A person is known at a declared level

Answers Identity

Every instrument declares the level at which it identifies the person behind what it observes: anonymous, where one person cannot be told from another; pseudonymous, where they can be told apart without being known; or known. The kernel names the kind, the road and the unresolved level, and no move of the journey machine rests only on evidence observed at that level.

What goes wrong without it

A journey machine moves a person, and a move counted by an instrument that cannot tell one person from another is a move nobody made: an impression cannot move anyone, however many there are. The profile standards keep one representation of a person across the identifiers each source knows them by, and the regulation keeps pseudonymised data apart from identified data by exactly the additional information it takes to join them; a model that declares grain on its events but not resolution on its instruments cannot say which of its readings are about people at all. Declaring the level on the instrument, where the identifier lives, is what lets the build hold every move to evidence that could have been one person's.

What proves it — 1

Each is a gate the build runs: a check inside a ring, a whole ring, or an eval beside them. A build stops at the first that refuses.

• registry integritymoves are identified
  The kernel's resolution names a kind the registry declares, a specification on which the instrumenting kind declares its level, and a row of that kind at which nobody is told apart; and every event that triggers a move is observed by at least one instrument identifying above that level. A move counted only by instruments that cannot tell one person from another is a move nobody made.

Derived from — 3

• Adobe Experience PlatformXDM Individual Profile Class
• European UnionRegulation (EU) 2016/679, Article 4: Definitions
• International Organization for StandardizationISO/IEC 24760-1:2019 IT security and privacy: a framework for identity management, Part 1: Terminology and concepts

Kinds it licenses

Relationships it licenses

identifies at

Where this model stands

Identity Levels is a vocabulary kind of three in Identity and scope; every one of the 32 signals asserts the level it identifies at, on a typing road with bound 1..1; the question at what level an instrument identifies walks it.

registry/kernel.json `resolution` names the kind, the road and the unresolved level, and FND-037 holds every event that triggers a move to being observed by at least one instrument above it; the first run held all 24 moves, with the paid-search click tracking declared pseudonymous because a click carries a click identifier.

The level is the instrument's, not the event's: Event Grain says whether one fact is one person's; the level says whether the instrument that saw it can tell who.

What it does not claim

A household, a device shared by several people, and an identity resolved after the fact by joining two instruments are grains of the record, not levels of an instrument, and are stated with the record shapes.

RUL-049