Duty of loyalty.

The department, a digital wallet provider, a verifier, a relying party, and a digital guardian shall refrain from practices or activities related to the processing of an individual's identity attributes from a digital identity that: (1) conflict with the best interests of an individual; (2) take advantage of or otherwise exploit an individual; (3) result in a disproportionate risk to an individual; (4) are to an individual's detriment; or (5) cause harm to an individual.