Selective disclosure: data protection as architecture
Last updated: · Leutrim Miftaraj
Selective disclosure means: for every action the agent discloses only the claims that action needs — not the whole identity. SD-JWT makes this cryptographically possible; the E-ID makes it the standard; the mandate makes it mandatory.
Mechanics
In an SD-JWT, claims are hashed individually; the presentation reveals selectively. An age check proves «over 18» without the date of birth, a mandate check proves authority without a full name — display_name_hash instead of a name in the schema.
GDPR/revFADP effect
Data minimisation (Arts. 5/25 GDPR) turns from a principle into a property: what was never transmitted cannot leak, need not be deleted and need not be disclosed on request. Privacy by design, literally.
Trust dividend
Principals delegate more when delegation does not mean surveillance: the verifier learns the authority, not the life of the person behind it.
Key takeaway
The best data-protection promise is the data point that was never sent.
Try it yourself
Issue your first agent mandate and check your first decision with its receipt — free, in a few minutes.