September 2023 - Wg-ancr - mailman.kantarainitiative.org

Australian Government releases response to the Privacy Act Review Report
by Paul Templeman 28 Sep '23

28 Sep '23

Hi ANCR WG Thanks Mark and Sal for the opportunity to share the Australian perspective at 0PN Digital - Implementing Transparency & Consent to enable the Digital Commons last week. I have a bit of an update. The Australian Government has responded to the Privacy Act Review Report. See https://www.ag.gov.au/rights-and-protections/publications/government-respon…. Chapter 4 of the response is "Improve transparency and control" including consent, privacy policies and collection notices, individual rights, and ability for individuals to seek redress for interferences with privacy. An overview is below or the full report is available at https://www.ag.gov.au/rights-and-protections/publications/government-respon…. Privacy Reform - what is it? Consultation The Privacy Act Review was undertaken by the Attorney-General's Department and involved nearly three years of extensive consultation. The Report concluded that it is necessary to overhaul Australia's privacy laws, as many other countries have done, to ensure they remain fit-for-purpose in the digital age. Feedback following the release of the Report has reiterated a clear expectation that Government will strengthen privacy laws to ensure the collection, use and disclosure of people's personal information is reasonable, reflects community expectations and is adequately protected from unauthorised access and misuse. Industry and other stakeholders have acknowledged the importance of privacy reform and emphasised the need for reforms to strike an appropriate balance between enhanced privacy protections and impacts on regulated entities. What's next? The Government's response to the Privacy Act Review Report sets out the pathway for privacy reforms. The Government is committed to introducing legislation to protect the personal information of Australians in 2024. Of the 116 proposals in the Privacy Act Review Report, the Government response agrees to 38 proposals, agrees in-principle to 68 proposals and notes 10 proposals. 'Agrees in-principle' indicates that further engagement with entities and a comprehensive impact analysis is needed before the Government makes a final decision on implementation of a proposal. The Attorney-General's Department will lead the next stage of work, which will involve the development of legislative amendments informed by a detailed impact analysis and targeted consultations with stakeholders. This measured approach will ensure Government is informed of potential compliance costs for regulated entities and other potential economic costs or benefits (including for consumers) in finalising its decisions. The Government will also consider appropriate transition periods as part of the development of any legislation. While this work is underway the Attorney-General's Department will also progress implementation of non-legislative proposals, for example to develop a Children's Online Privacy Code and additional guidance to assist entities to meet their obligations. The Government will ensure there are meaningful opportunities to engage in this next phase of privacy reforms, noting there has been extensive consultation to date on many issues. Overview of themes The privacy reforms will complement other reforms being progressed by the Government, including Digital ID, the 2023-2030 Australian Cyber Security Strategy, the National Strategy for Identity Resilience, and Supporting Responsible AI in Australia The privacy reforms will be progressed under the following focus areas: Bring the Privacy Act into the digital age The reforms will bring the scope and application of the Privacy Act into the digital age by recognising the public interest in protecting privacy and exploring further how best to apply the Act to a broader range of information and entities which handle this information. Uplift protections The reforms will uplift the protections afforded by the Privacy Act by requiring entities to be accountable for handling individuals' information within community expectations, and enhancing requirements to keep information secure and destroy it when it is no longer needed. Reforms to the Notifiable Data Breaches scheme will assist with reducing harms which may result from data breaches and introduce new organisational accountability requirements to encourage entities to incorporate privacy-by-design into their operating processes. New specific protections will also apply to high privacy risk activities and more vulnerable groups including children. Increase clarity and simplicity for entities and individuals The reforms will provide entities with greater clarity on how to protect individuals' privacy, and simplify the obligations that apply to entities which handle personal information on behalf of another entity. The reforms will increase the flexibility of code-making under the Act, reduce inconsistency and improve coherence across different legal frameworks with privacy protections, and simplify requirements for transferring personal information overseas, particularly to those countries with substantially similar privacy laws. Improve control and transparency for individuals over their personal information The reforms will provide Individuals with greater transparency and control over their information through improved notice and consent mechanisms. The reforms will also explore the scope and application of new rights in relation to personal information and increased avenues to seek redress for interferences with privacy, through a direct right of action permitting individuals to apply to the courts for relief for interferences with privacy under the Privacy Act and a new statutory tort for serious invasions of privacy. Strengthen enforcement The reforms will increase enforcement powers for the OAIC, expand the scope of orders the court may make in civil penalty proceedings and empower the courts to consider applications for relief made directly by individuals. A strategic review of the OAIC and further consideration of its resourcing requirements, including investigating the effectiveness of an industry funding model and establishing litigation funds, will enhance the effectiveness of Australia's privacy regulator. Best Paul ... Paul Templeman paul(a)templeman.co

2 1

CSF call for comments
by Salvatore D'Agostino 27 Sep '23

27 Sep '23

https://csrc.nist.gov/pubs/cswp/29/the-nist-cybersecurity-framework-20/ipd We mentioned this on the call today. So I did the normal thing, a word search, and a few other comments. Transparency 0 mentions Transparent 0 mentions Consent 0 mentions Notice 0 mentions Authority 0 mentions Authorization 2 mentions Only one control Identity Management, Authentication, and Access Control (PR.AA): Access to physical and logical assets is limited to authorized users, services, and hardware, and is managed commensurate with the assessed risk of unauthorized access (formerly PR.AC) PR.AA-05: Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties (formerly PR.AC-01, PR.AC-03, PR.AC-04) (There needs to be a notice created from the assessed risk, what is assessed in this case would also be a gap, as it is information risk, and not, for example, a control impact assessment.) Also interestingly is that they do have a concentric view, all we need to do is change what is at the center. [image: image.png] Best, Sal

1 0

Updated invitation: Advanced Notice & Consent Receipt WG @ Every 2 weeks from 12pm to 1pm on Wednesday from Wed Sep 13 to Tue Sep 26 (EDT) (wg-ancr@kantarainitiative.org)
by kantarainitiative＠gmail.com 27 Sep '23

27 Sep '23

This event has been updated Changed: time Advanced Notice & Consent Receipt WG Every 2 weeks from 12pm to 1pm on Wednesday from Wednesday Sep 13 to Tuesday Sep 26 Eastern Time - New York Location Zoom https://us06web.zoom.us/j/87282263538?pwd=K0RwY1g1b3pKeHdBcXpjeExVZUFpQT09 https://www.google.com/maps/search/Zoom+https:%2F%2Fus06web.zoom.us%2Fj%2F8… Advanced Notice & Consent Receipt Working Group https://kantarainitiative.org/confluence/pages/viewpage.action?pageId=14080… Meeting bi-weekly on Wednesdays at 12:00 - 1:00 PM EST.Join Zoom Meetinghttps://us06web.zoom.us/j/87282263538?pwd=K0RwY1g1b3pKeHdBcXpjeExVZUFpQT09Meeting ID: 872 8226 3538Passcode: 255697One tap mobile+12532050468,,87282263538#,,,,*255697# US+12532158782,,87282263538#,,,,*255697# US (Tacoma)Dial by your location +1 253 205 0468 US +1 253 215 8782 US (Tacoma) +1 346 248 7799 US (Houston) +1 669 444 9171 US +1 719 359 4580 US +1 720 707 2699 US (Denver) +1 312 626 6799 US (Chicago) +1 360 209 5623 US +1 386 347 5053 US +1 507 473 4847 US +1 564 217 2000 US +1 646 558 8656 US (New York) +1 646 931 3860 US +1 689 278 1000 US +1 301 715 8592 US (Washington DC) +1 305 224 1968 US +1 309 205 3325 USMeeting ID: 872 8226 3538Passcode: 255697Find your local number: https://us06web.zoom.us/u/kd29XTe6XR Guests kantarainitiative(a)gmail.com - creator luyang1210(a)gmail.com paul.knowles(a)humancolossus.org kay(a)kantarainitiative.org tsreiniger(a)gmail.com wg-ancr(a)kantarainitiative.org View all guest info https://calendar.google.com/calendar/event?action=VIEW&eid=Z2VnZWhwZWdqY29x… Reply for wg-ancr(a)kantarainitiative.org and view more details https://calendar.google.com/calendar/event?action=VIEW&eid=Z2VnZWhwZWdqY29x… Your attendance is optional. ~~//~~ Invitation from Google Calendar: https://calendar.google.com/calendar/ You are receiving this email because you are an attendee on the event. To stop receiving future updates for this event, decline this event. Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more https://support.google.com/calendar/answer/37135#forwarding

1 0

Updated invitation: Advanced Notice & Consent Receipt WG @ Wed Sep 27, 2023 12pm - 1pm (EDT) (wg-ancr@kantarainitiative.org)
by kantarainitiative＠gmail.com 27 Sep '23

27 Sep '23

This event has been updated Changed: location Advanced Notice & Consent Receipt WG Wednesday Sep 27, 2023 ⋅ 12pm – 1pm Eastern Time - New York Location https://us06web.zoom.us/j/87282263538?pwd=K0RwY1g1b3pKeHdBcXpjeExVZUFpQT09 https://www.google.com/url?q=https%3A%2F%2Fus06web.zoom.us%2Fj%2F8728226353… Advanced Notice & Consent Receipt Working Group https://kantarainitiative.org/confluence/pages/viewpage.action?pageId=14080… Meeting bi-weekly on Wednesdays at 12:00 - 1:00 PM EST.Join Zoom Meetinghttps://us06web.zoom.us/j/87282263538?pwd=K0RwY1g1b3pKeHdBcXpjeExVZUFpQT09Meeting ID: 872 8226 3538Passcode: 255697One tap mobile+12532050468,,87282263538#,,,,*255697# US+12532158782,,87282263538#,,,,*255697# US (Tacoma)Dial by your location +1 253 205 0468 US +1 253 215 8782 US (Tacoma) +1 346 248 7799 US (Houston) +1 669 444 9171 US +1 719 359 4580 US +1 720 707 2699 US (Denver) +1 312 626 6799 US (Chicago) +1 360 209 5623 US +1 386 347 5053 US +1 507 473 4847 US +1 564 217 2000 US +1 646 558 8656 US (New York) +1 646 931 3860 US +1 689 278 1000 US +1 301 715 8592 US (Washington DC) +1 305 224 1968 US +1 309 205 3325 USMeeting ID: 872 8226 3538Passcode: 255697Find your local number: https://us06web.zoom.us/u/kd29XTe6XR Guests kantarainitiative(a)gmail.com - creator luyang1210(a)gmail.com paul.knowles(a)humancolossus.org kay(a)kantarainitiative.org tsreiniger(a)gmail.com wg-ancr(a)kantarainitiative.org View all guest info https://calendar.google.com/calendar/event?action=VIEW&eid=Z2VnZWhwZWdqY29x… Reply for wg-ancr(a)kantarainitiative.org and view more details https://calendar.google.com/calendar/event?action=VIEW&eid=Z2VnZWhwZWdqY29x… Your attendance is optional. ~~//~~ Invitation from Google Calendar: https://calendar.google.com/calendar/ You are receiving this email because you are an attendee on the event. To stop receiving future updates for this event, decline this event. Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more https://support.google.com/calendar/answer/37135#forwarding

1 0

Updated invitation: Advanced Notice & Consent Receipt WG @ Every 2 weeks from 12pm to 1pm on Wednesday (EDT) (wg-ancr@kantarainitiative.org)
by kantarainitiative＠gmail.com 27 Sep '23

27 Sep '23

This event has been updated Changed: location Advanced Notice & Consent Receipt WG Every 2 weeks from 12pm to 1pm on Wednesday Eastern Time - New York Location https://us06web.zoom.us/j/87282263538?pwd=K0RwY1g1b3pKeHdBcXpjeExVZUFpQT09 https://www.google.com/url?q=https%3A%2F%2Fus06web.zoom.us%2Fj%2F8728226353… Advanced Notice & Consent Receipt Working Group https://kantarainitiative.org/confluence/pages/viewpage.action?pageId=14080… Meeting bi-weekly on Wednesdays at 12:00 - 1:00 PM EST.Join Zoom Meetinghttps://us06web.zoom.us/j/87282263538?pwd=K0RwY1g1b3pKeHdBcXpjeExVZUFpQT09Meeting ID: 872 8226 3538Passcode: 255697One tap mobile+12532050468,,87282263538#,,,,*255697# US+12532158782,,87282263538#,,,,*255697# US (Tacoma)Dial by your location +1 253 205 0468 US +1 253 215 8782 US (Tacoma) +1 346 248 7799 US (Houston) +1 669 444 9171 US +1 719 359 4580 US +1 720 707 2699 US (Denver) +1 312 626 6799 US (Chicago) +1 360 209 5623 US +1 386 347 5053 US +1 507 473 4847 US +1 564 217 2000 US +1 646 558 8656 US (New York) +1 646 931 3860 US +1 689 278 1000 US +1 301 715 8592 US (Washington DC) +1 305 224 1968 US +1 309 205 3325 USMeeting ID: 872 8226 3538Passcode: 255697Find your local number: https://us06web.zoom.us/u/kd29XTe6XR Guests kantarainitiative(a)gmail.com - creator luyang1210(a)gmail.com paul.knowles(a)humancolossus.org kay(a)kantarainitiative.org tsreiniger(a)gmail.com wg-ancr(a)kantarainitiative.org View all guest info https://calendar.google.com/calendar/event?action=VIEW&eid=Z2VnZWhwZWdqY29x… Reply for wg-ancr(a)kantarainitiative.org and view more details https://calendar.google.com/calendar/event?action=VIEW&eid=Z2VnZWhwZWdqY29x… Your attendance is optional. ~~//~~ Invitation from Google Calendar: https://calendar.google.com/calendar/ You are receiving this email because you are an attendee on the event. To stop receiving future updates for this event, decline this event. Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more https://support.google.com/calendar/answer/37135#forwarding

1 0

Call today in 30 min
by Salvatore D'Agostino 27 Sep '23

27 Sep '23

Hi WG, https://us06web.zoom.us/j/87282263538?pwd=K0RwY1g1b3pKeHdBcXpjeExVZUFpQT09 Last minutes from github https://github.com/KantaraInitiative/WG-ANCR/blob/main/AuthC/Minutes/AuthC-0 9-14-23.md Agenda Roll (5 min) IPR (2 min) Agenda Approval (5 Min) Administration (5 Min) TPS and I (10 Min) Other Activity (20 Min) Actions (5 min) Best, Sal IDmachines 1264 Beacon Street, #5 Brookline, MA 02446 +1 617.201.4809 @idmachines https://idmachines.com Please note I have a new email certificate, please update the public key you use for encrypted messages to me. It is part of this (S/MIME) email. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 0

Fwd: Webinar host invited you to be panelist for My Webinar
by Salvatore D'Agostino 23 Sep '23

23 Sep '23

Here is the link to the hackathon today and tomorrow morning.. IDmachines 1264 Beacon Street, #5 Brookline, MA 02446 +1 617.201.4809 @idmachines ________________________________ From: Zoom <no-reply(a)zoom.us> Sent: Saturday, September 23, 2023 9:36:46 AM To: Salvatore D'Agostino <sal(a)idmachines.com> Subject: Webinar host invited you to be panelist for My Webinar [http://us02web.zoom.us/w_p/8WmmtMhDT_CD-p2DxWZNhw/8652212f-596f-4e8f-ba74-4…] Hi Salvatore D'Agostino, Webinar host invited you to be panelist for My Webinar. My Webinar Date & Time Sep 23, 2023 10:00 AM Montreal Webinar ID 861 2396 6915 Participant ID 605271 Passcode 0230506 Add to: [https://us02st3.zoom.us/static/6.3.15784/image/new/google.png] Google Calendar <https://us02web.zoom.us/webinar/tZIsdeqhqD0jG9GFXHHmcV_4ULsP9HSVpFpE/calend…> [https://us02st3.zoom.us/static/6.3.15784/image/new/outlook.png] Outlook Calendar(.ICS) <https://us02web.zoom.us/webinar/tZIsdeqhqD0jG9GFXHHmcV_4ULsP9HSVpFpE/ics?us…> [https://us02st3.zoom.us/static/6.3.15784/image/new/yahoo.png] Yahoo Calendar <https://us02web.zoom.us/webinar/tZIsdeqhqD0jG9GFXHHmcV_4ULsP9HSVpFpE/ics?us…> Please submit any questions to: sharon.polsky(a)aminacorp.ca Thank you! WAYS TO JOIN THIS WEBINAR * Join from PC, Mac, iPad, or Android Join Webinar <https://us02web.zoom.us/w/86123966915?tk=MVbL9-TlSZ6d33UL_Qbp-tJKpZcRtnu5uz…> If the button above does not work, paste this into your browser: https://us02web.zoom.us/w/86123966915?tk=MVbL9-TlSZ6d33UL_Qbp-tJKpZcRtnu5uz… To keep this webinar secure, do not share this link publicly. * Join via audio Canada: +12042727920,,86123966915#<tel:+12042727920,,86123966915#> or +14388097799,,86123966915#<tel:+14388097799,,86123966915#> Or, dial: Canada: +1 204 272 7920 or +1 438 809 7799 or +1 587 328 1099 or +1 613 209 3054 or +1 647 374 4685 or +1 647 558 0588 or +1 778 907 2071 US: +1 267 831 0333 or +1 301 715 8592 or +1 720 928 9299 or +1 206 337 9723 United Kingdom: +44 203 901 7895 More International numbers<https://us02web.zoom.us/u/keJ2aM36pw> Webinar ID: 861 2396 6915 Passcode: 0230506 [https://us02st3.zoom.us/static/6.3.15784/image/new/twitter.png] <https://twitter.com/zoom_us> [https://us02st3.zoom.us/static/6.3.15784/image/new/linkedin.png] <https://www.linkedin.com/company/zoom-video-communications/> [https://us02st3.zoom.us/static/6.3.15784/image/new/zoomblog.png] <https://blog.zoom.us/> +1.888.799.9666<tel:1-888-799-9666> Copyright ©2023 Zoom Video Communications, Inc. Visit Zoom.us<http://zoom.us> 55 Almaden Blvd San Jose, CA 95113<https://www.google.com/maps/place/55+Almaden+Blvd,+San+Jose,+CA+95113/@37.3…> [https://us02st3.zoom.us/static/6.3.15784/image/new/ZoomLogo3.png] <https://zoom.us>

1 0

Workshop Link
by Salvatore D'Agostino 22 Sep '23

22 Sep '23

To make it easy to attend and bypass registration Event Details - When: Sep 22, 2023 08:30 AM Montreal Topic: 0PN Digital Symposium — Montreal — 22 September 2023 Please click the link below to join the webinar: https://us02web.zoom.us/j/83183657519?pwd=NmtTT3NGQk90a2tBa3A2OHN6dGZidz09 Passcode: 0230506 Or One tap mobile : Canada: IDmachines 1264 Beacon Street, #5 Brookline, MA 02446 +1 617.201.4809 @idmachines

1 0

Update and off-week
by Salvatore D'Agostino 20 Sep '23

20 Sep '23

Hi WG, I presented the Transparency Performance Scheme and Indicators, which I guess becomes the TPS and the TPIs, at the monthly LC call yesterday. The work was very well received and the connection to Kantara and their conformance and compliance work was evident and appreciated. I expect comments will follow. We can do the same as a WG as well. I pointed everyone to the GitHub TPI directory https://github.com/KantaraInitiative/WG-ANCR/tree/main/TPI where you can see the pdf at version 0.9.1 I also let people know about the event. In terms of an off-week call today, I will be driving at noon, but can get on and we can coordinate the events this week. https://sept22.0pn.org/ https://sept22.0pn.org/sept23-24 I put Amanda and Karyn in the loop so they can follow along with our efforts. Thanks for all the work. Best, Sal IDmachines 1264 Beacon Street, #5 Brookline, MA 02446 +1 617.201.4809 @idmachines https://idmachines.com Please note I have a new email certificate, please update the public key you use for encrypted messages to me. It is part of this (S/MIME) email. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 0

Presentation for LC call
by Salvatore D'Agostino 19 Sep '23

19 Sep '23

Here is the deck for the LC call today, I take responsibility for any mistakes here as, this did not get a WG review... Thanks for the opportunity to present this work. IDmachines 1264 Beacon Street, #5 Brookline, MA 02446 +1 617.201.4809 @idmachines https://idmachines.com Please note I have a new email certificate, please update the public key you use for encrypted messages to me. It is part of this (S/MIME) email. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 0