[VC Security & Trust Document] Proof of consent?

[Macke]

Imported from AB/Connect bitbucket: https://bitbucket.org/openid/connect/issues/2015

Original Reporter: danielfett

Re storing end-user data

Giuseppe De Marco

2023-03-06

they should store the entire presentation to prove the willing of their presenter … otherwise multiple RP may “share” multiple VC between them without taking into account the requirement of having a proof of consensus of their legitimate owners (users)

national and comunitary data processing laws (such as the GDPR and EPDB) require the user's consent to be managed

[Macke]

Imported from AB/Connect bitbucket - Original Commenter: danielfett

Also affects this sentence: “Verifiers SHOULD NOT store presentations after verification. "