Re: [w3c/payment-method-basic-card] Don't redact phone number from billingAddress (#80)

> 2\. Phone not required for authorization but useful for risk assessment.  Risk assessments are increasingly moving towards machine learning algorithms, so more data including phone would be useful.

If someone wants to add "risk assessment" to the justifications for requesting more PII, then let's be explicit about that, so we can argue based directly on it.  So far, the two excuses I've heard for early sending of PII were tax calculation and shipping calculation.  For those purposes, phone number would not obviously be needed.


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/payment-method-basic-card/pull/80#issuecomment-505008452

Received on Monday, 24 June 2019 13:25:30 UTC