Opiquad is to lead the Governance Authority, nexyo has no vote
A Governance Authority sets the rules of a Data Space and enforces them. It is not a public agency but a body of the Participants.
Four voices are to decide who joins and which rules apply
The plan is four votes: Opiquad chairs, joined by a federation committee, the pilot club Vero Volley, and one independent Participant. nexyo has no vote.
nexyo provides the software. Others set the rules.
The Data Provider decides which Policy applies to each Offer. nexyo supplies the templates. The lab has tested them with synthetic data.
Five Policy templates control what happens to data in the Data Space
-
Aggregated figures are open to all
All Participants may read tables, attendance figures, and other aggregates, as long as they contain no personal data.
-
Operational data stays in the consortium
Only authenticated members read match reports, venue inspections, and schedules, and they do not pass them on.
-
Personal data needs a purpose and a legal basis
Only authorized people read it, only for training analysis, medical care, or fan engagement with consent, and the system deletes wearables data after 90 days.
-
Commercial rights need a license
Anyone who uses broadcast rights or sponsorship inventory needs a signed contract, pays the agreed compensation, and passes nothing on without a sublicense.
-
Data of minors is strictly protected
Access requires verified parental consent and goes only to certified coaches and club doctors, with no commercial use and a log of every access.
The Provisioner sets up, the Issuer issues, the Participant shares
Three roles keep the Data Space running:
- Provisioner: It creates Participants and their Data Hub (nexyo fabric).
- Issuer: It issues Credentials, first the MembershipCredential. It proves membership in the Data Space. Later, a federation can join as a second Issuer.
- Participant: It offers data as Offers or uses the Offers of others. It decides on every approval itself.
Three questions about control over your data
Who sees my data?
Only Participants that meet your Policy and receive an Offer from you. You set the purpose, the group, and the duration. Every access appears in the Audit Trail.
Can I withdraw an Offer?
Yes. You remove the Offer from the Catalog or revoke an access. New requests then fail. Data that a Participant already received stays subject to the duties of the Policy, for example deletion periods.
What happens if someone breaks a rule?
The system blocks the request before any data flows and records the attempt in the Audit Trail. The Governance Authority can revoke the Credential of a Participant. The rulebook of the Data Space sets the consequences.