...

CoC is used in the eduGAIN interfederation to make services available to users of European higher education institutions. The CoC makes it possible to automatically release mostly harmless attributes to Service Providers which fulfill the EU Data Protection Directive. The expected IdP behaviour is to release by the service required release the Service Provider required subset of the attributes eptid, eppn, email, displayName, scoped affiliation and schacHomeOrganization. The required subset of attributes for a specific service is defined in the mandatory Service Provider Privacy Policy.

Process for applying for tagging a service with entity category GÉANT Dataprotection Code of Conduct

...