FAPI1: [ISO/IEC 25791-2 Review Comments] Add PII and definition to clause 4

[bitbucket-import-issues]

Originally submitted by Hodari McClain (Hodari McClain) on 2025-10-22

• Type: Editorial
• Subclause(s): 5.2.2.1
• Comments: The abbreviation “PII” seems to be first used here in this document “6. should not return sensitive PII in the ID Token in the authorization response, but if it needs to, then it should encrypt the ID Token”
• Proposed Change: Either rephrase “PII” to “Personally Identifiable Information (PII)” or “Personally Identifiable Information”.
• WG Accept / Reject: Partially accepted.  Add PII to clause 4.

‌

---

Bitbucket status: resolved

Bitbucket origin: issue 803

[bitbucket-import-issues]

Originally submitted by Hodari McClain (Hodari McClain) on 2025-10-28

removing origin country

[bitbucket-import-issues]

Originally submitted by Nat (Nat Sakimura) on 2025-10-29

It is already fixed errata 1 drafts by adding PII to the abbreviated terms. PII itself is defined in ISO/IEC 29100, which is included in clause 3 by reference.