I certainly appreciate the issue with lack of control of sovereign issuers. Since the issuers can subvert any effort we can make here, I am happy to move forward with some assumptions about the security of the issuer listed and out-of-score but still definitely related to the main point of the group. So I guess we can have a short section about issuers that makes the point without putting any normative restrictions on the issuers. Peace ..tom On Mon, Nov 30, 2020 at 10:30 AM Jordaan, Loffie <LJordaan@aamva.org> wrote:

Not that this (i.e. issuing authorities selling PII) is not worthy of discussion, but I suggest not mixing it in with our mDL work. Issuing authorities already sell PII today, and I am of opinion that trying to leverage mDL rules to change something that is essentially unrelated to mDLs is outside the scope of this DG.

Thanks,

*Loffie Jordaan*

Business Solutions Architect

703.908.5864

*aamva.org <http://aamva.org>*

*From:* Dg-mdl <dg-mdl-bounces@kantarainitiative.org> * On Behalf Of *Tom Jones *Sent:* Friday, November 27, 2020 12:30 *To:* mdl Kantara <dg-mdl@kantarainitiative.org> *Subject:* [Dg-PImDL] It's not clear how we can talk about privacy when the sovereign issuer is the problem

or do we have the fortitude to write model laws for the states to implement?

https://www-dallasnews-com.cdn.ampproject.org/c/s/www.dallasnews.com/news/wa... <https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww-dallasnews-com.cdn.ampproject.org%2Fc%2Fs%2Fwww.dallasnews.com%2Fnews%2Fwatchdog%2F2020%2F11%2F26%2Fafter-27-million-drivers-license-records-are-stolen-texans-get-angry-with-the-seller-government%2F%3FoutputType%3Damp&data=04%7C01%7Cljordaan%40aamva.org%7Cb4e78f1637114cdd9bb208d892fa085d%7Cc4a5ff7af87c4d21a0d908a2ff3dbdc7%7C1%7C1%7C637420949861680033%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=Du3fkJN38AtFtV2A2jhFRQA%2F2kzKsEQsJ7H2tXeVXJE%3D&reserved=0>

Peace ..tom

[External Sender]