Under decentralized identity (DID) and self-sovereign identity (SSI) architectures, users' identity data is held and controlled by the users themselves through blockchain or distributed ledger technology, with only the minimum necessary information disclosed when needed.