CTRL should support a consent model where the person providing consent is not the same as the data subject. The consent granter acts on behalf of a group, dataset, or community they steward, and their consent applies to the data under their guardianship.
This differs from CTRL's current implicit assumption that each participant consents for themselves.
Configuration should allow deployments to represent the consent-granter role distinctly from the data subject.
Context
Raised during CTRL presentation at the AGDR (Aotearoa Genomic Data Repository) fortnightly leadership meeting on 15 July 2026. AGDR operates under a kaitiaki (guardianship) governance model where community group leaders provide consent for data derived from taonga species on behalf of the communities they represent.
CTRL should support a consent model where the person providing consent is not the same as the data subject. The consent granter acts on behalf of a group, dataset, or community they steward, and their consent applies to the data under their guardianship.
This differs from CTRL's current implicit assumption that each participant consents for themselves.
Configuration should allow deployments to represent the consent-granter role distinctly from the data subject.
Context
Raised during CTRL presentation at the AGDR (Aotearoa Genomic Data Repository) fortnightly leadership meeting on 15 July 2026. AGDR operates under a kaitiaki (guardianship) governance model where community group leaders provide consent for data derived from taonga species on behalf of the communities they represent.