Return to User Scenario: Identity

Nancy is a USA citizen and plans a month-long European vacation with 4 major legs all within the Schengen Agreement Zone¹⁾.

Nancy needs to identify herself during the trip and potentially expose a lot of Personal Identifiable Information (PII) as well as financial information (i.e., Credit Cards) to numerous people in numerous countries. In addition to the exposure of her PII to the corporations, businesses, and individuals that she has direct business with, she also has to worry about her PII being processed by partner organizations that work with businesses she does direct business with. As a result of poor Data Residency requirements, her PII might be processed and stored across the world. See 4.3.4.1 Confidentiality.

1. A river cruise along the Rhine River visiting some major cities, villages, and historic sites
2. A Paris getaway with cultural, shopping, eating, and clubbing activities
3. A mountain resort adventure with hiking, skydiving, paddleboarding, water skiing, and kayaking
4. A casino experience with shows, clubbing, and gambling
5. Nancy does all the bookings in advance for:

   1. Airplane
   2. Cruise ships
   3. Trains
   4. Hotel In Paris

      1. Museum visits
      2. Historical Sights
      3. Restaurants
      4. Discotheque
   5. Resort with some activities such as a

      1. Hiking
      2. Sky Diving
      3. Paddle Boarding
      4. Water Skiing
      5. Kayaking
   6. Casino

      1. Discotheque
      2. Cabaret shows
   7. Long Term Parking