arf-topic-d-embedded-disclosure-policies

Implement embedded disclosure policies by defining policy formats and enforcement mechanisms that control attribute-level attestation disclosure to relying parties according to EUDI Wallet specifications. This ensures only authorized parties receive specific attestations.

The Implementing Regulation (EU) 2024/2979 requires digital identity wallets to enforce policies for policy distribution, intermediary authorization, and attribute disclosure control. Compliance ensures attestations are only shared with properly authenticated and authorized relying parties.

Attribute-level disclosure control works by enforcing embedded policies that verify relying party authentication and specific criteria before releasing individual attestation attributes. This prevents unauthorized relying parties from accessing unnecessary user data during service access.

Yes, you can restrict attestation disclosure to authorized relying parties only by implementing embedded policies that require specific certificates or attributes for authentication. The wallet verifies these credentials before disclosing any user attestations.

The best way to enforce intermediary authorization is by applying embedded disclosure policies that define distribution rules and enforcement mechanisms aligned with ARF updates. This ensures intermediaries are properly authorized before processing attestations.

You need embedded disclosure policies when a user presents a digital ID to access a service and the wallet must verify the relying party's authorization. Policies ensure only certified parties receive necessary attestations and the user is informed about the disclosure.