hlr-43-embedded-disclosure-policies

To enforce embedded disclosure policies in an EUDI wallet, apply normative SHALL, SHOULD, and MAY requirements to evaluate whether a relying party is authorized before presenting an attestation.

EUDI wallet disclosure policies are rules that restrict attestation presentation to authorized relying parties or specific roots of trust, ensuring user control over data sharing.

Handle user consent by evaluating the disclosure policy during an attestation request and presenting the user with a clear decision to allow or deny the presentation.

An attestation should be revoked upon disclosure policy changes to maintain compliance, specifically when embedded rules regarding authorized relying parties or roots of trust are modified.

Yes, you can restrict attestation presentation by enforcing a specific root of trust policy within the EUDI wallet, ensuring attestations are only shared with trusted endpoints.

Authorised relying party policies restrict presentation to pre-approved requesters, while specific root of trust policies verify the technical trust chain of the requesting endpoint.