Consent reset, if data is modified by the user?

[rahul101001000]

Is there a concept of consent reset if a user changes updates an attribute?

e.g. user changes email address, is there an option to specify whether consent for email will need to be given again? (Options could be one time only, every change). Thanks!

@pramodkvarma

[pramodkvarma]

If the user has option to change visibility (based on the attribute config called "user-controlled" as @coolbung and @dileepbapat suggested), then she/he should be able to change it any time. If user updates the attribute, UI can show that checkbox/toggle button again as a best practice.

[rahul101001000]

That discussion deals with changing of attribute visibility between internal, private with consent, and public.

This one refers to an attribute that continues to be private but the value of which is changed by the user. Let's say I update my email from [email protected] to [email protected]. I would like everyone who I've granted consent to access this attribute in the past, to ask for access again.

Essentially this would be a new attribute config for consent reset.

IIRC Trust Id framework has this part of their spec. See table 3 in this attribute profile doc

[pramodkvarma]

Thanks for the pointer. Will check out. In general, it is not a good idea to push to everyone in the past who had accessed the profile. Next time user interacts with service provider, they can do a refresh.

[rahul101001000]

Yes makes sense. If the user wants to explicitly change consent given, they can always revoke access to a certain information user.

…

On Wed, 29 Sep 2021, 08:41 Pramod Varma, ***@***.***> wrote: Thanks for the pointer. Will check out. In general, it is not a good idea to push to everyone in the past who had accessed the profile. Next time user interacts with service provider, they can do a refresh. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#66 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/APGX7MPXS6HS2C6OFLYBN2LUEJ7U7ANCNFSM5E5JH3UQ> .