3 ms·
> That invariably means storing and verifying your govt issued ID. I get the verifying part, but why is storing after the verification needed?
by Aardwolf 3y ago
> That invariably means storing and verifying your govt issued ID.
I get the verifying part, but why is storing after the verification needed?
- toomuchtodo 3y agoRecord retention schedule for compliance. Auditors and regulators will come ask for it (or rather, a sampling demonstrating you are retaining the records). (this is a component of my work at a fintech)
- gopher_space 3y agoAny reason to not store a hash or something? Both you and the govt should have matching info on a person.
- toomuchtodo 3y agoBecause that is not the retention requirement unfortunately. I’d love for the US gov to allow identity proofing with Login.gov so we get a Boolean or tokenized response and that’d be sufficient (with the record of that response being our obligation to retain), we’re just not there yet.
- gopher_space 3y agoThat'd be great for everyone. A citizen would be able to view and revoke tokens.