Inventory what data is actually needed
The prototype should identify its data processing and minimize collection rather than defaulting to exact addresses or identity-rich profiles.
Open NIST Privacy FrameworkLegacy concept universe · Future Concept
Inspect privacy, trust, consumer, payment, rights, tax, contract, insurance, accessibility, labor, and platform-review questions before escalation.
Risk / Rights / Review
This register identifies questions for planning. It does not determine legal obligations or provide professional advice.
| Area | Why it matters here | Bounded-test control | Status |
|---|---|---|---|
| Privacy / sensitive location | Personal maps can reveal homes, routines, relationships, or other sensitive places. | Prefer minimum necessary data, safe prompts, participant control, and explicit handling rules. | Review before collecting real participant data |
| Consent / ownership | The artifact may concern people or places beyond the contributor. | Define contribution rights, prohibited material, removal, and transfer expectations. | Unknown until prototype terms exist |
| Trust / disputes | A two-sided exchange can fail through mismatch, low quality, harassment, non-delivery, or misrepresentation. | Manual review, documented match rule, report path, and recovery policy. | Testable in pilot |
| Payments / refunds | A paid version introduces transaction, refund, chargeback, tax, and platform questions. | Use no payment in the first proof unless payment is the specific assumption being tested and review is complete. | Conditional |
| Marketplace obligations | Some operating models can create online-marketplace obligations; applicability depends on facts. | Do not label the pilot legally compliant by default. Review the actual model and participant roles. | Specialist review item |
| Accessibility | Map-like artifacts and visual matching can exclude users if meaning is visual-only. | Require text equivalents and non-visual ways to understand or contribute the exchange. | Design requirement |
| Trademark / naming | Legacy concept identity is provenance, not clearance for commercial branding. | Keep public treatment non-affiliated and obtain appropriate clearance before real commercial use. | No clearance asserted |
The prototype should identify its data processing and minimize collection rather than defaulting to exact addresses or identity-rich profiles.
Open NIST Privacy FrameworkThe FTC’s INFORM Consumers Act guidance is included as a conditional review source for qualifying online marketplaces, not as a claim that this concept is covered.
Open FTC guidanceSBA guidance separates market research and competitive analysis from wishful assumptions about customers and differentiation.
Open SBA guidance