Statement (Single phrase or sentence)

Wallet [sic] Providers (Holder Agent) must communicate to the Holder any attestations about data use associated with a verifier in the context of the transaction.

Description

When a Holder Agent receives attestations from a verifier those attestations must be made available to the Holder. To inform users of a verifiers use-case and retention policy, along with the data requested - the provider should communicate to users how the verifier has claimed they will use the data and how they expect to retain it.

Scope (applies to)

•  Part A: Verifiers
•  Part B: Issuers
•  Part C: Providers

Select the Primary Consideration

•  CC (Consent and Choice)
•  PL (Purpose legitimacy and specification)
•  CL (Collection limitation)
•  DM (Data minimization)
•  UR (Use, retention, and disclosure limitation)
•  AQ (Accuracy and quality)
•  OT (Openness, transparency, and access)
•  IA (Individual access & participation)
•  AC (Accountability)
•  IS (Information Security)
•  PS (Privacy compliance)

Reference

505_CP_PL

Other considerations

•  CC (Consent and Choice)
•  PL (Purpose legitimacy and specification)
•  CL (Collection limitation)
•  DM (Data minimization)
•  UR (Use, retention, and disclosure limitation)
•  AQ (Accuracy and quality)
•  OT (Openness, transparency, and access)
•  IA (Individual access & participation)
•  AC (Accountability)
•  IS (Information Security)
•  PS (Privacy compliance)

Select the Identifiers

•  Direct
•  Indirect
•  Unique

Related Requirements

Explanatory Notes (Text or Link)

Add notes about context and cognitive overload vis-a-vis UX