RDM-2024-0057-New_requirement_for_data_ownership_and_right_to_be_deleted

Coversheet	Value
Meeting ID	RDM #67
Work-item	WI-0001
Reason	This contribution proposes to add a new requirement to TS-0002 v5.3.0 to address issues related to data ownership and right to be forgotten.

TS-0002-oneM2M-Requirements.md

@@ -709,7 +709,7 @@ NOTE3: The solution would be complete and will be a part of the oneM2M core func
 |SER-082<br />See ARC--2018-0062 |The oneM2M System shall support M2M Service Subscriber and M2M Service User profiles specifying their restrictions (e.g. privacy restrictions, max number and/or types of applications and devices the M2M Service Subscriber and its authorized M2M Service Users are allowed to register to the M2M System, the maximum number of resources or bytes of data that the M2M Service Subscriber can store in the M2M System, etc.) and their default configurations (e.g. access control policies, expiration times, max number of content instances, etc.). | |
 |SER-083<br />See RDM-2019-0054R01 |The oneM2M System shall support access control and authorization mechanisms for the M2M Service Subscriber or M2M Service User information, based on dynamic parameters (e.g. on/off duty time schedule, location, role or job position etc.). |Rel-4 |
 |SER-084<br />See RDM-2019-0054R01 | The oneM2M System shall be able to access M2M Service Subscriber information or M2M Service User information based on dynamic parameters (e.g. on/off duty time schedule, location, role or job position, etc.) from M2M Applications. |Rel-4 |
-
+|SER-0xx<br />See TR-0062 | The oneM2M System shall provide mechanisms to immediately delete privacy-related data upon request from the data owner, supporting the "right to be forgotten" as required by regulations like the GDPR and Personal Information Protection Act. |Rel-4 |
 
 NOTE 1:    The above requirement does not cover items outside of the oneM2M System, e.g. Underlying Networks.