Topic H: Transaction logs kept by the Wallet

[phin10]

Welcome to the discussion on the Relying Party registration, part of the ongoing development of the Architecture and Reference Framework (ARF) for the European Digital Identity (EUDI) Wallet.

This discussion is based on the document.

This topic is to gather High level Requirements (HLR) for the transaction logs kept by the Wallet. Key trade-offs need consideration, including balancing the availability of logs that enable users to request data deletion from a Relying Party (RP) against the risk of that data potentially being exposed, particularly to the Wallet Provider. Similarly, there is a trade-off between ensuring data availability if a user changes devices and mitigating the associated risks of data exposure.

Items discussed in the paper:

• it is justified and necessary that Wallet Units logs more data than literally listed in the legal acts?
• what is currently as HLR in the ARF, do there HLR cover the need?
• are there any situations or use cases that may impose or require refraining from logging some specific events?

This discussion is part of a structured process to refine and complete the ARF, with your input playing a vital role. We invite you to share your comments, insights, and suggestions here. Your contributions will be carefully reviewed and considered as we work towards the next version of the ARF, which will incorporate updates on this topic.

Thank you for participating in this important conversation.

[kmandalas]

@phin10 Interesting topic. Could you please check the document link, I think needs update.

[phin10]

Thanks!

Updated

[AEPDmbeltran]

On behalf of the Spanish Data Protection Authority (AEPD)

The attached document contains our comments on this topic.

topicH AEPD response.pdf

Thank you very much for this opportunity to contribute to this important discussion.

[tmielnicki]

On behalf of the Spanish Data Protection Authority (AEPD)

The attached document contains our comments on this topic.

topicH AEPD response.pdf

Thank you very much for this opportunity to contribute to this important discussion.

Thank you for your document, we are analysing it and will provide the response once ready.