Section: X.8 Protection of data and analytics exchange in roaming case X.8.1 General
Content: The protection of data and analytics exchange in roaming case including authorization and anonymization of data/analytics: - Authorization at data and analytics level is enforced by the roaming entry NWDAF producer. The parameters used by NWDAF service consumer to request/subscribe to the services provided by NWDAF producer are defined in TS 23.288[ Architecture enhancements for 5G System (5GS) to support network data analytics services ]  [105], clause 6.1.5. Accordingly, the operator authorization policies can be configured locally in the NWDAF producer. Also, when the NWDAF in one PLMN requests an access token from the NRF in the peer PLMN, the access token request and the access token claims may contain the Analytics ID. - The roaming entry NWDAF producer is responsible to control the amount of exposed data/analytics and to abstract or hide internal network aspects in the exposed data/analytics. The corresponding mechanisms used to restrict the data/analytics and/or anonymization are subject to the implementation.