The credential response should be able to include a 'consent declaration'

[Denisthemalice]

About ## 6. Credential Response

The credential response should allow the wallet to include a 'consent declaration' detailing the types of attributes that the holder
(i.e., the natural person) has agreed to disclose to the verifier.

The 'consent declaration' must not contain any personal data, so as to allow an audit without infringing on privacy.

[Nathall7]

Credential response
The consent declaration should also include the duration of storage for the presented credentials, for GDPR compliancy