Dear all, (LC cc'd pls share with your groups)
Please join us next Wednesday, 14 October, at 11:00 am 12:00 Eastern, for the first ANCR WG call on the Digital ID consent specification: the ANCR TS 27560 Extension, Release 1.
This call introduces co-regulating digital id for cross-border data transfers, digital-id interoperability and AI governance with standard machine readable transparency (aka notice records and consent notice receipts.)
There has been incredible progress this year in the notice + consent receipt space. The ANCR TS Extension is WG approved as Release 1, and has been contributed to ISO/IEC JTC 1/SC 27/WG 5 under PWI 26689. This is accompanied by a new ISO standard proposal for standardising Transparency, approved in ISOIEC JTCI/SC 44/WG 1 - Consumer Protection with privacy by design.
Both efforts now super charged with the support of the Council of Europe , Convention 108 Treaty Secretariat. This set of standards activity, is on the agenda at the next CoE plenary November 18-20, which potentially opens a global market for Kantara initiative efforts, through a common Digital-Id - Internet Transparency Code of Practice as a international transfer tool, to facilitate model contractual clauses and personal data transfers.
Thus this call is framed to invite those interested in seeing how this specification might help you implement or make interoperable Kantara Initiative specifications and protocols in this larger governance framework context which impacts digital-id. Below is a table of potential relationships in which the ANCR ISO Extension relates to Kantara efforts.
The underlying topic is moving more directly to multi-modal modes of data control authority management made possible with a machine readable notice and consent record standard defined according to internationally (soon to be) enforceable treaty.
All are welcome, including those new to the work and interested in data control centric technical topics.
Kind regards,
Mark Lizar
Group | Type | Focus | ANCR Ext Interop |
Anchored Notice & Consent Receipts (ANCR) | Work group | Consent receipts and notice records | Home of the Extension (Release 1) |
User-Managed Access (UMA) | Work group | Protocols for people to control access to their data | A notice and consent receipt anchors a UMA grant the person can withdraw |
Blinding Identity Taxonomy (BIT) | Discussion group | Taxonomy of identifying and quasi-identifying data; BIT 2.0 in progress | The receipt records which identifiers are linked and which stay blinded |
Privacy Enhancing Mobile Credentials (PEMC) | Work group | Privacy-protecting mobile credentials (mobile driving licences, wallets) | Notice before the credential is presented; the receipt stays with the holder (age assurance case) |
Trusted Transaction Assurance | Work group | Assurance for secure, reliable digital transactions | The receipt and notice event log as evidence of the transaction |
Digital Identity Risk Universe | Discussion group | Risk and threat landscape in digital identity | Notice before identification (C1) as a risk control |
Resilient Identifiers for Underserved Populations | Work group | Identity for people with limited access to traditional systems | Non-exclusion (C7): rights by receipt, no credential needed with Controller ID Records (CIR) |
Biometric Data | Discussion group | Biometric data from collection to destruction, GDPR focus | Notice and receipt for biometric collection, such as age estimation is our first Use Case |
Shadow AI in the Workplace | Discussion group | Unauthorised AI use at work | AI use recorded through AI receipts and the AI Undermark |