- LC - mailman.kantarainitiative.org

Jumping into Summer with Kantara Initiative
by Kantara Initiative 30 Jun '26

30 Jun '26

Growing Stronger, Building Trust Dear Supporter, Kantara continues to grow, and I'm excited about where we are heading. The release of Version 4 of the NIST Digital Identity Guidelines marks a pivotal moment for our industry, and I'm proud to report that Kantara is already advancing certification criteria to match it — so our community can move forward with confidence. Our Work Groups have never been more active. Since late 2025, five new Groups have formally launched, each tackling a critical frontier: Trusted Transaction Assurance, Shadow AI in the Workplace, Biometric Data, Blinding Identity Taxonomy, and Digital Identity Risk Universe. The energy and expertise our Members bring to these Groups is extraordinary. Interested in shaping the future of digital identity? Kantara Membership gives you the opportunity to charter and lead a Group, influence emerging standards, and connect with a global community of practitioners. Learn more about Membership benefits [here](https://kantarainitiative.org/memberships/). I'm also thrilled that Kantara will be present at several key industry events this summer and autumn — including Identity Week Europe in Amsterdam, Identity Week America in Washington, and our co-sponsorship of The DeepFake Summit. I look forward to seeing many of you at these events. Regards, Kay Chopard Executive Director What the Kantara Initiative accomplished in 2025 Kantara Advances NIST SP 800-63-4 Certification Program Kantara Initiative has published assessment criteria aligned to NIST SP 800-63 Revision 4 — the latest update to the NIST Digital Identity Guidelines. Criteria are now available for: - NIST SP 800-63A-4 — Identity Proofing - NIST SP 800-63B-4 — Authentication and Authenticator Management Revision 4 brings important updates, including stronger requirements for phishing-resistant authentication, expanded support for modern authenticators such as passkeys, and updated expectations for identity proofing and lifecycle management. Organizations can now pursue assessments against these Version 4 criteria, enabling early adoption while demonstrating their commitment to security, privacy, and user trust. In addition, the SP 800-63-4 Base Volume SAC and SoCA have now been published, establishing the foundational organizational criteria that apply across all Revision 4 assessments. The Base Volume incorporates common Kantara Initiative requirements and is intended to be used alongside the applicable functional [c](https://kantarainitiative.org/download-category/service-assessment-crite… sets](https://kantarainitiative.org/download-category/service-assessment-cr…. The Common Organizational Service Assessment Criteria (CO_SAC) remains applicable for SP 800-63 Revision 3 assessments, and both Revision 3 and Revision 4 certification suites continue to be available to service providers. Existing Revision 3 Trust Mark holders remain validly certified for the duration of their current certification period and may transition to Revision 4 upon renewal if desired. Organizations seeking certification are required to engage directly with Kantara Initiative, with assessor assignments managed through the program to ensure consistency and impartiality. Additionally, work continues on the development of the NIST SP 800-63C-4 Federation and Assertions criteria. Internal drafting activities are underway, and the criteria are expected to enter public review following completion of the current review cycle. Notices and Documentation Updates Strengthen Program Consistency Several[notices](https://kantarainitiative.org/notices/) were issued during the year to support the consistent operation of the program: - Notice KI#2026-01 formally incorporated passkey requirements into the SP 800-63B-3 criteria, retiring the previous accommodation notice and ensuring support for phishing-resistant authentication technologies. - Notice KI#2026-02 introduced the Assessor Assignment Policy, providing additional transparency and consistency around the engagement and assignment of accredited assessors. - Notice KI#2026-03 provided clarification regarding confirmed address requirements and their interpretation, supporting more consistent application of the criteria by applicants and assessors. Together, these updates continue to strengthen the integrity, transparency, and consistency of the certification process. Updated Documentation and Resources Throughout the year, [several supporting documents and templates](https://kantarainitiative.org/download-category/supporting-templ… were refreshed to improve usability and streamline the assessment lifecycle. These new templates are effective as of their date of publication, and older versions will no longer be available or accepted. Updates included revised: - Application Forms; - Service Description (S3A) templates; - Assessor Report templates; and - Trademark Licence Agreements (TMLA). The website was also enhanced with dedicated publication pages, updated criteria request pages, and a new Notices section, making it easier for organizations, assessors, and stakeholders to access current information and remain informed of program developments. UK Digital Verification Services (DVS) Update The UK’s Digital Verification Services framework is starting to progress at pace. The government published the pre‑release of Version 1.0 on 6 March 2026. This is the first revised statutory trust framework under the Data (Use & Access) Act, and it replaces the earlier “UK Digital Identity & Attributes Trust Framework” (DIATF). On 9 June 2026, the Department of Science, Industry and Technology (DSIT) published the full statutory release of Version 1.0 and stated that it is expected to come into force on 1 September 2026, which will open the door for certification to begin. Kantara is well placed to meet this timeline, with the processes, expertise, and assessor capacity ready to support providers as soon as the framework becomes formally available for certification. How Version 1.0 Relates to the Data (Use & Access) Act 2025 The Data (Use & Access) Act 2025 is the legislation that brought DVS onto a statutory footing. Part 2 of the Act came into force on 1 December 2025, formally moving the DVS pilot into a legally regulated environment. Key links between the Act and Version 1.0: - The Act establishes the statutory role of the DVS Trust Framework — Version 1.0 is the first publication written explicitly to align with this legal basis. - The Act enabled the creation of a statutory register of certified DVS providers. - The Act underpins the governance, oversight, and enforcement mechanisms that Version 1.0 now builds upon. What is to be introduced in Version 1.0: - A fully aligned statutory name — now formally the UK Digital Verification Services Trust Framework, matching the terminology in the Act. - New rules for Orchestration and Holder Service Providers, including requirements to share metadata about identity confidence, authentication methods, and provenance. - Support for modern authentication, including guidance on passkeys and syncable authenticators. - The new UK CertifID Trust Mark, which providers certified to Version 1 will be able to display. What Does This All Mean? Certification is already mandatory for DBS digital identity checks. Looking ahead, it’s widely expected that certification for Digital Right to Work checks, Holder Service Providers (wallets), Attribute Service Providers, and Orchestration Service Providers may also become mandatory, possibly followed by requirements in areas such as Age Assurance, Smart Data schemes, and for identity providers accessing certain government services. Regardless of these future changes, only certified providers will be eligible to appear on the statutory register — a major trust signal for the market. As of this point in time, ONLY Kantara can add providers to the register. For organisations already certified under Gamma (0.4), this is the moment to begin preparing for the uplift to Version 1.0. For organisations not yet certified, this is the moment to get in touch for us to guide you through the certification process. Five New Work & Discussion Groups: Already Delivering Following approval in late 2025, five new Groups officially launched between January and March 2026. Each addresses a priority area within digital identity: Trusted Transaction Assurance Work Group (Trusted Transaction) Bridging the gap between identity proofing and authorization, this group is developing frameworks that bind verified digital identities to legally significant actions — such as signing a mortgage, granting durable consent for care, or approving a wire transfer. It also aims to reduce market confusion around certifications and ease component integration for Credential Service Providers. The group is currently meeting regularly to develop its preliminary work plan. Digital Identity Risk Universe Discussion Group (DIRU) Already delivering: the DIRU DG has published a major community resource — the Digital Identity Risk Universe – 2026 and an accompanying methodology report, both freely available to the public. See the Publication section below for details. (Note: John is also exploring a video walkthrough of the Risk Universe as a marketing asset.) Shadow AI in the Workplace Discussion Group (Shadow AI) The rapid adoption of generative AI tools — ChatGPT, GitHub Copilot, and others — without IT approval creates real enterprise risk. Chartered in November 2025, this group has moved quickly: it has developed a preliminary outline and is now actively drafting its report, which will map causes, implications, and practical countermeasures, with a particular focus on identity-rooted detection and response. Blinding Identity Taxonomy Discussion Group (BIT) The BIT DG evolves and maintains a taxonomy for identifying and managing PII and quasi-identifiable information (QII) — supporting privacy-preserving data handling and enabling use cases such as filtering data unsuitable for AI training. The group is well into active development: a draft BIT Report 2.0 is already under review, with regular meetings focused on expanding and refining the taxonomy. Biometric Data Discussion Group (Biometrics/BDDG) Addressing the management, security, and privacy of biometric data from collection to destruction, this group will produce practical recommendations and best practices that translate complex existing standards into accessible, real-world guidance — with a focus on GDPR compliance. The group has developed a preliminary outline and is actively expanding its work plan. To participate in any of Kantara’s Groups, complete Kantara's [Group Participation Agreement (GPA)](https://kantarainitiative.org/gpa-signup/) https://kantarainitiative.org/work-groups/ancr/ New Publication: The Digital Identity Risk Universe – 2026 The Digital Identity Risk Universe Discussion Group (DIRU DG) has formally published a major new community resource: - The Digital Identity Risk Universe – 2026 (DIRU): A comprehensive spreadsheet mapping risks across the full credential lifecycle — from creation and enrollment through holder management and verification. It introduces a specialized taxonomy for emerging AI Agent/Agentic Identity risks. - The Accompanying Report: Explains the methodology behind the framework and serves as a practical guide for risk management teams building their own internal Risk Registers. Both files are published under Kantara's Non-Assertion Covenant IPR and are freely available to the public. [Download both files here.](https://kantarainitiative.org/reports-recommendations/) Editor: John Fiske https://kantarainitiative.org/work-groups/ancr/ Transparency Performance Indicators Published in IEEE — and Recognized Across the Global Stage The Anchored Notice and Consent Receipts (ANCR) Work Group's Transparency Performance Indicators (TPIs) — a Kantara Recommendation developed under the leadership of Work Group Chair and Kantara Member Salvatore D'Agostino of IDmachines — have been [published in IEEE Xplore](https://ieeexplore.ieee.org/document/11486335) following their presentation at the 2025 IEEE Symposium on Privacy Expectations (ISoPE). The paper proposes a methodology for measuring PII Controller compliance using consent record structures mapped to both technical and legal frameworks (ISO/IEC 27560:2023, GDPR, Council of Europe 108+, and others). But the TPIs haven't stopped at publication — they're already being put to work, and recognized at the highest levels. At CPDP 2026 (Computers, Privacy and Data Protection), one of the most significant annual gatherings in the global privacy community, Kantara Member and ANCR Work Group Editor Mark Lizar joined a distinguished panel — including the UN Special Rapporteur on the Right to Privacy — to present Transparency by Default: An Internet Transparency Code of Practice. The panel highlighted the urgent need for operational transparency frameworks that make accountability inspectable before identification is demanded and data begins to flow. Lizar's presentation drew directly on the Kantara TPI Recommendation as the foundation for exactly this kind of internet-scale transparency infrastructure — grounded in Council of Europe Convention 108+, a framework covering 2.5 billion people. It was a powerful call to action: the work Kantara's community has been quietly building is now being named as the solution the world needs. Meanwhile, the TPIs are also finding their way into award-winning commercial products. IDmachines, in partnership with Ones Technology (Ankara, Turkey) and Intel RealSense, applied the TPI framework to add a notice and consent layer to a real-world biometric credentialing and access control deployment. The result — [the BioAffix Vision Platform](https://www.youtube.com/watch?v=Vmiwu1M_TLQ) — earned an [Honorable Mention in the Biometrics category at the 2026 SIA New Products and Solutions Awards](https://www.securityindustry.org/2026/03/25/security-industry-assoc… at ISC West in Las Vegas. Publication. Standards recognition. A UN-level call to action. Commercial deployment. This is what it looks like when Kantara Work Group outputs reach deeply into the world. DOI: 10.1109/ISoPE67098.2025.00019 | Publisher: IEEE https://kantarainitiative.org Meet Kantara at Upcoming Conferences Kantara will be represented at three approaching significant events this year. We'd love to connect with you at any of them: The DeepFake Summit 2026 — Washington, D.C. September 1, 2026 · Kantara is a co-sponsor. An executive forum on deepfakes, synthetic identity, and agentic AI threats. Identity Week America 2026 — Washington, D.C. September 2–3, 2026 · 3,000+ professionals across biometrics, digital ID, AI, and authentication. 2026 Federal Identity Forum & Exposition (FedID) — Chantilly, VA September 15–16, 2026 · A two-day immersive forum uniting identity professionals from the federal government, private sector, and academia for strategic planning, information sharing, and collaboration. Find us at all three events. To get in touch, contact us [here](https://kantarainitiative.org/contact-us/). JOIN US! Sign up for membership of Kantara Initiative at www.kantarainitiative.org/membership

1 0

Reminder 1 - NOTICE FOR PUBLIC COMMENTS/IPR REVIEW: Inclusive Purpose Consent Query (RIUP Draft Recommendation)
by Kantara Initiative 23 Jun '26

23 Jun '26

[Unsubscribe] [https://kantarainitiative.org/membership/mailing/unsubscribe/?reset=1&jid=6… [View in your browser](https://kantarainitiative.org/membership/mailing/view/?reset=1&id=… [Kantara Initiative Logo](https://kantarainitiative.org/membership/mailing/url/?u=1461&qid=9613… Notice of Public Comment Period Dear Kantara Initiative Community: This is a reminder regarding the Public Comments Notice detailed below. Please review the document and follow the instructions to submit comments. Thank you for your involvement in the Kantara Community! ________________________________________________________________________ This is a formal notification that the Resilient Identifiers for Underserved Population Work Group (RIUP) has approved the following document as a Group-Approved Draft Recommendation and its distribution for public comment and IPR Review: Document: Inclusive Purpose Consent Query - A Kantara Recommendation Version:1.0 Document Date: 2026-05-19 Notice and Document available [HERE](https://kantarainitiative.org/membership/mailing/url/?u=1462&qid=9613…. In accordance with the Kantara Initiative [Operating Procedures](https://kantarainitiative.org/membership/mailing/url/?u=1463&qi…, this document now enters a 45-day public comment and IPR review period in preparation for an All-Member Ballot to consider its approval as a Kantara Initiative Recommendation. This is an open invitation to comment. Kantara Initiative solicits feedback from potential users, developers, and other interested parties, whether Kantara Initiative members or not, for the sake of improving the interoperability and quality of its technical work. Public Review and IPR Review Period Opens: 08 June 2026, 3:00 PM ET Review Period Closes: 23 July, 2026, 3:00 PM ET Overview of Document/ABSTRACT: The purpose of the Inclusive Purpose Consent Query is to enable a Verifier to send sufficient information to a smartphone to enable the holder to understand the query fully and quickly. The message may suffice to acquire all the information a verifier requires for common, simple queries. At the very least, it will establish a connection to a user agent (like a digital wallet) that can continue the query process. This document is not intended to be a complete formal specification but should be treated as an explainer for understanding the requirements for a broad range of inclusive use cases. An inclusive query can be handled by all people who are entitled to access a service or other resource. To become inclusive, a query must be able to be processed even when the holder or the subject is: - Not able to communicate in the local or preferred language, - Aware but not capable of handling the requirements of digital devices, - Unable to give informed consent on their own behalf, or - In an emergency location where network access is not available. Kantara invites your review of this document and asks that you submit any comments and proposed revisions on or before July 23, 2026. As this deadline will be strictly adhered to, late submissions will not be taken into account. ____________________ To Comment on the Recommendation: - Single comment: [Public Comment Form](https://kantarainitiative.org/membership/mailing/url/?u=1464&qid=9613… - Multiple comments: [Kantara-Comment-Template RIUP IPCQ Recommendation.xlsx](https://kantarainitiative.org/membership/mailing/url/?… - Send your comments via email to [Staff](mailto:staff@kantarainitiative.org) with the subject “RIUP - IPCQ WG COMMENT SUBMISSION". _____________ Intellectual Property Rights Notice: Intellectual Property Rights Notice: In accordance with the Kantara Initiative [IPR Policy](https://kantarainitiative.org/membership/mailing/url/?u=1467&qid=96… B Article 5 and the Kantara Initiative [Operating Procedures](https://kantarainitiative.org/membership/mailing/url/?u=1463&qi… Section 7.5, you have a period of 45 days to review the document for any Necessary Claims that may be implicated by the final Recommendation. Note that any submissions are deemed to be contributed under the IPR Option of RIUP: [Option Patent and Copyright Reciprocal Royalty Free with Opt-Out to (RAND)](https://kantarainitiative.org/membership/mailing/url/?u=1467&qid=961…) While there is no requirement to review your patent portfolio for Necessary Claims, please be advised that unless you provide a licensing objection in accordance with the Kantara Initiative IPR Policy Article 5 or a notice of withdrawal in accordance with Kantara Initiative IPR Policy Article 6 on or before July 23, 2026 you will have committed to the licensing provisions as set forth by the Patent & Copyright: [Option Patent and Copyright Reciprocal Royalty Free with Opt-Out to (RAND)](https://kantarainitiative.org/membership/mailing/url/?u=1467&qid=961…) IPR Policy with respect to any Necessary Claims implicated by the final approved document. [RIUP Participants](https://kantarainitiative.org/membership/mailing/url/?u=1468&… are required to make claims to IPR regarding these technical documents. Having signed the Group Participation Agreement (GPA), all members of the RIUP Work Group should be familiar with these documents, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark, and license rights that are outlined in an approved Kantara Initiative Recommendation. Kantara Initiative invites any other persons who know of any part of this Group output that would infringe on third-party intellectual property rights to disclose such infringement claims so that these claims may be provided to the Group members for resolution. If you are not a RIUP Participant, you have no IPR licensing obligation to any of these documents. To submit an Intellectual Property Rights infringement claim, email [Staff](mailto:staff@kantarainitiative.org) with the subject "RIUP IPR CLAIM". ____________________ Please contact the Kantara Initiative [Staff](mailto:staff@kantarainitiative.org) with any questions regarding this notice. We thank you for your time and interest.

1 0

Proposed Operating Procedure changes
by Alec L 15 Jun '26

15 Jun '26

Hi everyone, The LC Leads and the board have been discussing ways to make Kantara membership more valuable. Currently, unpaid non-members get almost all the same perks as paying members. They can choose to vote and may hold a leadership role. To make formal Membership more valuable, we are looking at reorganizing participation into two clear buckets: - Members: Can vote, lead, and contribute. (If a Member steps into a leadership or Editor role, they automatically become a Voting participant). - Non-Members: Still required to sign the GPA so we legally capture their IP and contributions, and they still get public attribution for their work—but they get zero voting rights and cannot hold leadership roles. I've provided the proposed Operating Procedure changes to accomplish this below. OP changes require an All-member ballot, however, we want to ensure everyone is heard and aligned on the changes first. We will discuss this at the Leadership Council call tomorrow, see you there! Best, - Alec Proposed Redlines: 1. Group Participation (Sections 4.1.1 and 5.1.1) Current Text: "Upon joining a WG [or DG] Participants choose to be Voting or Non-Voting Participants." - Proposed Revision: "Upon joining a WG [or DG], Members choose to be Voting or Non-Voting Participants. Non-Member Participants are automatically Non-Voting Participants." 2. Group Roles (Sections 4.1.2 and 5.1.2) Current Text: "A WG [or DG] shall have one or more Chairs elected from the WG [or DG] Participants." "At least one WG [or DG] Chair shall be a Member of Kantara Initiative." "If required for creation of documents or specifications, the WG [or DG] may designate one or more Editors from the WG [or DG] Participants." - Proposed Revision: "A WG [or DG] shall have one or more Chairs elected from the WG [or DG] Members." (Note: Delete the sentence "At least one WG Chair shall be a Member..." entirely.) "If required for creation of documents or specifications, the WG [or DG] may designate one or more Editors from the WG [or DG] Members. Accepting a Group Leadership or Editor position automatically designates the Member as a Voting Participant. " 3. DG Elections (Section 5.1.3) Current Text: "The DG shall annually elect a DG Chair and a DG Vice-Chair from its participants by a Majority vote of the DG Participants." - Proposed Revision: "The DG shall annually elect a DG Chair and a DG Vice-Chair from its Members by a Majority vote of the Voting DG Participants." 4. Voter Eligibility (Section 6.1) Current Text: "Group Participants may be either Voting Participants or Non-Voting Participants. Current voting status of Participants shall be recorded on the Roster at the Group wiki space." - Proposed Revision: "Group Participants may be either Voting Participants or Non-Voting Participants. Only Members are eligible to be Voting Participants. Current voting status of Participants shall be recorded on the Roster at the Group wiki space." Alec Laws CTO Engineering | IDENTOS Inc. [image: mobilePhone] (647)-822-1529 [image: emailAddress] alec(a)identos.ca [image: twitter] <https://twitter.com/identos_inc> [image: linkedin] <https://www.linkedin.com/company/identos-inc/>

1 0

Group Slide Updates - Due ASAP
by Alec L 09 Jun '26

09 Jun '26

Hi all, Please update your work group slides to include your 2026 activities & results *ASAP* (deadline June 12). We need to submit our slides for Identiverse. Each group has a section in the presenation: https://docs.google.com/presentation/d/1Zk6nE81RzPB9u6AstnPLP2IkcZejWT8y/ed… If you are going to be at Identiverse please let us know! Best, - Alec Alec Laws CTO Engineering | IDENTOS Inc. [image: mobilePhone] (647)-822-1529 [image: emailAddress] alec(a)identos.ca [image: twitter] <https://twitter.com/identos_inc> [image: linkedin] <https://www.linkedin.com/company/identos-inc/>

4 3

Leadership Council - June 16, 10 AM Agenda
by Amanda Gay 09 Jun '26

09 Jun '26

Hi all: The full LC will meet next Tuesday, June 16 at the usual time! A draft agenda is available here <https://kantara.atlassian.net/wiki/spaces/LC/pages/1915322371/2026-06-16+LC…>. Alec will circulate materials regarding the proposed Operating Procedure changes, and I will then add them to the agenda. *Reminders:* *1. WG Slides <https://docs.google.com/presentation/d/1Zk6nE81RzPB9u6AstnPLP2IkcZejWT8y/ed…> are overdue. * This is the last week to make any updates before Identiverse. *All Groups are expected to edit/update their own slides ASAP.* *2. *Please submit your headshot to Amanda/Gracie (CC'ed) above, as we also need to update the website. We look forward to seeing everyone! Best, -Amanda -- Amanda Gay | Work Groups and Membership [image: Logo, company name Description automatically generated] Phone: +1 571-475-8895 LinkedIn: @KantaraInitiative

1 0

CORRECTED TITLE - NOTICE FOR PUBLIC COMMENTS/IPR REVIEW: Inclusive Purpose Consent Query (RIUP Draft Recommendation)
by Kantara Initiative 08 Jun '26

08 Jun '26

[https://kantarainitiative.org/membership/mailing/unsubscribe/?reset=1&jid=6… [View in your browser](https://kantarainitiative.org/membership/mailing/view/?reset=1&id=… [Kantara Initiative Logo](https://kantarainitiative.org/membership/mailing/url/?u=1453&qid=9444… Notice of Public Comment Period Dear Kantara Initiative Community: This is a formal notification that the Resilient Identifiers for Underserved Population Work Group (RIUP) has approved the following document as a Group-Approved Draft Recommendation and its distribution for public comment and IPR Review: Document: Inclusive Purpose Consent Query - A Kantara Recommendation Version:1.0 Document Date: 2026-05-19 Notice and Document available [HERE](https://kantarainitiative.org/membership/mailing/url/?u=1454&qid=9444…. In accordance with the Kantara Initiative [Operating Procedures](https://kantarainitiative.org/membership/mailing/url/?u=1455&qi…, this document now enters a 45-day public comment and IPR review period in preparation for an All-Member Ballot to consider its approval as a Kantara Initiative Recommendation. This is an open invitation to comment. Kantara Initiative solicits feedback from potential users, developers, and other interested parties, whether Kantara Initiative members or not, for the sake of improving the interoperability and quality of its technical work. Public Review and IPR Review Period Opens: 08 June 2026, 3:00 PM ET Review Period Closes: 23 July, 2026, 3:00 PM ET Overview of Document/ABSTRACT: The purpose of the Inclusive Purpose Consent Query is to enable a Verifier to send sufficient information to a smartphone to enable the holder to understand the query fully and quickly. The message may suffice to acquire all the information a verifier requires for common, simple queries. At the very least, it will establish a connection to a user agent (like a digital wallet) that can continue the query process. This document is not intended to be a complete formal specification but should be treated as an explainer for understanding the requirements for a broad range of inclusive use cases. An inclusive query can be handled by all people who are entitled to access a service or other resource. To become inclusive, a query must be able to be processed even when the holder or the subject is: - Not able to communicate in the local or preferred language, - Aware but not capable of handling the requirements of digital devices, - Unable to give informed consent on their own behalf, or - In an emergency location where network access is not available. Kantara invites your review of this document and asks that you submit any comments and proposed revisions on or before July 23, 2026. As this deadline will be strictly adhered to, late submissions will not be taken into account. ____________________ To Comment on the Recommendation: - Single comment: [Public Comment Form](https://kantarainitiative.org/membership/mailing/url/?u=1456&qid=9444… - Multiple comments: [Kantara-Comment-Template RIUP IPCQ Recommendation.xlsx](https://kantarainitiative.org/membership/mailing/url/?… - Send your comments via email to [Staff](mailto:staff@kantarainitiative.org) with the subject “RIUP - IPCQ WG COMMENT SUBMISSION". _____________ Intellectual Property Rights Notice: Intellectual Property Rights Notice: In accordance with the Kantara Initiative [IPR Policy](https://kantarainitiative.org/membership/mailing/url/?u=1459&qid=94… B Article 5 and the Kantara Initiative [Operating Procedures](https://kantarainitiative.org/membership/mailing/url/?u=1455&qi… Section 7.5, you have a period of 45 days to review the document for any Necessary Claims that may be implicated by the final Recommendation. Note that any submissions are deemed to be contributed under the IPR Option of RIUP: [Option Patent and Copyright Reciprocal Royalty Free with Opt-Out to (RAND)](https://kantarainitiative.org/membership/mailing/url/?u=1459&qid=944…) While there is no requirement to review your patent portfolio for Necessary Claims, please be advised that unless you provide a licensing objection in accordance with the Kantara Initiative IPR Policy Article 5 or a notice of withdrawal in accordance with Kantara Initiative IPR Policy Article 6 on or before July 23, 2026 you will have committed to the licensing provisions as set forth by the Patent & Copyright: [Option Patent and Copyright Reciprocal Royalty Free with Opt-Out to (RAND)](https://kantarainitiative.org/membership/mailing/url/?u=1459&qid=944…) IPR Policy with respect to any Necessary Claims implicated by the final approved document. [RIUP Participants](https://kantarainitiative.org/membership/mailing/url/?u=1460&… are required to make claims to IPR regarding these technical documents. Having signed the Group Participation Agreement (GPA), all members of the RIUP Work Group should be familiar with these documents, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark, and license rights that are outlined in an approved Kantara Initiative Recommendation. Kantara Initiative invites any other persons who know of any part of this Group output that would infringe on third-party intellectual property rights to disclose such infringement claims so that these claims may be provided to the Group members for resolution. If you are not a RIUP Participant, you have no IPR licensing obligation to any of these documents. To submit an Intellectual Property Rights infringement claim, email [Staff](mailto:staff@kantarainitiative.org) with the subject "RIUP IPR CLAIM". ____________________ Please contact the Kantara Initiative [Staff](mailto:staff@kantarainitiative.org) with any questions regarding this notice. We thank you for your time and interest.

1 0

NOTICE FOR PUBLIC COMMENTS/IPR REVIEW: Inclusive Performance Consent Query (RIUP Draft Recommendation)
by Kantara Initiative 08 Jun '26

08 Jun '26

[https://kantarainitiative.org/membership/mailing/unsubscribe/?reset=1&jid=6… [View in your browser](https://kantarainitiative.org/membership/mailing/view/?reset=1&id=… [Kantara Initiative Logo](https://kantarainitiative.org/membership/mailing/url/?u=1428&qid=9103… Notice of Public Comment Period Dear Kantara Initiative Community: This is a formal notification that the Resilient Identifiers for Underserved Population Work Group (RIUP) has approved the following document as a Group-Approved Draft Recommendation and its distribution for public comment and IPR Review: Document: Inclusive Purpose Consent Query - A Kantara Recommendation Version:1.0 Document Date: 2026-05-19 Notice and Document available [HERE](https://kantarainitiative.org/membership/mailing/url/?u=1429&qid=9103…. In accordance with the Kantara Initiative [Operating Procedures](https://kantarainitiative.org/membership/mailing/url/?u=1430&qi…, this document now enters a 45-day public comment and IPR review period in preparation for an All-Member Ballot to consider its approval as a Kantara Initiative Recommendation. This is an open invitation to comment. Kantara Initiative solicits feedback from potential users, developers, and other interested parties, whether Kantara Initiative members or not, for the sake of improving the interoperability and quality of its technical work. Public Review and IPR Review Period Opens: 08 June 2026, 3:00 PM ET Review Period Closes: 23 July, 2026, 3:00 PM ET Overview of Document/ABSTRACT: The purpose of the Inclusive Purpose Consent Query is to enable a Verifier to send sufficient information to a smartphone to enable the holder to understand the query fully and quickly. The message may suffice to acquire all the information a verifier requires for common, simple queries. At the very least, it will establish a connection to a user agent (like a digital wallet) that can continue the query process. This document is not intended to be a complete formal specification but should be treated as an explainer for understanding the requirements for a broad range of inclusive use cases. An inclusive query can be handled by all people who are entitled to access a service or other resource. To become inclusive, a query must be able to be processed even when the holder or the subject is: - Not able to communicate in the local or preferred language, - Aware but not capable of handling the requirements of digital devices, - Unable to give informed consent on their own behalf, or - In an emergency location where network access is not available. Kantara invites your review of this document and asks that you submit any comments and proposed revisions on or before July 23, 2026. As this deadline will be strictly adhered to, late submissions will not be taken into account. ____________________ To Comment on the Recommendation: - Single comment: [Public Comment Form](https://kantarainitiative.org/membership/mailing/url/?u=1431&qid=9103… - Multiple comments: [Kantara-Comment-Template RIUP IPCQ Recommendation.xlsx](https://kantarainitiative.org/membership/mailing/url/?… - Send your comments via email to [Staff](mailto:staff@kantarainitiative.org) with the subject “RIUP - IPCQ WG COMMENT SUBMISSION". _____________ Intellectual Property Rights Notice: Intellectual Property Rights Notice: In accordance with the Kantara Initiative [IPR Policy](https://kantarainitiative.org/membership/mailing/url/?u=1434&qid=91… B Article 5 and the Kantara Initiative [Operating Procedures](https://kantarainitiative.org/membership/mailing/url/?u=1430&qi… Section 7.5, you have a period of 45 days to review the document for any Necessary Claims that may be implicated by the final Recommendation. Note that any submissions are deemed to be contributed under the IPR Option of RIUP: [Option Patent and Copyright Reciprocal Royalty Free with Opt-Out to (RAND)](https://kantarainitiative.org/membership/mailing/url/?u=1434&qid=910…) While there is no requirement to review your patent portfolio for Necessary Claims, please be advised that unless you provide a licensing objection in accordance with the Kantara Initiative IPR Policy Article 5 or a notice of withdrawal in accordance with Kantara Initiative IPR Policy Article 6 on or before July 23, 2026 you will have committed to the licensing provisions as set forth by the Patent & Copyright: [Option Patent and Copyright Reciprocal Royalty Free with Opt-Out to (RAND)](https://kantarainitiative.org/membership/mailing/url/?u=1434&qid=910…) IPR Policy with respect to any Necessary Claims implicated by the final approved document. [RIUP Participants](https://kantarainitiative.org/membership/mailing/url/?u=1435&… are required to make claims to IPR regarding these technical documents. Having signed the Group Participation Agreement (GPA), all members of the RIUP Work Group should be familiar with these documents, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark, and license rights that are outlined in an approved Kantara Initiative Recommendation. Kantara Initiative invites any other persons who know of any part of this Group output that would infringe on third-party intellectual property rights to disclose such infringement claims so that these claims may be provided to the Group members for resolution. If you are not a RIUP Participant, you have no IPR licensing obligation to any of these documents. To submit an Intellectual Property Rights infringement claim, email [Staff](mailto:staff@kantarainitiative.org) with the subject "RIUP IPR CLAIM". ____________________ Please contact the Kantara Initiative [Staff](mailto:staff@kantarainitiative.org) with any questions regarding this notice. We thank you for your time and interest.

1 0

Publication Notice: SP 800-63B-4 Service Assessment Criteria (SAC) and – Effective Immediately
by Lynzie Adams 20 May '26

20 May '26

Dear Assurance Program Participants, This notice <https://kantarainitiative.org/publication-notice-sp-800-63b-4-service-asses…> confirms the formal publication of the Kantara Initiative International Assurance Program: SP 800-63B-4 Service Assessment Criteria (SAC) & Statement of Criteria Applicability (SoCA), aligned to NIST SP 800-63B Revision 4 – Authentication and Authenticator Management. Following completion of the public review process and consideration of community feedback, the assessment criteria have been finalized and are effective immediately. As of the publication date: - Authenticator Assurance Level (AAL) assessments can now be conducted against SP 800-63B-4. - Initial applications should be submitted to secretariat(a)kantarainitiative.org. - All organizations seeking assessment and certification are now required to contract directly with Kantara Initiative. Kantara will manage the engagement and assignment of accredited assessors. - The previous SP 800-63B-3 assessment criteria will continue to be available to those requiring it. - Trust Mark holders and registered applicants seeking certification are encouraged, but not required, to transition to SP 800-63B-4 upon renewal. The assessment documentation and supporting materials are provided with this notice and are also available through the Kantara Initiative website <https://kantarainitiative.org/download-category/service-assessment-criteria…>. *Please note* that all <https://kantarainitiative.org/download-category/supporting-templates-servic…>additional documentation <https://kantarainitiative.org/download-category/supporting-templates-servic…> has also been updated – including the Application, Service Description, and Assessor Report. Kantara Initiative also advises that an updated SP 800-63 Revision 4 base publication package is currently in development. This forthcoming release will incorporate the Common Operational (CO_SAC) assessment criteria to support a unified Revision 4 assessment framework. Further details regarding publication timing and transition guidance will be provided separately. Questions regarding implementation or transition may be directed to the Assurance Program team at secretariat(a)kantarainitiative.org. *Lynzie Adams | **Assurance Program Manager* *Phone:* (301) 810-3977 *LinkedIn:* @KantaraInitiative *Sign up to receive our newsletter! <https://kantarainitiative.org/newsletter-form/>*

1 0

Publication NOTICE: The Digital Identity Risk Universe – 2026 & Accompanying Report
by Kantara Initiative 15 May '26

15 May '26

[https://kantarainitiative.org/membership/mailing/unsubscribe/?reset=1&jid=6… [View in your browser](https://kantarainitiative.org/membership/mailing/view/?reset=1&id=… [Kantara Initiative Logo](https://www.kantarainitiative.org) Publication Notice: The Digital Identity Risk Universe – 2026 & Accompanying Report Dear Kantara Community: We are pleased to announce the formal publication of a major new community work product: The Digital Identity Risk Universe – 2026, along with its Accompanying Report. Developed by the [Digital Identity Risk Universe Discussion Group](https://kantara.atlassian.net/wiki/spaces/DDIRU/overview) (DIRU DG), this pair of resources provides a technology-agnostic framework designed to help organizations identify, organize, and manage the diverse risks associated with digital credentials. About the Publications: - The Digital Identity Risk Universe – 2026 (DIRU): A comprehensive spreadsheet mapping out risks across the credential lifecycle, from creation and enrollment to holder management and verification. Notably, it introduces a specialized taxonomy to address emerging AI Agent/Agentic Identity Risks. - The Accompanying Report: Explains the motivation, methodology, and overarching insights behind the risk universe framework, serving as a practical guide for risk management teams to build out their own internal Risk Registers. Both files have been successfully published under Kantara Initiative Operating Procedures (IPR: Non-Assertion Covenant) and are available to the public. Accessing the Documents: You can download both files here: [Kantara Initiative Reports and Recommendations](https://kantarainitiative.org/reports-recommendations/) We would like to extend our sincere thanks to Editor John Fiske, as well as the numerous group contributors whose collaborative efforts made this critical reference framework possible. For feedback or questions, please reach out to the [Discussion Group](mailto:dg-riskuniverse@kantarainitiative.org). Please share with your networks, and thank you most sincerely for your support of Kantara Initiative! Best, -Kantara Staff

1 0

Leadership Council Call - Tuesday, May 19 10AM ET
by Amanda Gay 13 May '26

13 May '26

Hi all: The full LC will meet next Tuesday, May 19 at 10AM ET. Click here for a draft agenda <https://kantara.atlassian.net/wiki/spaces/LC/pages/1836777475/2026-05-19+LC…> - please reach out with any feedback/inclusions! *REMINDER: If you haven't already, your WG Slides <https://docs.google.com/presentation/d/1Zk6nE81RzPB9u6AstnPLP2IkcZejWT8y/ed…> need to be updated ASAP! * Conference season is upon us, and Kay relies on this PPT to promote our Groups! Looking forward to seeing everyone! Best, -Amanda -- Amanda Gay | Work Groups and Membership [image: Logo, company name Description automatically generated] Phone: +1 571-475-8895 LinkedIn: @KantaraInitiative

2 1