...

The legal definition and implementation around consent is reaching a stable point in the EU. That said, there is still some concern that implementing consent in the federation space is still problematic. Consent management will undoubtedly involve consent-related attributes and attribute sets in the consent process.  Consent needs to be 'designed in' either as in band or as a service but implemented in a standardized way so you get consistent UX.

...

• EU Data Protection
• ABC4Trust: https://abc4trust.eu/

Governance

A driver for the exploration of attribute management is the growing economy behind the mining and exchange of attribute information. We see here the overlap of financial reward and privacy regulation; overlaps such as this generally see the creation of some kind of governance model. That governance may be formal regulation, it may be accepted industry standards groups, or some other model. Different sectors of society and industry are looking at what governance is necessary in the world of Internet Identity and the attribute economy. Each group, however, has a fairly narrow view of how governance is required in their particular sector.

Efforts in this space:

• Federal PKI Bridge
• ABC4Trust: https://abc4trust.eu/

Recommendations

Attributes

...