...
The following from the report should be considered in our work I believe.
https://epic.org/documents/comments-of-epic-aclu-cdt-and-eff-to-the-tsa-on-interim-waiver-process-rulemaking-for-mobile-drivers-licenses/
The current standards govern how an mDL should transmit information from the phone to the verifying party (e.g. the TSA agent in the airport), and they govern how an mDL reader should verify the validity of the license.11 But the standards do not govern provisioning (how states install an mDL on a phone). They do not provide sufficient protections for data storage on the phone, sufficient guidance for mobile wallet design or user experience, or accountable constraints that would limit invasive or unwarranted requests from abusive mDL verifiers. Standards for the issuing authority to load mDLs onto a phone are in development as the ISO/IEC 23220 series.12 Standards for digital wallet privacy, security, and consent management are even less developed.
Measurement Spec Sheets on the Proposed Rule: ONC is now accepting public comments by June 20, 2023. What data will be collected: Individual Access Spec Sheet [PDF – 139 KB]
Recorded Thursday, June 1, 2023 at 1pm ET Video Recording
Impacts for Patients and Caregivers Information Session Information Slides PDF [ 3.4 MB]
Measurement Spec Sheets on the Proposed Rule
ONC is now accepting public comments by June 20, 2023. What data will be collected: Individual Access Spec Sheet [PDF – 139 KB]
Recorded Thursday, June 1, 2023 at 1pm ET Video Recording
Impacts for Patients and Caregivers Information Session Information Slides PDF [ 3.4 MB]