1.0 Problem Statement

Return to User Scenario: Identity

Nancy is a USA citizen and plans a month-long European vacation with 4 major legs all within the Schengen Agreement Zone1) Schengen Agreement, allows passport-free travel between these 26 countries: Austria, Belgium, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Italy, Latvia, Liechtenstein, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Slovak Republic, Slovenia, Spain, Sweden, and Switzerland. There are three islands that are also part of the Schengen Zone, even though their borders are outside of the continent: The Azores, Madeira, and the Canary Islands. .

Nancy needs to identify herself during the trip and potentially expose a lot of Personal Identifiable Information (PII) as well as financial information (i.e., Credit Cards) to numerous people in numerous countries. In addition to the exposure of her PII to the corporations, businesses, and individuals that she has direct business with, she also has to worry about her PII being processed by partner organizations that work with businesses she does direct business with. As a result of poor Data Residency requirements, her PII might be processed and stored across the world. ( See Confidentiality

A river cruise along the Rhine River visiting some major cities, villages, and historic sitesA Paris getaway with cultural, shopping, eating, and clubbing activitiesA mountain resort adventure with hiking, skydiving, paddleboarding, water skiing, and kayakingA casino experience with shows, clubbing, and gamblingNancy does all the bookings in advance for:AirplaneCruise shipsTrainsHotel In ParisMuseum visitsHistorical SightsRestaurantsDiscothequeResort with some activities such as a HikingSky DivingPaddle BoardingWater SkiingKayakingCasinoDiscothequeCabaret showsLong Term Parking