4.8 Policy-Governed Sharing Without Centralised Data Routing

Go To Top

The Logical Architecture supports policy-governed information sharing without requiring all protected information to pass through a single central policy server, release server, or gateway.

Policy-governed sharing is represented as a distributed logical capability. Logical Nodes may enforce policy constraints near protected actions, request policy decisions from replicated decision capabilities, obtain attributes from policy information sources, receive policy baselines from policy administration capabilities, and record obligations, release actions, and Evidence through audit and provenance relationships.

This principle supports data sovereignty and data residency. Full transaction detail may remain within an authorised local, institutional, national, or other residency domain, while authorised metadata, aggregate summaries, derived indicators, redacted views, masked views, exception views, or recipient-specific release products may move across boundaries under policy control.

The Logical Architecture defines these responsibilities at the PIM level. Later implementation profiles may realise them using DDS topics, APIs, gateways, policy engines, caches, services, or other mechanisms, but those mechanisms do not define the logical architecture.