“Verifiable Digital Credentials - Best Practices for Organizations Requesting and Using Identity Data” aims to set a high bar for security, privacy, usability, and inclusivity associated with the use of VDCs, by:
VDCs have the potential to improve security, privacy, usability, and inclusivity for individuals and businesses if they are designed, deployed, and used responsibly. However, the introduction of VDCs — specifically government-issued ones — also brings the possibility that they could erode security, privacy, and civil liberties.
A wide variety of stakeholders including digital wallet providers, identity issuers, privacy and civil liberties advocates, policymakers, and online service providers have all been clear that a world where people are expected to present their identity online everyplace they go would be a bad one; we have found there is strong consensus that some rules of the road are needed.
The new Best Practices are initially aimed at these stakeholders and others that may ask consumers to share validated identity data from their VDCs. It is also aimed at other organizations such as vendors that play a role in verifying and validating identity for online service providers using government-issued VDCs.
Organizations and companies can use the form below to submit comments and propose changes to the Best Practices.
