12_A_IS: Secure storage

Statement (Single phrase or sentence)

Verifiers shall adopt appropriate measures to ensure the security of stored PII.

Description

If storage is required, Verifiers shall implement privacy by design and by default techniques (e.g., anonymization or psedonymization of data).

Scope (applies to)

• Part A: Verifiers
• Part B: Issuers
• Part C: Providers

Select the Primary Consideration^*

• CC (Consent and Choice)
• PL (Purpose legitimacy and specification)
• CL (Collection limitation)
• DM (Data minimization)
• UR (Use, retention, and disclosure limitation)
• AQ (Accuracy and quality)
• OT (Openness, transparency, and access)
• IA (Individual access & participation)
• AC (Accountability)
• IS (Information Security)
• PS (Privacy compliance)

Reference

12_A_IS

Select other relevant considerations

• CC (Consent and Choice)
• PL (Purpose legitimacy and specification)
• CL (Collection limitation)
• DM (Data minimization)
• UR (Use, retention, and disclosure limitation)
• AQ (Accuracy and quality)
• OT (Openness, transparency, and access)
• IA (Individual access & participation)
• AC (Accountability)
• IS (Information Security)
• PS (Privacy compliance)

Select impacted Identifiers

• Direct
• Indirect
• Unique

Related Requirements

Explanatory Notes (Text or Link)