Statement (Single phrase or sentence)

Wallet [sic] Providers (Holder Agent) must communicate to

the Holder any attestations about data use associated with a verifier in the context of the transaction.

Description

When a Holder Agent receives attestations from a verifier those attestations must be made available to the Holder. To inform users of a verifiers use-case and retention policy, along with the data requested - the provider should communicate to users how the verifier has claimed they will use the data and how they expect to retain it.

Scope (applies to)

•  Part A: Verifiers
•  Part B: Issuers
•  Part C: Providers

Select the Primary Consideration

•  CC (Consent and Choice)

•  PL (Purpose legitimacy and specification)

•  CL (Collection limitation)

•  DM (Data minimization)

•  UR (Use, retention, and disclosure limitation)

•  AQ (Accuracy and quality)

•  OT (Openness, transparency, and access)

•  IA (Individual access & participation)

•  AC (Accountability)

•  IS (Information Security)

•  PS (Privacy compliance)

Reference

05_P_PL

Other considerations

•  CC (Consent and Choice)

•  PL (Purpose legitimacy and specification)

•  CL (Collection limitation)

•  DM (Data minimization)

•  UR (Use, retention, and disclosure limitation)

•  AQ (Accuracy and quality)

•  OT (Openness, transparency, and access)

•  IA (Individual access & participation)

•  AC (Accountability)

•  IS (Information Security)

•  PS (Privacy compliance)

Related Requirements

Explanatory Notes (Text or Link)

Add notes about context and cognitive overload vis-a-vis UX