Agent WranglersACC-81Required EU law
Keep identity document scans apart and delete them after the check
Store scans of passports, ID cards and driving licences in their own private bucket, with its own key, readable by one role. Make no copies of them. Delete each scan within 24 hours of the check, unless a law you are under requires a copy.
Region
European Union (EU). The duty comes from the law there. The rule applies only when the project serves people there, and its Applies when also holds.
How to do it
A leaked ID scan lets anyone open accounts in that person's name, and nobody can change a passport like a password. GDPR Article 5 limits data to what the purpose needs and keeps it no longer. Once a check has passed, the result, the date and the document type are often enough. Mark this upload kind in Define each kind of upload once, so the image pipeline, the CDN and the trash bin never touch it. Encrypt the bucket with its own key, as Encrypt the most sensitive fields does for columns. Where a law requires a copy, such as anti-money-laundering rules, keep it for that period only and record it in the retention schedule.
How to check
Upload a test ID scan on staging and pass the check. Within 24 hours the object is gone from the bucket, and no thumbnail, trash or CDN copy of it exists. A read of the bucket with the app's normal role is refused.
Sources
Related rules
- MED-1 Define each kind of upload once in Files and media
- APS-58 Encrypt the most sensitive fields in Application security
- CMP-11 Keep one retention schedule in Compliance and governance
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/accounts/bank-and-government-id/identity-documents">Agent Wranglers accounts and identity playbook</a>. In code you write, add a comment next to it with the same link.