Privacy Management on the XR Platform¶
XR devices and applications may collect and process both personal and “personalizable” data of various types.
The EU GDPR requires that someone is informed as well about which data is collected as about what the purposes are of the processing of that data. Passerelle XR's Privacy Management provides the infrastructure to define and enforce GDPR-compliant privacy policies and to track consent, ensuring that end-users retain control over their data.

- Go to Identity and organization and press Privacy Management.
Hierarchy of the Privacy management system¶
-
A Consent Definition is a defined group of multiple Consent Categories.
- Consent Definition: XR Training
- Category: Progress
- Category: AI Modeling
- Category: Assess certification
- Category: Record reuse
- Consent Definition: XR Training
-
A single Consent Category is a defined group of Data Collection topics. For example:
- Category: Progress
- Data Collection Topic: steps progress
- Data Collection Topic: steps errors
- Data Collection Topic: task time
- Category: Progress
-
A Data Collection Topic is for example: Steps Errors.
How to create a single Data Collection Topic¶

-
Go to Privacy management, Master Data and Data Collection Topics.
-
Press Create.

-
Choose a title, write a description and add a 'Code'. The code must be short, in capital letters, without spaces.
-
Select a Consent Validity. This will decide how many times the topic needs to be accepted before use.
How to create a Consent Category¶

-
Go to Policy Definitions and Consent Categories.
-
Press Create.

-
Here you can add or change the general info of the Category. Change the Forced Consent Validity to how many times this consent needs to be given by a user.
-
Mark required if this consent is necessary before starting lessons, if rejected, the user won't be able to start sessions.
-
Add Data Collection Topics by pressing the next tab and press Create or Add. You can add multiple Topics in one Category.
How to create a Consent Definition¶

-
Go to Policy Definitions and Consent Definitions.
-
Press Create

-
Add a title and description to your definition.
-
Add or create Consent Categories of Data Collection Topics.
How to make the Privacy Management operational for an Organization¶

-
To make the Consent Definition operational, go to Policy Definition and Consent Policies.
-
Press Create.

-
Choose a created Consent Definition and an Organization where the policy needs to be active.
-
Press Create or Update. Now (non-anonymous) users within the Organization need to give consent when an XR Activity is started.
Where to view the given Consent of users¶

- Go to Consent Monitoring to check the consent status of users.