Non-disclosure of the age

What the clause says

Where the decision only needs an over-age or under-age result, the system should not disclose the exact age. The eligibility result is enough.

What it supplies to a comparison

The comparison should test the delivered attribute form against the decision's need. Over-delivery is a privacy finding and a data minimisation finding.

Evidence to keep

• The decision rule and the attribute form it actually needs.
• The delivered payload, compared field by field.

What the evidence looks like

For 7.1.2, the first artefact is The decision rule and the attribute form it actually needs.. The second is The delivered payload, compared field by field.. If 7.1.2 has no first artefact, the practice is unproven at 7.1.2, and the report should record the absence rather than infer the practice from a policy.

Questions for the provider

1. Does the decision need the exact age, or only the threshold result?
2. Who downstream can see the exact age?

How it connects to the draft

Non-disclosure of the age belongs to 7 privacy objectives, and it gives the analysis one fixed point: The comparison should test the delivered attribute form against the decision's need. Over-delivery is a privacy finding and a data minimisation findin. A comparison that cannot place a result against 7.1.2 is measuring something the framework has not defined, and the report should say so.

In the register, 7.1.2 is read beside the unit that tests it, and where it sets an objective rather than a number, that unit turns the objective into a question and an evidence artefact.