Create list of FAQs for IDSA Rulebook

[anilturkmayali]

Make a list of potential FAQs and add them to the repo.

[anilturkmayali]

Here is a start. Please feel free to add more FAQs by replying to this issue. (at the end of this message you may also find a FAQ page example from another IDSA repository.

---

1) What is the IDSA Rulebook?
The IDSA Rulebook provides guidelines for the development and operation of data spaces, including functional, technical, operational, and legal dimensions​​.

2) Who should read the IDSA Rulebook?
Anyone involved in data-driven ecosystems, business models, or interested in trusted and secure data access and sharing should read the Rulebook​​.

3) How can someone contribute to the IDS Rulebook?
Contributions can be made by joining the Rulebook Working Group as a member of the International Data Spaces Association (IDSA)​.

4) How does the IDS Rulebook align with EU regulations?
The Rulebook aligns with EU policies and covers relevant regulations such as the Data Governance Act, Digital Markets Act, and GDPR​​.

5) What role models does the IDS Rulebook define?
Roles defined in the Rulebook include data providers, data consumers, and service providers, each with specific functions and responsibilities​.

6) What are the guiding principles of the IDSA Rulebook?
The guiding principles include using proven technologies, integrating data spaces with existing systems, aligning with existing standards, ensuring industry and domain independence, and being easy to use. Four key governance principles are accountability, transparency, fairness, and responsibility​.

7) What political and economic considerations are important for data spaces?
The European Data Strategy and related legislation like the Data Governance Act and the Digital Markets Act are crucial for ensuring data sovereignty and establishing a balance between stakeholders' rights and interests in data spaces​.

8) What is the regulatory framework for data spaces according to the IDSA Rulebook?
The regulatory framework is fragmented due to the lack of a general legal status for data and partial application of IP rights and trade secret protections. The EU Commission has proposed regulations like the DMA, DSA, and AI Act to address these issues and promote a common European data space​.

9) How does the IDSA collaborate on legal matters?
IDSA has formed a legal framework task force to discuss regulatory developments and legal topics, and to organize collaboration and contributions from its members regarding the legal dimension.

10) What are the functional requirements for building trusted data spaces?
The functional requirements include mandatory and optional elements such as trust brokerage, data contract negotiation, and value creation through data sharing in various deployment patterns and architectures​​.

11) How is digital sovereignty achieved within a data space?
Digital sovereignty is grounded in identity control, allowing participants to choose with whom they share data, under what conditions, and ensures agency over assets. Federated identity systems provide a compromise between centralized and decentralized control

12) What role does the Data Space Authority (DSA) play in a data space?
The DSA is responsible for establishing policies, issuing membership credentials, and verifying membership, alongside optional roles such as auditing, brokering, and providing vocabularies for the data space.

13) What roles do the Data Space Authority (DSA) and attribute-based trust mechanisms play in IDS?
The DSA ensures trust in the data space, while attribute-based trust mechanisms involve certification of specific attributes and adherence to trust frameworks established by the DSA

14) What types of policies are crucial in a data space?
Access policies control contract accessibility, while contract policies govern the terms and usage of data. These policies define who can join the data space, what attributes are required to access data contracts, and the conditions for data use.

15) What are technical agreements in the IDS framework?
Technical agreements consist of the Reference Architecture Model (RAM), IDS-G specifications, and a certification scheme, providing guidance to create the necessary components for an IDS-based data room.

16) Why is certification crucial in data spaces?
Certification is essential to build trust, ensuring that fear of data misuse and security concerns are addressed by clarifying responsibilities and mechanisms within the data space

17) How does IDS Certification fit into the technical agreements?
IDS Certification ensures compliance with the RAM and IDS-G specifications, providing a formal evaluation of core components and operational environments.

18) How does IDS Certification contribute to trust in a data space?
IDS Certification, as a trust framework, provides component certification and operational environment certification to assure required functionalities, security, and trustworthiness of the operational environment​.

19) What are the types of certifications available within IDS Certification?
The certifications include component certification for IDS-RAM components and operational environment certification for the physical environment and associated processes and rules.

20) How are assurance levels determined in the IDS Certification process?
Assurance levels range from self-assessment to third-party assessments, with the latter being more advanced and involving compliance checks by approved evaluation facilities. More information available on IDSA Website: https://internationaldataspaces.org/offers/certification/

FAQ example from another IDSA repo

[ssteinbuss]

• International aspects of the Rulebook, it is not limited to Europe
• What is the scope of IDSA and what is IDSA work about, who is IDSA, explain the Swimlanes and explain what is inside the IDSA Box.
• Further structure for the FAQ is required, do some clusters and find headlines for those.
• What is the role of standards in the realm of Data Spaces? What is a standard and what is not a standard, what is the impact of a standard? (Consider this also as a contribution to the Rulebook.)

[PeterKoen-MSFT]

please, change DSA to DSGA.
Do we have any other FAQ collected from the community? If not I would suggest to publish the current FAQ and close the issue.

[PeterKoen-MSFT]

@anilturkmayali - has the Rulebook FAQ been finalized and published?
Can you provide a link to it?

[anilturkmayali]

Hi @PeterKoen-MSFT could you please share with me,

1. if there is a WG decision regarding where the Rulebook FAQs will be published? (Github discussions, IDSA Website, etc.)
2. if there is a first list of the FAQs already, or can we simply go with the ones above?

Then I'll take care of the rest. Thank you.

[PeterKoen-MSFT]

@anilturkmayali - is the above all there is for the Rulebook WG to review?

We can start with the FAQs already, but we also need a process to capture questions from the community to further populate the FAQ list.

Please, work with the right people in IDSA to find a process how non-members (and members without access to the GitHub Issues) can ask a question about the rulebook so we can start collecting more questions.

[PeterKoen-MSFT]

This will in April 2025 to check whether those are the right questions and answers. if no contribution we will close in early May. If contributions are submitted this issue will remain active and open.