GDPR

As Lead Editor of CEN/TS 18297, I reviewed the three draft Implementing Acts against the EUDI Wallet regulatory framework and submitted 17 comments to the European Commission consultation. The three critical findings share a common root: the regulations define what the wallet must do, but do not ensure the information needed to do it is available at the point of disclosure.

ISO/IEC 27560 defines how organisations should create, store, and manage consent records. As lead editor of this standard — now freely available — I explain what it covers, why it matters for GDPR compliance and EUDI wallet ecosystems, and how to get started with implementation.