with an individual or organization.

This element represents an e-mail address of one of a number of types and occurs in objects such as StudentPersonal, StaffPersonal, StudentContactPersonal, etc..

This is a common element used to define the locally assigned identifier associated with an entity.

Core Name Type or Name elements, primarily to allow structure to be leveraged with different Type attribute values.

A title or prefix associated with the name. If any of: Mr, Mrs, Ms, Miss, Rev, Fr, Dr, Prof, Hon, Sir, Lord, Lady - these must be as shown, otherwise free text. Note that title is not applicable to learners.

Family name. That part of the person's name which is used to describe family, clan, tribal group, or marital association. Note that this element is required when known. However, it may not be possible to know the family name in which case you should add the available information to the FullName element.

Given name of the person. Note that this element is required if known. However, it may not be possible to know the given name in which case you should add the available information to the FullName element.

All other given or middle names, each separated with a single space character.

An indicator used to identify the naming conventions used by some predominantly non-European, ethnic or language groups and related to the display nature of a name.

The given name preferred most by the person (as written).

Lists phone numbers associated with an entity.

This element represents a phone number and occurs within objects such as StudentPersonal, StaffPersonal, etc.

Phone number. Free-form, but typical Australian formats include:

• (###) ####-####
• ####-####
• +##### ### ###

Phone number extension.

Indicates whether or not the phone number is available to the public.

Preference number indicating an order in which phone numbers should be used when contacting person.

The identifier for this entity as assigned by the state or province.

A state or province code. Note: When dealing with countries other than Australia, state/province codes/values other than those referenced here can be used.

There must be an InfrastructureService element present for each defined Infrastructure Service. The value of each InfrastructureService Property value subelement defines the URL location of that Infrastructure Service.

Name of initialization phase the payload corresponds to.

Information matching the initialization phase, should result in corresponding phase having an INPROGRESS, COMPLETED, or FAILED state.

A list of parties and data sharing permissions.

A law that applies to this contract.

Information about the specific law.

Common name for this law.

Details of the law.

Contains a list of the legal clauses within the contract.

A list of the legal clauses within the contract.

An Internet Media Type supported by this adaptor (for this service).

Individual setting

The name of the parameter being passed in.

The value of the parameter being passed in.

The operation used to make the comparison. If not provided EQUAL is assumed.

A list of requirements imposed by the contract.

A requirement imposed by the contract.

A requirement imposed by the contract.

A description of the requirment imposed by the contract.

A link to any authoritative source of the obligation.

A list of benchmarks associated with the obligation.

Individual setting

The name of the query parameter to be passed in. Note: Must not conflict with any other query parameter name.

A well understood type that MAY be used for parameter validation. Example: xs:unsignedInt.

Value to be supplied for this parameter if the submitter omits it.

An explanation of what this parameter represents.

Indicator as to if this parameter is required. If omitted, the parameter is assumed to be required!.

The minimum length for values of this parameter. If omitted, zero. May be functionally different because of other restrictions.

The maximum length for values of this parameter. If omitted, unbounded. May be functionally different because of other restrictions.

Who is responsible for deletion of this data?

Name of the standard used for access.

A link to an authoritative source for this standard.

The name of the Phase unique within the context of the owning job.

A collection of the states the Phase has been through, must initially contain a NOTAPPLICABLE or NOTSTARTED state.

Whether or not this phase is required for the job to complete successfully.

Access rights given to the consumer for this phase.

Access rights given to the consumer for each state.

The details of the contract the POD has been derived from.

Legal Requirements Container.

Technical Requirements Container.

The data controller, "means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data", see GDPR.

The data processor, "means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller", see GDPR.

The list of data sub-Processors who are the bodies that process data on behalf of the Data Processor.

.

Is this the default privacy template?

The list of applications in this contract.

A list of fingerprints.

A list zones and contexts where this POD applies.

A list of endpoints that are covered by this POD.

Namespace associated with the relevant datamodel.

Minimum data model version.

Maximum data model version.

The legal and technical requirements that are required to be met to satisfy privacy and security concerns.

The name of the company supplying this Product.

The name of the Product

The format of this field is undefined, but it should match the format used in the agent's conformance statement, if the agent is SIF Certified.

HTTP URL referencing an icon for graphical representation of the application/agent. Should range from 16x16 pixels to 128x128 pixels and be of an image MIME type commonly supported by Web browsers (e.g. PNG, JPEG, GIF).

Individual setting

Name/Value pair.

The URL to use when sending Requests to a Provider

May contain zero or more property elements containing name/value pairs describing any protocol settings required to ensure proper communication

A specific Zone defined for this environment.

The unique id of the Zone, and the key to the Zone element in the Zone Registry.

A list of the purposes for which data is may be used.

The purpose for which data may be used.

True if this service is capable of honoring the "where" parameter.

True if this service is capable of honoring query by example payloads.

True if this service is capable of supporting Changes Since Queries.

True if this service is capable of responding to Paged Query Requests (both Interactive and Batch).

If Paged Queries are supported, this is the maximum number of Objects that will be returned on a Page of Query results.

Application Vendor Identification

Adapter Vendor Identification

If a numeric range is used, this holds the inclusive starting value.

If a numeric range is used, this holds the inclusive ending value.

The type of the requested Access Right

• rightType

Details of the security test required.

Details of the security test required.

Type of the test.

How often does this test need to be performed?

RNumber of days remediation for any inadequacies has to be completed with in.

Are the results of this security test allowed to be shared?

The name of the Service. For utilities, this is fixed to one of the defined set of Utility Service Names. For objects and functions, it is defined by the Data Model.

The unique identity of a context element, which is associated with a Provider of this name and type operating in a Zone with this ID. All Services with the same name in the same Zone must have different Context IDs. Only one such Service can have no Context.

Details of technical requirements that need to be met to achieve the POD.

A list of the data that can be accessed and any rules that specifically apply.

The specific clauses obligations and benchmarks that applies to the subject - teacher, student or parent.

Details and requirements for data deletion.

A Zone and/or Context related to a POD.