doing authentication or just gathering their ID data

So i did read last week when i’s going through the explanatory notes that sites would have to explicitly state and gain permission for the specific use of the data proposed.

I didn’t have time to read into that bit much, but it seemed like it might be setting a higher bar than the ‘check and forget’ boxes around now. So i’m cautiously hopeful this part of the amendment could be quietly good.