SOURCE CONTROL AND CONSENT
Connection, consent and downstream authority
A source connection is a request for limited access
BTG Bridge’s public role begins with source identification and verification that the participant is authorized to grant the proposed access. A connection needs a documented purpose, classes of information, allowed recipients and processing, time bounds and retention conditions. It must not assume that an employee can license an employer’s confidential information or that a user can grant a community’s collective rights.
Every downstream transfer needs its own review
Permission to read a research file or sensor feed does not authorize publication, resale, training an unrelated model or transfer to a market participant. The receiving organization must be identified; restrictions, cross-border transfer obligations and any separate use agreements need evaluation. Technical logging can preserve the event and supporting approvals without exposing the payload in a public listing.
Revocation and historical uses are different matters
A participant’s withdrawal may block new covered uses while permitted previous disclosures or statutory retention require a separate review. The system should show the state of the request and any lawful exceptions. A technical delete flag does not automatically erase every legal obligation or economic claim, and Bridge should never promise a completed deletion without evidence.