The DCC itself contains a lot of information so it shouldn't be directly used outside of border or police checks. I can - technically - be used as the basis for issuing of Verified Credentials by other parties. For example by airports - with the privacy protected by their privacy policy.
Whether the law allows that is another question.. and IANAL..
[Disclaimer: I work on the Dutch COVID apps and am deeply involved with Digital Green on EU level].