FinTechReview Prompt

Compliance Prompt for EU Privacy-Preserving Digital Identity Mapping

This **Arc** review prompt takes your European onboarding tracks and maps them against the privacy-preserving standards registered in the latest **EU citizens' initiative** on digital identity: voluntary use, no cross-service tracking, open cryptographic standards, and strict data minimization. Arc, the deepidv credential gateway, returns a data-collection map that flags every attribute you request but do not need, a zero-knowledge configuration that replaces raw age and residency data with wallet-issued proofs, a minimization plan that cuts stored PII to the legal floor, and a readiness rating against each initiative principle. Built for privacy and onboarding leads at fintechs serving EU users who want to get ahead of privacy-first identity rules without losing conversion.

How to use this prompt

1
Open Arc in the deepidv dashboard and paste the full prompt, or run it in Claude, ChatGPT, or Gemini if you are drafting the privacy design outside the platform.
2
Replace the INPUT section with your European onboarding tracks, every attribute each step collects and stores, your retention schedule, and the initiative principles you have reviewed.
3
Run the prompt and read the data-collection map first: every attribute is rated necessary, reducible, or removable against the purpose it serves.
4
Hand the zero-knowledge configuration to your onboarding engineer and route the minimization plan to your DPO; start with any attribute rated removable.
5
Re-run the prompt after each onboarding change and after each new EU privacy or eIDAS 2.0 publication so the design stays aligned before your next data-protection review.

The prompt

Arc, evaluate our European user onboarding tracks against the privacy-preserving standards registered in the latest EU citizens' initiative. Configure the gateway to support zero-knowledge age and residency verifications via decentralized wallet attributes while enforcing data minimization principles.

ROLE
You are Arc, the deepidv credential gateway. You map onboarding data flows against privacy standards and configure the wallet-proof ingestion that lets a platform verify attributes without hoarding the underlying documents.

CONTEXT
The European Commission has registered a citizens' initiative calling for voluntary digital identity, a ban on cross-service tracking, open cryptographic standards, and strict data minimization. Platforms that collect and store raw identity documents to confirm a single attribute, like being over 18, sit on the wrong side of this direction and carry needless data liability.

INPUT, the user will paste:
- European onboarding tracks and the attributes each step collects and stores
- The purpose and lawful basis mapped to each attribute
- The current retention schedule per attribute
- Which verifications could be satisfied by a wallet-issued proof (age, residency, legal name)
- The initiative principles the team has already reviewed

TASKS
1. Map every collected attribute to the purpose it serves and rate it necessary, reducible, or removable.
2. Configure zero-knowledge age and residency verification via decentralized wallet attributes, replacing raw-document collection where a proof suffices.
3. Produce a data minimization plan that cuts stored PII to the legal floor and sets a defensible retention period per remaining attribute.
4. Rate readiness against each initiative principle and name the gap that blocks a full pass.

OUTPUT FORMAT, return the following structured response:

1. DATA-COLLECTION MAP
- Each attribute with its purpose, lawful basis, and a necessary, reducible, or removable rating
- The attributes collected without a stated purpose, flagged

2. ZERO-KNOWLEDGE CONFIGURATION
- Each verification moved to a wallet-issued proof, with the attribute proven and the result passed to your system
- The raw-document collection each proof retires

3. DATA MINIMIZATION PLAN
- The PII removed, the PII retained with justification, and the retention period per remaining attribute
- The deletion actions for data no longer needed

4. PRINCIPLE READINESS RATING
- Per initiative principle: covered, partial, or gap, with the evidence or the blocking gap
- The fraud signal that replaces any raw data you stop collecting

Be specific and tie every rating to the purpose the attribute serves. Where the input does not state a purpose or lawful basis, flag the question instead of assuming one.

Test it in Claude or another LLM

This prompt is built for the Arc agent inside deepidv, where Arc ingests wallet-issued zero-knowledge proofs and enforces the configured minimization rules on live onboarding. You can dry-run the workflow in any general LLM first with a synthetic attribute inventory to see the map before wiring real data.

1
Paste the full prompt into Claude, ChatGPT, or Gemini, but replace the opening 'Arc,' with a role instruction such as 'Act as a privacy engineer mapping EU onboarding against a privacy-preserving digital identity standard.' Keep the four OUTPUT sections exactly as written.
2
Under the INPUT section, paste the synthetic sample block below so the model has an attribute inventory and retention schedule to evaluate.
3
Add one framing line: 'This is synthetic test data. Rate each attribute against the purpose it serves; where a purpose is not supplied, flag it as an open question instead of assuming a lawful basis.'
4
Check the output shape: a data-collection map with necessary, reducible, or removable calls, a zero-knowledge configuration, a minimization plan, and a per-principle readiness rating. If a section assumes a lawful basis the input does not state, tighten the role line and re-run.
5
Once the output shape is right, run it live in the deepidv dashboard where Arc ingests wallet proofs and enforces the minimization rules.

Synthetic sample data to paste alongside the prompt

Fake test data, safe to share with any LLM. Swap in your own once the output looks right.

EU ONBOARDING TRACKS (synthetic, fake):
- Retail account: collects full name, DOB, address, ID document image, selfie
- Age-gated feature: collects DOB and ID document image to confirm 18+
RETENTION (fake): ID images stored 5 years; selfie stored 5 years; no documented purpose for age-feature ID image
PURPOSE MAP (fake): CIP identity evidence ref EU-TEST-01; age gate ref EU-TEST-02 (purpose: confirm 18+ only)
INITIATIVE PRINCIPLES REVIEWED (fake): voluntary use, no cross-service tracking, open standards, data minimization

Pairs with on deepidv

Sources & further reading

FAQ

What does the registered EU citizens' initiative call for?

It calls for digital identity systems that stay voluntary and non-discriminatory, a legal ban on cross-service tracking, open cryptographic standards, and strict data minimization. In practice that means verifying attributes like age or residency without storing the underlying documents. This prompt maps your onboarding to those principles.

How do zero-knowledge proofs support data minimization?

A zero-knowledge proof lets your platform confirm a user meets a requirement, such as being over 18 or resident in a member state, without receiving their date of birth or address. Arc ingests the wallet-issued proof and passes only the pass or fail result to your system. Nothing sensitive is stored.

Does minimizing collected data weaken fraud defense?

No. Arc pairs privacy-preserving attribute proofs with client-edge device telemetry, so fraud signals come from device provenance rather than hoarded PII. You reduce data liability and keep interception.

Can I use this prompt outside the deepidv dashboard?

Yes. It works in Claude, ChatGPT, or Gemini to produce the data-collection map, zero-knowledge configuration, and minimization plan. Live wallet-proof ingestion only works when it runs inside the deepidv dashboard through Arc.

Run it with live verification data

These prompts work in any LLM. Inside the deepidv dashboard, Luna, Arbiter, and Arc run them against your real sessions, screening lists, and audit trails.

Book a Demo