  The Solid specification aims to empower data subjects by giving them direct
access control over their data across multiple applications. As governments are
manifesting their interest in this framework for citizen empowerment and
e-government services, security and privacy represent pivotal issues to be
addressed. By analyzing the relevant legislation, notably GDPR, and
international standards, namely ISO/IEC 27001:2011 and 15408, we formulate the
primary security and privacy requirements for such a framework. Furthermore, we
survey the current Solid protocol specifications regarding how they cover the
highlighted requirements, and draw attention to potential gaps between the
specifications and requirements. We also point out the contribution of recent
academic work presenting novel approaches to increase the security and privacy
degree provided by the Solid project. This paper has a twofold contribution to
improve user awareness of how Solid can help protect their data and to present
possible future research lines on Solid security and privacy enhancements.
