2 How to design a consent form

A consent form is a document that records the agreement of a person to have their 3D data used for a specific purpose. It should be clear and concise, providing the name and contact details of the 3D scanner or data controller, as well as the purpose and scope of the 3D scanning or data use. The form should also include information about the type and amount of data collected, stored, shared, and transferred; any data security and encryption measures; and the rights and options of the person being scanned. Finally, it should include the signature or confirmation of the person being scanned or their legal representative.

3 How to handle sensitive data

Sensitive data, such as biometric, health, or identity information, requires a higher level of protection than other types of data due to the risk of harm or discrimination if misused or breached. When handling sensitive data, you should only collect and store it if it is necessary and relevant for the purpose of the 3D scanning or data use. Additionally, you must obtain explicit and specific consent from the person being scanned or their legal representative. You should also apply strict data minimization and anonymization techniques to reduce the amount and identifiability of sensitive data. Furthermore, strong data encryption and security protocols should be used to prevent unauthorized access or disclosure of sensitive data. Lastly, you must comply with applicable laws and regulations on sensitive data protection such as the GDPR or HIPAA.

4 How to deal with minors

Minors are people who are below the legal age of consent, which varies by country or jurisdiction. They have special rights and protections when it comes to 3D scanning and data use since they may not fully comprehend the implications of their participation. Thus, when dealing with minors, you should not scan or use their 3D data without the consent and supervision of their parents or guardians. You should also explain the 3D scanning process and data use in a simple and age-appropriate way to the minors and their parents or guardians. Additionally, you should respect the wishes and preferences of the minors and their parents or guardians, allowing them to withdraw or object at any time. Moreover, it is essential to limit the collection and storage of minors' 3D data to what is necessary for the purpose of 3D scanning or data use. Finally, you should delete or anonymize the minors' 3D data as soon as possible, or when requested by them or their parents or guardians.

5 How to update and communicate your policy

Your consent and privacy policy should not be neglected; it is a document that is constantly changing to meet the needs and expectations of those you scan and the data you use. Thus, it is necessary to review, update, and communicate your policy regularly. This includes reviewing to make sure it is accurate and compliant with laws, as well as updating when new 3D scanning methods, purposes, or data uses are introduced. Additionally, it is essential to notify those you scan and the data you use about any changes or updates to your policy, as well as obtain their consent if necessary. Furthermore, make sure to publish your policy on your website, app, or platform in a visible way so that those you scan and the data you use can easily access it. Finally, provide clear ways for them to contact you if they have questions or want to exercise their rights.

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?