Exactly. That's the service provided by the likes of THEKEY, Civic etc. Secure Identity Verification where the owner of the identity can control who gets what information.