A GDPR principle (Article 5(1)(c)) requiring that personal data collected must be adequate, relevant, and limited to what is necessary.
Data Minimization is a core GDPR principle requiring personal data to be limited to what is necessary for the processing purpose.
In an age-only request, Example Tickets asks whether a person is 18 or older. Passtru processes the evidence; the service receives an age result without name, date of birth or document. Other requests may require different fields.
An identity verification approach where a trusted provider issues a cryptographic attestation about a user's attributes without transferring the underlying personal data.
A cryptographic technique allowing users to share specific attributes from a credential without revealing all information it contains.
