- LC - mailman.kantarainitiative.org

LC Monthly Call - September 15, 2026
by Amanda Gay 02 Sep '26

02 Sep '26

Hi all: I hope everyone has had a great summer and is ready for fall! We will meet September 15 at 10AM to regroup. *Key topic:* a reminder/discussion about the admin steps needed to get all Groups in compliance with the updated Operating Procedures! Agenda available here <https://kantara.atlassian.net/wiki/spaces/LC/pages/2151415816/2026-09-15+LC…>. Please reach out with anything else to include. Zoom: https://us06web.zoom.us/j/94897867446?pwd=YSsxdjZLMzFmUmhNd2NBMnlwbEZHZz09 <https://www.google.com/url?q=https://us06web.zoom.us/j/94897867446?pwd%3DYS…> Meeting ID: 948 9786 7446 Passcode: 539355 We look forward to seeing everyone! Best, -A -- Amanda Gay | Work Groups and Membership [image: Logo, company name Description automatically generated] Phone: +1 301 284-0665 LinkedIn: @KantaraInitiative

1 0

Operating Procedures v4.0 in effect - Administrative Steps for Groups
by Amanda Gay 31 Aug '26

31 Aug '26

Dear LC Delegates: I hope everyone has had a great summer as we approach fall and cooler temperatures! By now, you have received confirmation that the new Operating Procedures v4.0 <https://kantara.atlassian.net/wiki/spaces/GI/pages/2055110693/Operating+Pro…>are in effect. This email is to provide administrative instructions for the remainder of 2026 to ensure that your Group is in compliance with these changes. *2 key actions are needed:* Roster Management and Leadership Status Confirmation. *Administrative instructions, supporting materials, and deadlines for these actions can be found *here <https://kantara.atlassian.net/wiki/spaces/LC/pages/2134736897/2026+Operatin…> . We will review these steps at the September 2026 LC Monthly Call and issue reminders via email over the coming months. By the November 2026 call, it is expected that rosters will be fully updated and elections discussed/considered within your Group. Please reach out with any questions or concerns We are here to support during this transition, and we look forward to future Group work and outputs in the coming months! Best, -Amanda -- Amanda Gay | Work Groups and Membership [image: Logo, company name Description automatically generated] Phone: +1 301 284-0665 LinkedIn: @KantaraInitiative

1 0

August Roundup From Kantara Initiative
by Kantara Initiative 31 Aug '26

31 Aug '26

A Message from Our Executive Director Dear Supporter, The pace of change in the digital identity space has never been faster, and neither has Kantara's momentum. This month I'm proud to share a newsletter full of news that reflects exactly the kind of impact our community exists to make. We've been recognized as a 2026 Catalyst in the Financial Services Prism Report, our updated Operating Procedures are strengthening member-driven governance, the UK's digital verification services trust framework is making certification a legal requirement, and Kantara is the first accredited certification body getting organizations there. Three major conferences are just weeks away: Identity Week America, The Deepfake Summit, and FedID — and I'll be on stage at the first two. I hope to see many of you there. This community is doing important work. Thank you for being part of it. Regards, Kay Chopard Executive Director NEWS FROM AROUND OUR COMMUNITY Kantara Named a 2026 Catalyst in the Financial Services Prism Report Kantara Initiative has been named a 2026 Catalyst in The Prism Project's Financial Services Prism Report, recognized in the Infrastructure Beam, reflecting our work advancing trusted digital identity, privacy, and interoperability across the financial ecosystem. This recognition spans our leadership in NIST SP 800-63 conformity assessment programs and our efforts to address deepfake and synthetic identity threats through initiatives such as our Privacy Enhancing Mobile Credentials (PEMC) Work Group and our Countering Deepfakes: Protecting Identity Proofing and Verification Discussion Group. As financial institutions face escalating AI-powered fraud and regulatory expectations, this recognition underscores Kantara's role in building the resilient trust architecture the industry needs — today and in the years ahead. Request the full 2026 Financial Services Prism Report [here](https://www.the-prism-project.com/2026-financial-services-report). Thank you to The Prism Project for the continued partnership, and to our members, partners, and working group contributors who make this work possible. Not All IAL3 Claims Are Equal: A New Resource from NextgenID When organizations pursue authorization at the High baseline of the Federal Risk and Authorization Management Program (FedRAMP), the gap between certified and self-attested identity proofing is where efforts stall. As they build out identity proofing, credentialing, authentication, and binding for FedRAMP High, two recurring assumptions keep surfacing: that in-house services already meet the bar, or that a vendor's own "NIST 800-63A IAL3" claim is enough. Neither assumption survives the independent assessment that FedRAMP requires — when the assessor asks for proof, a self-attested claim has nothing to back it. . Kantara is the only organization offering independent, third-party conformity assessment against NIST SP 800-63. A provider is either on our public Trust Status List at IAL3, or they're not — there's no in-between, and no self-attestation that substitutes for it. A new piece from NextgenID lays out exactly what to verify before you sign an IAL3 vendor, including four questions to ask before your next FedRAMP High assessment. Read the full article [here](https://www.nextgenid.com/dod-icam-requirements/). UK Digital Verification Services Trust Framework From 1 October 2026, offering digital Right to Work (RtW) and Right to Rent (RtR) checks will satisfy the UK's checking schemes only if they are carried out through a service certified by a Conformity Assessment Body (CAB) and [registered](https://www.gov.uk/guidance/find-registered-digital-identity-and-attribute-services) with the Office for Digital Identities and Attributes (OfDIA)[register](https://www.gov.uk/guidance/find-registered-digital-identity-and-attribute-services). Digital checks remain optional for employers and landlords, but where they choose to use them, the Home Office will require those checks be carried out exclusively through a certified and registered Digital Verification Service (DVS). This change is introduced through the[Immigration (Restrictions on Employment and Residential Accommodation) (Prescribed Requirements and Codes of Practice) (Amendment) Regulations 2026 (SI 2026/700)](https://www.legislation.gov.uk/uksi/2026/700/made). The accompanying Explanatory Memorandum makes the position explicit: the instrument requires employers, landlords and letting agents who carry out digital identity checks to use a certified and registered DVS. This marks a significant shift: certification is no longer a commercial differentiator — it becomes the legal gateway for market access. Kantara Initiative is currently the only CAB accredited by the United Kingdom Accreditation Service to certify providers under the trust framework. . As the ecosystem transitions into the DVS regime, Service Providers should ensure their certification pathway is underway well ahead of the October deadline to avoid disruption to service continuity. Updated Operating Procedures Now in Effect Updated Operating Procedures (v4.0) for our Leadership Council and Work and Discussion Groups have officially passed and are now in effect. View OP v4.0 [here](https://kantara.atlassian.net/wiki/spaces/GI/pages/2055110693/Operati…. These changes are designed with one goal in mind: boosting the value of Kantara membership. Here's what's changing: - Voting privileges within Groups are now reserved for Members (previously open to all Participants) - Group leadership roles — Chair, Vice/Co-Chair, and Secretary — must now be held by Members (previously only Chairs were required to be Members) This shift ensures that the individuals shaping our standards and steering our Work Groups are invested stakeholders in the Kantara community. Group Chairs will be receiving admin instructions on next steps shortly. Have questions about what this means for your Group or membership status? [Reach out](https://kantarainitiative.org/contact-us/) — we're happy to help. EVENTS Meet Kantara at Upcoming Conferences Kantara will be represented at three significant events this autumn. Note: Members should check their inbox for a dedicated email with conference details and exclusive member discount codes. The Deepfake Summit 2026 — Arlington, VA. September 1, 2026 · Convene at 1201 Wilson Blvd Deepfakes aren't a future problem — they're a right-now problem, and the identity industry is racing to keep up. Kay Chopard, our Executive Director, is taking the stage to bring her expertise at the crossroads of trust frameworks, identity assurance, and policy to one of the most urgent conversations in tech today: how do we defend digital identity against synthetic threats? Save $500 with code DFSDC500. Register [here](https://www.thedeepfakesummit.com/event-details/the-deepfake-summit-w…. Identity Week America 2026 — Washington, D.C. September 2–3, 2026 · Walter E. Washington Convention Center One of the largest identity events in the United States, bringing together thousands of professionals from government, finance, healthcare, retail, and technology. With 250+ leading solution providers and a packed agenda of keynotes and panels, this is the place to connect with the people shaping the future of identity — including Kantara's own Kay Chopard on stage for two sessions: - Day 2 @ 11:10 a.m. — Digital Wallets and Federated Trust: What NIST SP 800-63C-4 Means for Assurance - Day 2 @ 1:40 p.m. — Panel: Dual-Edged Onboarding: Managing the risks and benefits of face-scanning, digital IDs, and AI integration in KYC onboarding operations Grab your all-access pass [here](https://secure.terrapinn.com/V5/step1.aspx?E=11041&p=1). Federal Identity Forum & Exposition (FedID) 2026 — Chantilly, VA September 15–16, 2026 · Westfields Marriott A two-day immersive forum uniting identity professionals from the federal government, private sector, and academia for strategic planning, information sharing, and collaboration. Find us at all three events. To get in touch, contact us [here.](https://kantarainitiative.org/contact-us/) MEMBERSHIP Will you join the Kantara Initiative in 2026? The Kantara Initiative advances innovation through the strength of its growing membership, expanded conformity assessment programs, and commitment to quality and excellence in its staff and program offerings. Membership in the Kantara Initiative provides chances to participate in profile-raising activities and achieve recognition in the organization's outputs, including conference and media presentations, leadership in work groups, and other leadership opportunities. Through our many Work and Discussion Groups, events, and reports, members have the opportunity to advance their own work in emerging areas. We strive to advance the trustworthy use of identity assurance and personal data in the market through the expertise, efforts, and vision of our groups. Membership offers an unparalleled opportunity to amplify your visibility within the industry, among relying parties, decision-makers, and policy leaders. Your contributions solve problems and build confidence in identity solutions across industries. JOIN US! Sign up for membership in the Kantara Initiative at www.kantarainitiative.org/membership

1 0

NOTICE - Updated Kantara Initiative Operating Procedures Published!
by Kantara Initiative 24 Aug '26

24 Aug '26

[Unsubscribe](https://kantarainitiative.org/membership/mailing/unsubscribe/?… [View in your browser](https://kantarainitiative.org/membership/mailing/view/?reset=1&id=… NOTICE - Updated Kantara Initiative Operating Procedures Published This email serves as notice that the Kantara Initiative has formally updated its [Operating Procedures](https://kantara.atlassian.net/wiki/spaces/GI/pages/2055110693/O…, the governing document for the Leadership Council and Work/Discussion Groups. These updates are designed to increase the value of Kantara membership through the following key changes: - Voting Privileges: Voting rights within Groups are now reserved strictly for Members (previously open to all Participants). - Leadership Roles: Group leadership roles—including Chair, Vice/Co-Chair, and Secretary—must now be held by Members (previously only Chairs were required to be Members). This strategic alignment anchors the development of Kantara's standards and Work Groups within a dedicated core of invested community stakeholders. Next Steps & Contact: - Group Chairs: You will receive administrative instructions regarding next steps shortly. - General Inquiries: If you have specific questions regarding your Group or your current membership status, please reach out directly to the Leadership Council or to Kantara [staff](mailto:to:%20staff@kantarainitiative.org).

1 0

Final Reminder - NOTICE FOR PUBLIC COMMENTS/IPR REVIEW: Inclusive Purpose Consent Query (RIUP Draft Recommendation)
by Kantara Initiative 21 Jul '26

21 Jul '26

[Unsubscribe] [https://kantarainitiative.org/membership/mailing/unsubscribe/?reset=1&jid=6… [View in your browser](https://kantarainitiative.org/membership/mailing/view/?reset=1&id=… [Kantara Initiative Logo](https://kantarainitiative.org/membership/mailing/url/?u=1477&qid=1029… Notice of Public Comment Period Dear Kantara Initiative Community: This is the FINAL reminder regarding the Public Comments Notice detailed below. The comment period closes this week - Thursday, July 23rd, at 3PM ET. Please review the document and follow the instructions to submit comments. Thank you for your involvement in the Kantara Community! ________________________________________________________________________ This is a formal notification that the Resilient Identifiers for Underserved Population Work Group (RIUP) has approved the following document as a Group-Approved Draft Recommendation and its distribution for public comment and IPR Review: Document: Inclusive Purpose Consent Query - A Kantara Recommendation Version:1.0 Document Date: 2026-05-19 Notice and Document available [HERE](https://kantarainitiative.org/membership/mailing/url/?u=1478&qid=1029…. In accordance with the Kantara Initiative [Operating Procedures](https://kantarainitiative.org/membership/mailing/url/?u=1479&qi…, this document now enters a 45-day public comment and IPR review period in preparation for an All-Member Ballot to consider its approval as a Kantara Initiative Recommendation. This is an open invitation to comment. Kantara Initiative solicits feedback from potential users, developers, and other interested parties, whether Kantara Initiative members or not, for the sake of improving the interoperability and quality of its technical work. Public Review and IPR Review Period Opens: 08 June 2026, 3:00 PM ET Review Period Closes: Thursday,23 July, 2026, 3:00 PM ET Overview of Document/ABSTRACT: The purpose of the Inclusive Purpose Consent Query is to enable a Verifier to send sufficient information to a smartphone to enable the holder to understand the query fully and quickly. The message may suffice to acquire all the information a verifier requires for common, simple queries. At the very least, it will establish a connection to a user agent (like a digital wallet) that can continue the query process. This document is not intended to be a complete formal specification but should be treated as an explainer for understanding the requirements for a broad range of inclusive use cases. An inclusive query can be handled by all people who are entitled to access a service or other resource. To become inclusive, a query must be able to be processed even when the holder or the subject is: - Not able to communicate in the local or preferred language, - Aware but not capable of handling the requirements of digital devices, - Unable to give informed consent on their own behalf, or - In an emergency location where network access is not available. Kantara invites your review of this document and asks that you submit any comments and proposed revisions on or before July 23, 2026. As this deadline will be strictly adhered to, late submissions will not be taken into account. ____________________ To Comment on the Recommendation: - Single comment: [Public Comment Form](https://kantarainitiative.org/membership/mailing/url/?u=1480&qid=1029… - Multiple comments: [Kantara-Comment-Template RIUP IPCQ Recommendation.xlsx](https://kantarainitiative.org/membership/mailing/url/?… - Send your comments via email to [Staff](mailto:staff@kantarainitiative.org) with the subject “RIUP - IPCQ WG COMMENT SUBMISSION". _____________ Intellectual Property Rights Notice: Intellectual Property Rights Notice: In accordance with the Kantara Initiative [IPR Policy](https://kantarainitiative.org/membership/mailing/url/?u=1483&qid=10… B Article 5 and the Kantara Initiative [Operating Procedures](https://kantarainitiative.org/membership/mailing/url/?u=1479&qi… Section 7.5, you have a period of 45 days to review the document for any Necessary Claims that may be implicated by the final Recommendation. Note that any submissions are deemed to be contributed under the IPR Option of RIUP: [Option Patent and Copyright Reciprocal Royalty Free with Opt-Out to (RAND)](https://kantarainitiative.org/membership/mailing/url/?u=1483&qid=102…) While there is no requirement to review your patent portfolio for Necessary Claims, please be advised that unless you provide a licensing objection in accordance with the Kantara Initiative IPR Policy Article 5 or a notice of withdrawal in accordance with Kantara Initiative IPR Policy Article 6 on or before July 23, 2026 you will have committed to the licensing provisions as set forth by the Patent & Copyright: [Option Patent and Copyright Reciprocal Royalty Free with Opt-Out to (RAND)](https://kantarainitiative.org/membership/mailing/url/?u=1483&qid=102…) IPR Policy with respect to any Necessary Claims implicated by the final approved document. [RIUP Participants](https://kantarainitiative.org/membership/mailing/url/?u=1484&… are required to make claims to IPR regarding these technical documents. Having signed the Group Participation Agreement (GPA), all members of the RIUP Work Group should be familiar with these documents, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark, and license rights that are outlined in an approved Kantara Initiative Recommendation. Kantara Initiative invites any other persons who know of any part of this Group output that would infringe on third-party intellectual property rights to disclose such infringement claims so that these claims may be provided to the Group members for resolution. If you are not a RIUP Participant, you have no IPR licensing obligation to any of these documents. To submit an Intellectual Property Rights infringement claim, email [Staff](mailto:staff@kantarainitiative.org) with the subject "RIUP IPR CLAIM". ____________________ Please contact the Kantara Initiative [Staff](mailto:staff@kantarainitiative.org) with any questions regarding this notice. We thank you for your time and interest.

1 0

Leadership Council - July 21 Call
by Amanda Gay 16 Jul '26

16 Jul '26

Hi all: The full LC will plan to meet next Tuesday, July 21 at 10 AM ET. Draft agenda here <https://kantara.atlassian.net/wiki/spaces/LC/pages/2016641042/2026+07-21+LC…>. Please forward any items for inclusion! Zoom details: https://us06web.zoom.us/j/94897867446?pwd=YSsxdjZLMzFmUmhNd2NBMnlwbEZHZz09 <https://www.google.com/url?q=https://us06web.zoom.us/j/94897867446?pwd%3DYS…> Meeting ID: 948 9786 7446 Passcode: 539355 I hope everyone is having a great summer so far! Best, -A -- Amanda Gay | Work Groups and Membership [image: Logo, company name Description automatically generated] Phone: +1 571-475-8895 LinkedIn: @KantaraInitiative

1 0

Leadership Council Q2 Reminders
by Amanda Gay 08 Jul '26

08 Jul '26

Good afternoon all: We are in the thick of summer, but work is still happening within Kantara! See below for reminders, updates, and actions. Please reach out with any questions! _______________________________________________________________ 1. Reminders: 1. Leadership Expectations: 1. Attend LC calls (or send regrets/update) 2. Vote in eBallots (LC eBallots, and if appropriate All-Member Ballots) 3. Maintain WG Slides (see Actions below) 2. Review Kantara policies as needed: 1. Code of Conduct <https://kantara.atlassian.net/wiki/spaces/LC/pages/1055227915/Code+of+Condu…> 2. Anti-Trust <https://kantara.atlassian.net/wiki/spaces/GI/pages/1089168/Anti-Trust+Guide…> 3. Consider Kantara Membership <https://kantarainitiative.org/memberships/> to increase your involvement. Benefits include the following: 1. Organizational logo or individual name listed on Kantara’s website, and the ability to use Kantara’s logo on your website 2. Voting rights in All Member Ballots regarding Kantara Recommendations and leadership 3. Charter and/or lead a Group 4. Invitation to Annual General Membership Meeting (AGM) 5. Eligibility to serve on Kantara’s Board of Directors 2. Updates: 4. Marketing/communications: Kantara has recently added a new Marketing and Communications Lead - Gracie Liberman! She has already sent out her first Kantara newsletter and will be developing a Communications plan for Kantara. If you have items for her to post about, please forward to her directly (she is CC’ed on this email!). 5. Operating Procedures Revisions: The All-Member Ballot will be closing July 9th, and will go to the BoD for ratification on July 10. 6. RIUP IPCQ: The document is still for Public Comment/IPR Review until July 23rd. 3. ACTIONS: 7. Submit leadership headshots for website to Gracie! 8. Group Slides <https://docs.google.com/presentation/d/1Zk6nE81RzPB9u6AstnPLP2IkcZejWT8y/ed…> - Maintain your Group’s slides for Kay to use at various conferences. The next round of conferences starts in September! 9. Conference attendance - Please let Gracie know of any conferences you or anyone in your Group is attending, including any relevant details on presentations/forums, etc. These will be added to the website calendar. Best, -Amanda -- Amanda Gay | Work Groups and Membership [image: Logo, company name Description automatically generated] Phone: +1 571-475-8895 LinkedIn: @KantaraInitiative

1 0

Reminder 2 - NOTICE FOR PUBLIC COMMENTS/IPR REVIEW: Inclusive Purpose Consent Query (RIUP Draft Recommendation)
by Kantara Initiative 08 Jul '26

08 Jul '26

[Unsubscribe] [https://kantarainitiative.org/membership/mailing/unsubscribe/?reset=1&jid=6… [View in your browser](https://kantarainitiative.org/membership/mailing/view/?reset=1&id=… [Kantara Initiative Logo](https://kantarainitiative.org/membership/mailing/url/?u=1469&qid=1013… Notice of Public Comment Period Dear Kantara Initiative Community: This is the second reminder regarding the Public Comments Notice detailed below. Please review the document and follow the instructions to submit comments. Thank you for your involvement in the Kantara Community! ________________________________________________________________________ This is a formal notification that the Resilient Identifiers for Underserved Population Work Group (RIUP) has approved the following document as a Group-Approved Draft Recommendation and its distribution for public comment and IPR Review: Document: Inclusive Purpose Consent Query - A Kantara Recommendation Version:1.0 Document Date: 2026-05-19 Notice and Document available [HERE](https://kantarainitiative.org/membership/mailing/url/?u=1470&qid=1013…. In accordance with the Kantara Initiative [Operating Procedures](https://kantarainitiative.org/membership/mailing/url/?u=1471&qi…, this document now enters a 45-day public comment and IPR review period in preparation for an All-Member Ballot to consider its approval as a Kantara Initiative Recommendation. This is an open invitation to comment. Kantara Initiative solicits feedback from potential users, developers, and other interested parties, whether Kantara Initiative members or not, for the sake of improving the interoperability and quality of its technical work. Public Review and IPR Review Period Opens: 08 June 2026, 3:00 PM ET Review Period Closes: 23 July, 2026, 3:00 PM ET Overview of Document/ABSTRACT: The purpose of the Inclusive Purpose Consent Query is to enable a Verifier to send sufficient information to a smartphone to enable the holder to understand the query fully and quickly. The message may suffice to acquire all the information a verifier requires for common, simple queries. At the very least, it will establish a connection to a user agent (like a digital wallet) that can continue the query process. This document is not intended to be a complete formal specification but should be treated as an explainer for understanding the requirements for a broad range of inclusive use cases. An inclusive query can be handled by all people who are entitled to access a service or other resource. To become inclusive, a query must be able to be processed even when the holder or the subject is: - Not able to communicate in the local or preferred language, - Aware but not capable of handling the requirements of digital devices, - Unable to give informed consent on their own behalf, or - In an emergency location where network access is not available. Kantara invites your review of this document and asks that you submit any comments and proposed revisions on or before July 23, 2026. As this deadline will be strictly adhered to, late submissions will not be taken into account. ____________________ To Comment on the Recommendation: - Single comment: [Public Comment Form](https://kantarainitiative.org/membership/mailing/url/?u=1472&qid=1013… - Multiple comments: [Kantara-Comment-Template RIUP IPCQ Recommendation.xlsx](https://kantarainitiative.org/membership/mailing/url/?… - Send your comments via email to [Staff](mailto:staff@kantarainitiative.org) with the subject “RIUP - IPCQ WG COMMENT SUBMISSION". _____________ Intellectual Property Rights Notice: Intellectual Property Rights Notice: In accordance with the Kantara Initiative [IPR Policy](https://kantarainitiative.org/membership/mailing/url/?u=1475&qid=10… B Article 5 and the Kantara Initiative [Operating Procedures](https://kantarainitiative.org/membership/mailing/url/?u=1471&qi… Section 7.5, you have a period of 45 days to review the document for any Necessary Claims that may be implicated by the final Recommendation. Note that any submissions are deemed to be contributed under the IPR Option of RIUP: [Option Patent and Copyright Reciprocal Royalty Free with Opt-Out to (RAND)](https://kantarainitiative.org/membership/mailing/url/?u=1475&qid=101…) While there is no requirement to review your patent portfolio for Necessary Claims, please be advised that unless you provide a licensing objection in accordance with the Kantara Initiative IPR Policy Article 5 or a notice of withdrawal in accordance with Kantara Initiative IPR Policy Article 6 on or before July 23, 2026 you will have committed to the licensing provisions as set forth by the Patent & Copyright: [Option Patent and Copyright Reciprocal Royalty Free with Opt-Out to (RAND)](https://kantarainitiative.org/membership/mailing/url/?u=1475&qid=101…) IPR Policy with respect to any Necessary Claims implicated by the final approved document. [RIUP Participants](https://kantarainitiative.org/membership/mailing/url/?u=1476&… are required to make claims to IPR regarding these technical documents. Having signed the Group Participation Agreement (GPA), all members of the RIUP Work Group should be familiar with these documents, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark, and license rights that are outlined in an approved Kantara Initiative Recommendation. Kantara Initiative invites any other persons who know of any part of this Group output that would infringe on third-party intellectual property rights to disclose such infringement claims so that these claims may be provided to the Group members for resolution. If you are not a RIUP Participant, you have no IPR licensing obligation to any of these documents. To submit an Intellectual Property Rights infringement claim, email [Staff](mailto:staff@kantarainitiative.org) with the subject "RIUP IPR CLAIM". ____________________ Please contact the Kantara Initiative [Staff](mailto:staff@kantarainitiative.org) with any questions regarding this notice. We thank you for your time and interest.

1 0

Jumping into Summer with Kantara Initiative
by Kantara Initiative 30 Jun '26

30 Jun '26

Growing Stronger, Building Trust Dear Supporter, Kantara continues to grow, and I'm excited about where we are heading. The release of Version 4 of the NIST Digital Identity Guidelines marks a pivotal moment for our industry, and I'm proud to report that Kantara is already advancing certification criteria to match it — so our community can move forward with confidence. Our Work Groups have never been more active. Since late 2025, five new Groups have formally launched, each tackling a critical frontier: Trusted Transaction Assurance, Shadow AI in the Workplace, Biometric Data, Blinding Identity Taxonomy, and Digital Identity Risk Universe. The energy and expertise our Members bring to these Groups is extraordinary. Interested in shaping the future of digital identity? Kantara Membership gives you the opportunity to charter and lead a Group, influence emerging standards, and connect with a global community of practitioners. Learn more about Membership benefits [here](https://kantarainitiative.org/memberships/). I'm also thrilled that Kantara will be present at several key industry events this summer and autumn — including Identity Week Europe in Amsterdam, Identity Week America in Washington, and our co-sponsorship of The DeepFake Summit. I look forward to seeing many of you at these events. Regards, Kay Chopard Executive Director What the Kantara Initiative accomplished in 2025 Kantara Advances NIST SP 800-63-4 Certification Program Kantara Initiative has published assessment criteria aligned to NIST SP 800-63 Revision 4 — the latest update to the NIST Digital Identity Guidelines. Criteria are now available for: - NIST SP 800-63A-4 — Identity Proofing - NIST SP 800-63B-4 — Authentication and Authenticator Management Revision 4 brings important updates, including stronger requirements for phishing-resistant authentication, expanded support for modern authenticators such as passkeys, and updated expectations for identity proofing and lifecycle management. Organizations can now pursue assessments against these Version 4 criteria, enabling early adoption while demonstrating their commitment to security, privacy, and user trust. In addition, the SP 800-63-4 Base Volume SAC and SoCA have now been published, establishing the foundational organizational criteria that apply across all Revision 4 assessments. The Base Volume incorporates common Kantara Initiative requirements and is intended to be used alongside the applicable functional [c](https://kantarainitiative.org/download-category/service-assessment-crite… sets](https://kantarainitiative.org/download-category/service-assessment-cr…. The Common Organizational Service Assessment Criteria (CO_SAC) remains applicable for SP 800-63 Revision 3 assessments, and both Revision 3 and Revision 4 certification suites continue to be available to service providers. Existing Revision 3 Trust Mark holders remain validly certified for the duration of their current certification period and may transition to Revision 4 upon renewal if desired. Organizations seeking certification are required to engage directly with Kantara Initiative, with assessor assignments managed through the program to ensure consistency and impartiality. Additionally, work continues on the development of the NIST SP 800-63C-4 Federation and Assertions criteria. Internal drafting activities are underway, and the criteria are expected to enter public review following completion of the current review cycle. Notices and Documentation Updates Strengthen Program Consistency Several[notices](https://kantarainitiative.org/notices/) were issued during the year to support the consistent operation of the program: - Notice KI#2026-01 formally incorporated passkey requirements into the SP 800-63B-3 criteria, retiring the previous accommodation notice and ensuring support for phishing-resistant authentication technologies. - Notice KI#2026-02 introduced the Assessor Assignment Policy, providing additional transparency and consistency around the engagement and assignment of accredited assessors. - Notice KI#2026-03 provided clarification regarding confirmed address requirements and their interpretation, supporting more consistent application of the criteria by applicants and assessors. Together, these updates continue to strengthen the integrity, transparency, and consistency of the certification process. Updated Documentation and Resources Throughout the year, [several supporting documents and templates](https://kantarainitiative.org/download-category/supporting-templ… were refreshed to improve usability and streamline the assessment lifecycle. These new templates are effective as of their date of publication, and older versions will no longer be available or accepted. Updates included revised: - Application Forms; - Service Description (S3A) templates; - Assessor Report templates; and - Trademark Licence Agreements (TMLA). The website was also enhanced with dedicated publication pages, updated criteria request pages, and a new Notices section, making it easier for organizations, assessors, and stakeholders to access current information and remain informed of program developments. UK Digital Verification Services (DVS) Update The UK’s Digital Verification Services framework is starting to progress at pace. The government published the pre‑release of Version 1.0 on 6 March 2026. This is the first revised statutory trust framework under the Data (Use & Access) Act, and it replaces the earlier “UK Digital Identity & Attributes Trust Framework” (DIATF). On 9 June 2026, the Department of Science, Industry and Technology (DSIT) published the full statutory release of Version 1.0 and stated that it is expected to come into force on 1 September 2026, which will open the door for certification to begin. Kantara is well placed to meet this timeline, with the processes, expertise, and assessor capacity ready to support providers as soon as the framework becomes formally available for certification. How Version 1.0 Relates to the Data (Use & Access) Act 2025 The Data (Use & Access) Act 2025 is the legislation that brought DVS onto a statutory footing. Part 2 of the Act came into force on 1 December 2025, formally moving the DVS pilot into a legally regulated environment. Key links between the Act and Version 1.0: - The Act establishes the statutory role of the DVS Trust Framework — Version 1.0 is the first publication written explicitly to align with this legal basis. - The Act enabled the creation of a statutory register of certified DVS providers. - The Act underpins the governance, oversight, and enforcement mechanisms that Version 1.0 now builds upon. What is to be introduced in Version 1.0: - A fully aligned statutory name — now formally the UK Digital Verification Services Trust Framework, matching the terminology in the Act. - New rules for Orchestration and Holder Service Providers, including requirements to share metadata about identity confidence, authentication methods, and provenance. - Support for modern authentication, including guidance on passkeys and syncable authenticators. - The new UK CertifID Trust Mark, which providers certified to Version 1 will be able to display. What Does This All Mean? Certification is already mandatory for DBS digital identity checks. Looking ahead, it’s widely expected that certification for Digital Right to Work checks, Holder Service Providers (wallets), Attribute Service Providers, and Orchestration Service Providers may also become mandatory, possibly followed by requirements in areas such as Age Assurance, Smart Data schemes, and for identity providers accessing certain government services. Regardless of these future changes, only certified providers will be eligible to appear on the statutory register — a major trust signal for the market. As of this point in time, ONLY Kantara can add providers to the register. For organisations already certified under Gamma (0.4), this is the moment to begin preparing for the uplift to Version 1.0. For organisations not yet certified, this is the moment to get in touch for us to guide you through the certification process. Five New Work & Discussion Groups: Already Delivering Following approval in late 2025, five new Groups officially launched between January and March 2026. Each addresses a priority area within digital identity: Trusted Transaction Assurance Work Group (Trusted Transaction) Bridging the gap between identity proofing and authorization, this group is developing frameworks that bind verified digital identities to legally significant actions — such as signing a mortgage, granting durable consent for care, or approving a wire transfer. It also aims to reduce market confusion around certifications and ease component integration for Credential Service Providers. The group is currently meeting regularly to develop its preliminary work plan. Digital Identity Risk Universe Discussion Group (DIRU) Already delivering: the DIRU DG has published a major community resource — the Digital Identity Risk Universe – 2026 and an accompanying methodology report, both freely available to the public. See the Publication section below for details. (Note: John is also exploring a video walkthrough of the Risk Universe as a marketing asset.) Shadow AI in the Workplace Discussion Group (Shadow AI) The rapid adoption of generative AI tools — ChatGPT, GitHub Copilot, and others — without IT approval creates real enterprise risk. Chartered in November 2025, this group has moved quickly: it has developed a preliminary outline and is now actively drafting its report, which will map causes, implications, and practical countermeasures, with a particular focus on identity-rooted detection and response. Blinding Identity Taxonomy Discussion Group (BIT) The BIT DG evolves and maintains a taxonomy for identifying and managing PII and quasi-identifiable information (QII) — supporting privacy-preserving data handling and enabling use cases such as filtering data unsuitable for AI training. The group is well into active development: a draft BIT Report 2.0 is already under review, with regular meetings focused on expanding and refining the taxonomy. Biometric Data Discussion Group (Biometrics/BDDG) Addressing the management, security, and privacy of biometric data from collection to destruction, this group will produce practical recommendations and best practices that translate complex existing standards into accessible, real-world guidance — with a focus on GDPR compliance. The group has developed a preliminary outline and is actively expanding its work plan. To participate in any of Kantara’s Groups, complete Kantara's [Group Participation Agreement (GPA)](https://kantarainitiative.org/gpa-signup/) https://kantarainitiative.org/work-groups/ancr/ New Publication: The Digital Identity Risk Universe – 2026 The Digital Identity Risk Universe Discussion Group (DIRU DG) has formally published a major new community resource: - The Digital Identity Risk Universe – 2026 (DIRU): A comprehensive spreadsheet mapping risks across the full credential lifecycle — from creation and enrollment through holder management and verification. It introduces a specialized taxonomy for emerging AI Agent/Agentic Identity risks. - The Accompanying Report: Explains the methodology behind the framework and serves as a practical guide for risk management teams building their own internal Risk Registers. Both files are published under Kantara's Non-Assertion Covenant IPR and are freely available to the public. [Download both files here.](https://kantarainitiative.org/reports-recommendations/) Editor: John Fiske https://kantarainitiative.org/work-groups/ancr/ Transparency Performance Indicators Published in IEEE — and Recognized Across the Global Stage The Anchored Notice and Consent Receipts (ANCR) Work Group's Transparency Performance Indicators (TPIs) — a Kantara Recommendation developed under the leadership of Work Group Chair and Kantara Member Salvatore D'Agostino of IDmachines — have been [published in IEEE Xplore](https://ieeexplore.ieee.org/document/11486335) following their presentation at the 2025 IEEE Symposium on Privacy Expectations (ISoPE). The paper proposes a methodology for measuring PII Controller compliance using consent record structures mapped to both technical and legal frameworks (ISO/IEC 27560:2023, GDPR, Council of Europe 108+, and others). But the TPIs haven't stopped at publication — they're already being put to work, and recognized at the highest levels. At CPDP 2026 (Computers, Privacy and Data Protection), one of the most significant annual gatherings in the global privacy community, Kantara Member and ANCR Work Group Editor Mark Lizar joined a distinguished panel — including the UN Special Rapporteur on the Right to Privacy — to present Transparency by Default: An Internet Transparency Code of Practice. The panel highlighted the urgent need for operational transparency frameworks that make accountability inspectable before identification is demanded and data begins to flow. Lizar's presentation drew directly on the Kantara TPI Recommendation as the foundation for exactly this kind of internet-scale transparency infrastructure — grounded in Council of Europe Convention 108+, a framework covering 2.5 billion people. It was a powerful call to action: the work Kantara's community has been quietly building is now being named as the solution the world needs. Meanwhile, the TPIs are also finding their way into award-winning commercial products. IDmachines, in partnership with Ones Technology (Ankara, Turkey) and Intel RealSense, applied the TPI framework to add a notice and consent layer to a real-world biometric credentialing and access control deployment. The result — [the BioAffix Vision Platform](https://www.youtube.com/watch?v=Vmiwu1M_TLQ) — earned an [Honorable Mention in the Biometrics category at the 2026 SIA New Products and Solutions Awards](https://www.securityindustry.org/2026/03/25/security-industry-assoc… at ISC West in Las Vegas. Publication. Standards recognition. A UN-level call to action. Commercial deployment. This is what it looks like when Kantara Work Group outputs reach deeply into the world. DOI: 10.1109/ISoPE67098.2025.00019 | Publisher: IEEE https://kantarainitiative.org Meet Kantara at Upcoming Conferences Kantara will be represented at three approaching significant events this year. We'd love to connect with you at any of them: The DeepFake Summit 2026 — Washington, D.C. September 1, 2026 · Kantara is a co-sponsor. An executive forum on deepfakes, synthetic identity, and agentic AI threats. Identity Week America 2026 — Washington, D.C. September 2–3, 2026 · 3,000+ professionals across biometrics, digital ID, AI, and authentication. 2026 Federal Identity Forum & Exposition (FedID) — Chantilly, VA September 15–16, 2026 · A two-day immersive forum uniting identity professionals from the federal government, private sector, and academia for strategic planning, information sharing, and collaboration. Find us at all three events. To get in touch, contact us [here](https://kantarainitiative.org/contact-us/). JOIN US! Sign up for membership of Kantara Initiative at www.kantarainitiative.org/membership

1 0

Reminder 1 - NOTICE FOR PUBLIC COMMENTS/IPR REVIEW: Inclusive Purpose Consent Query (RIUP Draft Recommendation)
by Kantara Initiative 23 Jun '26

23 Jun '26

[Unsubscribe] [https://kantarainitiative.org/membership/mailing/unsubscribe/?reset=1&jid=6… [View in your browser](https://kantarainitiative.org/membership/mailing/view/?reset=1&id=… [Kantara Initiative Logo](https://kantarainitiative.org/membership/mailing/url/?u=1461&qid=9613… Notice of Public Comment Period Dear Kantara Initiative Community: This is a reminder regarding the Public Comments Notice detailed below. Please review the document and follow the instructions to submit comments. Thank you for your involvement in the Kantara Community! ________________________________________________________________________ This is a formal notification that the Resilient Identifiers for Underserved Population Work Group (RIUP) has approved the following document as a Group-Approved Draft Recommendation and its distribution for public comment and IPR Review: Document: Inclusive Purpose Consent Query - A Kantara Recommendation Version:1.0 Document Date: 2026-05-19 Notice and Document available [HERE](https://kantarainitiative.org/membership/mailing/url/?u=1462&qid=9613…. In accordance with the Kantara Initiative [Operating Procedures](https://kantarainitiative.org/membership/mailing/url/?u=1463&qi…, this document now enters a 45-day public comment and IPR review period in preparation for an All-Member Ballot to consider its approval as a Kantara Initiative Recommendation. This is an open invitation to comment. Kantara Initiative solicits feedback from potential users, developers, and other interested parties, whether Kantara Initiative members or not, for the sake of improving the interoperability and quality of its technical work. Public Review and IPR Review Period Opens: 08 June 2026, 3:00 PM ET Review Period Closes: 23 July, 2026, 3:00 PM ET Overview of Document/ABSTRACT: The purpose of the Inclusive Purpose Consent Query is to enable a Verifier to send sufficient information to a smartphone to enable the holder to understand the query fully and quickly. The message may suffice to acquire all the information a verifier requires for common, simple queries. At the very least, it will establish a connection to a user agent (like a digital wallet) that can continue the query process. This document is not intended to be a complete formal specification but should be treated as an explainer for understanding the requirements for a broad range of inclusive use cases. An inclusive query can be handled by all people who are entitled to access a service or other resource. To become inclusive, a query must be able to be processed even when the holder or the subject is: - Not able to communicate in the local or preferred language, - Aware but not capable of handling the requirements of digital devices, - Unable to give informed consent on their own behalf, or - In an emergency location where network access is not available. Kantara invites your review of this document and asks that you submit any comments and proposed revisions on or before July 23, 2026. As this deadline will be strictly adhered to, late submissions will not be taken into account. ____________________ To Comment on the Recommendation: - Single comment: [Public Comment Form](https://kantarainitiative.org/membership/mailing/url/?u=1464&qid=9613… - Multiple comments: [Kantara-Comment-Template RIUP IPCQ Recommendation.xlsx](https://kantarainitiative.org/membership/mailing/url/?… - Send your comments via email to [Staff](mailto:staff@kantarainitiative.org) with the subject “RIUP - IPCQ WG COMMENT SUBMISSION". _____________ Intellectual Property Rights Notice: Intellectual Property Rights Notice: In accordance with the Kantara Initiative [IPR Policy](https://kantarainitiative.org/membership/mailing/url/?u=1467&qid=96… B Article 5 and the Kantara Initiative [Operating Procedures](https://kantarainitiative.org/membership/mailing/url/?u=1463&qi… Section 7.5, you have a period of 45 days to review the document for any Necessary Claims that may be implicated by the final Recommendation. Note that any submissions are deemed to be contributed under the IPR Option of RIUP: [Option Patent and Copyright Reciprocal Royalty Free with Opt-Out to (RAND)](https://kantarainitiative.org/membership/mailing/url/?u=1467&qid=961…) While there is no requirement to review your patent portfolio for Necessary Claims, please be advised that unless you provide a licensing objection in accordance with the Kantara Initiative IPR Policy Article 5 or a notice of withdrawal in accordance with Kantara Initiative IPR Policy Article 6 on or before July 23, 2026 you will have committed to the licensing provisions as set forth by the Patent & Copyright: [Option Patent and Copyright Reciprocal Royalty Free with Opt-Out to (RAND)](https://kantarainitiative.org/membership/mailing/url/?u=1467&qid=961…) IPR Policy with respect to any Necessary Claims implicated by the final approved document. [RIUP Participants](https://kantarainitiative.org/membership/mailing/url/?u=1468&… are required to make claims to IPR regarding these technical documents. Having signed the Group Participation Agreement (GPA), all members of the RIUP Work Group should be familiar with these documents, which may create obligations regarding the disclosure and availability of a member’s patent, copyright, trademark, and license rights that are outlined in an approved Kantara Initiative Recommendation. Kantara Initiative invites any other persons who know of any part of this Group output that would infringe on third-party intellectual property rights to disclose such infringement claims so that these claims may be provided to the Group members for resolution. If you are not a RIUP Participant, you have no IPR licensing obligation to any of these documents. To submit an Intellectual Property Rights infringement claim, email [Staff](mailto:staff@kantarainitiative.org) with the subject "RIUP IPR CLAIM". ____________________ Please contact the Kantara Initiative [Staff](mailto:staff@kantarainitiative.org) with any questions regarding this notice. We thank you for your time and interest.

1 0