The user's profile enables them to view and edit personal data, we need to add any remaining personal data to that and enable them to edit it if appropriate.
Specifically I'm thinking of shibboleth attributes that we user to identify the user, such as persistentId or eppn. The user should not be able to edit such identifiers.