Statement: Providers must communicate to users any attestations associated with a verifier
Review Meetings:
Status:
Status | ||||||
---|---|---|---|---|---|---|
|
Optional comments about the requirement may be entered here
...
|
Inform users of verifier policies | |
---|---|
Statement (Single phrase or sentence) | Wallet [sic] Providers (Holder Agent) must communicate to |
the Holder any attestations about data use associated with a verifier in the context of the transaction. | |
Description | When a Holder Agent receives attestations from a verifier those attestations must be made available to the Holder. To inform users of a verifiers use-case and retention policy, along with the data requested - the provider should communicate to users how the verifier has claimed they will use the data and how they expect to retain it. |
Scope (applies to) |
|
Select the Primary Consideration |
|
|
|
|
|
|
|
|
|
|
|
- Direct
- Indirect
- Unique
Reference
Privacy Principles
For descriptions see ISO/IEC 29100
PL
Purpose legitimacy and specification
CL
Collection limitation
DM
Data minimization
UR
Reference | 05_P_PL |
Other considerations |
|
AQ
|
OT
|
IA
|
AC
Accountability
IS
Information Security
PS
| |
Related Requirements | |
Explanatory Notes (Text or Link) | Add notes about context and cognitive overload vis-a-vis UX |
Page Tasks
- John Wunderlich to update status and clean up text