OSAS Conformance
What it takes for a response to meet OSAS at a level, and what a conformance claim states.
- Status
- Draft
What conformance means
A response conforms to OSAS at a level when it meets every criterion that the level requires. Conformance describes a single response to a single request, or a process that produces such responses.
The three levels
OSAS has three levels, and they are cumulative: each includes every criterion below it.
- Level 1 holds the criteria whose absence defeats the right of access.
- Level 2 adds the criteria whose absence degrades the response, in its completeness, verifiability, or usability.
- Level 3 adds the criteria that go beyond the lower levels to serve the person best.
The conformance requirements
For a response to conform to OSAS at a level, all of the following are true.
- The response meets every criterion at the claimed level and at each level below it.
- Conformance is claimed for the response as a whole, not for a part of it.
- A criterion whose condition does not arise for the response is met. Where the organisation makes no solely automated decisions, for example, the criteria about automated decision-making are met.
- A level is met in full or not claimed. A response that meets most Level 2 criteria but not all conforms at Level 1, not Level 2.
Making a conformance claim
A conformance claim is voluntary. When a claim is made, it states, at a minimum:
- The standard and version: OSAS 1.0.
- The level reached: 1, 2, or 3.
- The scope: which response or process it covers.
- The date of the assessment.
- Who carried it out.
A claim may also list the criteria met, or link to the assessment that supports it. A claim is a statement by whoever makes it: OSAS does not certify or register claims.
Scoring is not conformance
The Subject Access Response Assessment grades each criterion 2, 1, 0, or not applicable, and reports the figures. It measures how much of the standard a response meets, and where it falls short. Conformance is the separate, binary question of whether a response fully meets a level.
- A response can score well and still not conform, if it misses one criterion at the level.
- A conformance claim names a level; an assessment names numbers.
Use the assessment to see where a response stands and what to fix; use conformance to state the level it reaches. For the criteria themselves, see the full standard.