Minimisation · interoperability · anti-correlation
Sector-specific identifiers
Different services do not need to know the same universal identifier to recognise the same person when that is not legally necessary.
In summary
The essentials
Art. 17 prioritises sector-specific identifiers, attribute proofs and minimum disclosure. Interoperability must exist without authorising unrestricted centralisation of personal data.
How it works
How to separate contexts without losing interoperability
Context AA service receives only the identifier or attribute needed for its function.
→Minimum proofWhen it is enough to prove “over 18”, the system does not need to expose the entire Civil Registry.
→Controlled interoperabilityRelationships between sectors exist under rules and defined purposes, not through automatic general correlation.
For the person
Practical consequence
When using different Sistema Candeia modules, the constitutional expectation is that they do not assemble a universal profile merely because they share infrastructure. Linkage across contexts must be minimised, authorised and auditable.
Limits
Safeguards and conditions
It does not prevent legitimate interoperability.
It does not authorise duplicating Root Identity to obtain additional rights.
It does not make broad correlation acceptable merely for technical convenience.
Constitutional basis
Read in the full text
See the related provisions in the Proposed Constitution.
Continue exploring