This is an old revision of the document!
There are conflicting interests at work in the Identity area: the need for information about individuals versus the need for privacy for the individuals. The burden of providing identity for individuals has largely fallen on governments and government agencies for the most part, however, recently, corporations have started to offer identity through the use of Single Sign-On (SSO) and Open Standard Authorization ( OAuth ) on web sites: The following are some of the applicable restrictions that need to be considered:
Also see 4.3.4.1 Confidentiality, and Personal Identifiable Information (PII).