[VC Security & Trust Document] Proof of consent?

[Daniel Fett]

Re storing end-user data

Giuseppe De Marco

2023-03-06

they should store the entire presentation to prove the willing of their presenter … otherwise multiple RP may “share” multiple VC between them without taking into account the requirement of having a proof of consensus of their legitimate owners (users)

national and comunitary data processing laws (such as the GDPR and EPDB) require the user's consent to be managed

[Daniel Fett]

Also affects this sentence: “Verifiers SHOULD NOT store presentations after verification."

[Mark Haine]

Moving to new Repo under Digital Credentials Protocols WG