OSAS reference material
The material published alongside the standard.
- Version
- 1.0
- Status
- Draft
The standard as data
- OSAS 1.0 as JSON
- Every principle, domain, criterion, and glossary term, each with the address of its normative text.
- The JSON Schema for OSAS 1.0
- The structure the JSON follows, for a tool that validates against it.
Understanding each criterion
One page for each of the 67 criteria: what it is for, what an assessor counts as meeting it, and the provision it reflects. None of it is normative.
A. Finding and Making a Request
- A1. A Findable Privacy Notice
- A2. A Signposted Route
- A3. No Account Required
- A4. No Mandated Route
- A5. A Request in Any Wording
- A6. A Verbal Request
- A7. A Named Contact
- A8. A Choice of Routes
- A9. A Proportionate Request Form
- A10. A Request Made on Someone's Behalf
- A11. The Right Explained
- A12. No Discouragement
B. Acknowledgement and Timeline
- B1. A Response Within the Time Limit
- B2. An Extension Notified in Time
- B3. An Extension Explained
- B4. Acknowledgement of Receipt
- B5. A Stated Response Date
C. Identity Verification
- C1. No Verification on an Identified Route
- C2. Proportionate Verification
- C3. Verification Explained
- C4. The Effect on the Time Limit Stated
- C5. Verification Data Not Retained
D. Completeness and Scope
- D1. Confirmation of Processing
- D2. A Copy of the Data
- D3. The Systems Searched
- D4. The Period Searched
- D5. Whether the Search Was Limited
- D6. A Limit on the Search Explained
- D7. A Request Not Narrowed Without Agreement
- D8. Data Held on the Organisation's Behalf
- D9. Unstructured Records Included
E. Supplementary Information
- E1. The Purposes
- E2. The Categories of Data
- E3. The Recipients
- E4. The Retention Period
- E5. The Person's Other Rights
- E6. The Right to Complain
- E7. The Source of the Data
- E8. Automated Decision-Making
- E9. The Logic Explained
- E10. The Consequences Explained
- E11. Safeguards for Transfers Abroad
- E12. Recipients Named
- E13. Written for the Person
- E14. A Specific Retention Period
F. Intelligibility
- F1. Codes and Terms Explained
- F2. What Each Part Is
- F3. Organised to Navigate
- F4. Clear to a Child
- F5. A Guide to the Response
- F6. Plain Language
G. Format and Delivery
- G1. Provided Free
- G2. Electronic by Default
- G3. Delivered Securely
- G4. A Usable Format
- G5. No Barrier to Collection
- G6. An Accessible Format on Request
- G7. Accessible by Default
H. Redaction and Exemptions
- H1. Refusal Explained
- H2. How to Challenge a Refusal
- H3. Redaction Shown
- H4. The Ground Stated
- H5. Redaction Limited to What Is Withheld
- H6. A Record Withheld in Full Explained
- H7. A Charge or Rejection Justified
- H8. How to Complain to the Organisation
- H9. The Reason Explained
See also
- The standard
- Every criterion in full, with the glossary.
- The criteria
- Searchable, and grouped by domain or by level.
- Conformance
- What a response meets to reach a level, and what a claim states.
- SARA
- How an assessor scores a response against the criteria.
Not published yet
The reference response pack, the techniques document, and the calibration set are still being written.