Skip to content

Mobile-ID Digital TrustISO/IEC 27001:2022 · SIS351224I008Published certification scope

View evidence

TRUST

Privacy

Apply data minimization, purpose-aware access, controlled disclosure and retention boundaries across care and operational workflows.

Owner: Privacy & Service Governance
Scope: Personal and health data processed by Trusted Care
Status: Published control statement

01 / CONTROL

Control model

01

Minimization

Collect and expose only data needed for the configured purpose and workflow.

02

Purpose

Access and onward disclosure consider role, relationship, workspace and intended use.

03

Retention

Retention/deletion behavior follows configured policy, legal hold and service obligations.

04

Rights

Requests are routed through identity verification, scope review and accountable fulfilment.

02 / BOUNDARY

Responsibility boundary

The customer remains responsible for lawful basis, notices, configured purposes and source-system obligations within its deployment.

03 / ESCALATION

Evidence and escalation

Route privacy concerns or data-rights requests through Data Subject Rights so identity, controller role, scope and fulfilment can be handled accountably.