peppelinux / draft-demarco-oauth-status-assertions

OAuth 2.0 Status Assertions for Digital Credentials
Other
4 stars 4 forks source link

eIDAS II Regulation requirements from Art. 5a(16) #31

Open peppelinux opened 3 months ago

peppelinux commented 3 months ago

Art. 5a(16). The technical framework of the European Digital Identity Wallet shall:

(a) not allow providers of electronic attestations of attributes or any other party, after the issuance of the attestation of attributes, to obtain data that allows transactions or user behaviour to be tracked, linked or correlated, or knowledge of transactions or user behaviour to beotherwise obtained, unless explicitly authorised by the user;

At the current stage, the status attestation are completely in line with this.