These are commonly approved good practices for Home Organisations based on the data protection directive.

A proper attribute release module installed to the Identity Provider server may help a Home Organisation to implement this good practice. See Notes on Implementation of INFORM/CONSENT GUI Interfaces for details.


Home Organisations may consider taking the following steps to reduce their risks

Deferred until Phase 2 of the Code of Conduct

Note: Introduction to Code of Conduct proposes to defer support to optional extra Attributes to Phase 2.