January 2024 - Wg-ancr - mailman.kantarainitiative.org

ANCR WG call reminder
by Salvatore D'Agostino 12 Nov '24

12 Nov '24

Dear ANCR WG, We have a very active plate of WG activities to complete by year end. Also Thanksgiving tomorrow here. Proposed Agenda Roll IPR Approve Agenda (5 min) Administration (30 mins, 10 per topic) Charter Refresh https://github.com/KantaraInitiative/WG-ANCR/blob/main/ANCR-Charter-Update-2 023.md Officer Nominations and Election Board Funding Request Technical Editor GitHub organization and administration Translation (French specifically) (Scope and Budget for above) Digital Commons White Paper (10 min). Digital Transparency Performance Scheme https://github.com/KantaraInitiative/WG-ANCR/blob/main/TPI/ANCR-Digital-Tran saprency-Scheme-v0.9.1.pdf (10 min). AOB IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com Please note our new address. Email, phones, other contacts remain the same. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

2 1

COMMENTS FOR 0- ISO/IEC - Age Assurance Standard WD 27566-1 and Benchmarking 27566-2
by MarkL 30 Jan '24

30 Jan '24

Hi ANCR, Just to let you know that we looking to progress comments for Age Assurance Benchmarking27566-2 from ANCR, which would coincide with My Comments from SCC/Canada on 27566-1. (Both attached) The standard inputs should be retrievable via the BOT-Liaison WG, if you want to take a closer look, In addition, 0PN Digital Transparency Lab will be looking to host a WHiSSPRR - Fireside on Age Assurance on February 23rd or March 1st, depending on availability, inviting Tony Allen the lead for 27566 (BSI) + equivalent in Brazil, up against some Canadian regulation on Age Assurance Bill 210, with DIACC Joni and Sharon from PACC also being invited, Stay tuned for more information, Best, Mark

1 0

Fwd: CALL FOR SUBMISSIONS: International Conference on AI and the Digital Economy, CADE 2024
by MarkL 30 Jan '24

30 Jan '24

FYI - Begin forwarded message: From: Angelika Kerlin <akerlin(a)turing.ac.uk> Subject: CALL FOR SUBMISSIONS: International Conference on AI and the Digital Economy, CADE 2024 Date: 30 January 2024 at 09:22:42 GMT-5 To: Trustworthy Digital Identity Interest Group <digitalidentityIG(a)turing.ac.uk> Dear all, This year marks a significant milestone for the International Conference on AI and the Digital Economy (CADE), as they celebrate their 10th anniversary. Over the past decade, CADE has been a great place for researchers, especially those in the early stages of their careers, to share their work, discuss ideas, and make professional connections. This year's programme will again take place in Venice, Italy, in a blended format, allowing participants to attend physically or virtually on 24-26 June 2024. We are getting in touch to let you know that this year’s call for submissions is now open with a deadline of the 3rd of March 2024. The themes cover AI in Health, AI in Finance, Digital Public Infrastructure, Smart Mobility, and Sustainability. You can submit an extended abstract (2 pages) or a full paper (6 pages). The conference proceedings will be published on IET and IEEE Xplore. More information can be found in the attachment, as well as on their website<https://warwick.ac.uk/fac/sci/wmg/news-and-events/events/wmgevents/cade2024/>. Your participation would be very welcome. Please feel free to circulate to others within your network, who may also be interested. With best wishes, Angelika Publications from the previous conferences can be accessed via the following links: CADE 2021<https://ieeexplore.ieee.org/xpl/conhome/9650934/proceeding> / CADE 2022<https://ieeexplore.ieee.org/xpl/conhome/9945911/proceeding> / CADE 2023<https://ieeexplore.ieee.org/xpl/conhome/10324414/proceeding> _____________________________ Angelika Kerlin Research Project Manager Finance & Economics Programme akerlin(a)turing.ac.uk<mailto:akerlin@turing.ac.uk> +44 203 8623 374 _____________________________ The Alan Turing Institute turing.ac.uk<http://www.turing.ac.uk/> Registered Charity 1162533 || Company Registration 09512457 || VAT no 270 0609 32 The Alan Turing Institute is a limited liability company, registered in England with registered number 09512457. Our registered office is at British Library, 96 Euston Road, London, England, NW1 2DB. We are also a charity registered in England with charity number 1162533. This email and any attachments are confidential and may be legally privileged. If you have received it in error, you are on notice of its status. If you have received this message in error, please send it back to us, and immediately and permanently delete it. Do not use, copy or disclose the information contained in this message or in any attachment. DISCLAIMER: Although The Alan Turing Institute has taken reasonable precautions to ensure no viruses are present in this email, The Alan Turing Institute cannot accept responsibility for any loss or damage sustained as a result of computer viruses and the recipient must ensure that the email (and attachments) are virus free. While we take care to protect our systems from virus attacks and other harmful events, we give no warranty that this message (including attachments) is free of any virus or other harmful matter, and we accept no responsibility for any loss or damage resulting from the recipient receiving, opening or using it. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or be incomplete. If you think someone may have interfered with this email, please contact the Alan Turing Institute by telephone only and speak to the person dealing with your matter or the Accounts Department. Fraudsters are increasingly targeting organisations and their affiliates, often requesting funds to be transferred to a different bank account. The Alan Turing’s bank details are contained within our terms of engagement. If you receive a suspicious or unexpected email from us, or purporting to have been sent on our behalf, particularly containing different bank details, please do not reply to the email, click on any links, open any attachments, nor comply with any instructions contained within it, but contact our Accounts department by telephone. Our Transparency Notice found here - https://www.turing.ac.uk/transparency-notice sets out how and why we collect, store, use and share your personal data and it explains your rights and how to raise concerns with us. You're receiving this message because you're a member of the Trustworthy Digital Identity Interest Group group from The Alan Turing Institute. To take part in this conversation, reply all to this message. View group files<https://outlook.office365.com/owa/digitalidentityIG@turing.ac.uk/groupsubsc…> | Leave group<https://outlook.office365.com/owa/digitalidentityIG@turing.ac.uk/groupsubsc…> | Learn more about Microsoft 365 Groups<https://aka.ms/o365g>

1 0

Re: Jan 24 AdHoc Call - ANCR Use Case Call for 27091: Security & Privacy in AI
by MarkL 24 Jan '24

24 Jan '24

Hi Sharon, Thanks for point that out, I didn’;r make it clear, this review is for a review of the use cases out there, so that use experts can provide security and privacy use cases. So you are spot on.with your response. - Mark On 22 Jan 2024, at 13:44, ccbw(a)duck.com wrote: Thanks for including the use cases. I’ve reviewed a few and am concerned that some — which speak to tracking individuals and their preferences — do not list any "threats & vulnerabilities” much less any privacy risks to the individual. Without fulsome consideration and disclosure of the privacy and human rights risks that individuals will face from the AIs, the status quo is further endorsed and entrenched. My 2c. Sharon Polsky DPO BIS MAPP • President — Privacy and Access Council of Canada<http://pacc-ccap.ca/> • Vice-Chair, Digital Governance Council Technical Committee <https://dgc-cgn.org/standards/> for Privacy & Access Control Standards<https://dgc-cgn.org/standards/> • Vice-Chair, Digital Governance Council Technical Committee<https://dgc-cgn.org/standards/> for Canadian Information Privacy Protection Framework<https://dgc-cgn.org/standards/> • PbD — Privacy By Design Ambassador<http://web.archive.org/web/20121012080217/http:/privacybydesign.ca/ambassad…> On Jan 22, 2024, at 6:07 AM, MarkL <mark_at_0pn.org_ccbw(a)duck.com> wrote: Hi All, As mentioned on the last call, this coming Wed we will have a call working on submitting use case via the Kantara ISO liaison to expert ad-hoc committee, for security and privacy in AI. In the Hi All, As mentioned on the last call, this coming Wed we will have a call working on submitting use case via the Kantara ISO liaison to expert ad-hoc committee, for security and privacy in AI. In the last ISO-Ad-Hoc for 27091 (held last week) there was a review of 132 and 187 AI use cases were reviewed for relevance to security and privacy, (See attached summary) WG5 experts have invited us to provide our ANCR privacy and security AI use case and it’s an opportunity to apply ANCR work. This brings up a number of items if we were to participate via ANCR, 1, administrative liaison 2. Use case development Attached is a use case info and template/pdf. Best, Mark <ISO-IEC JTC 1-SC 27-WG 5_27091 meeting 240117 Contribution existing use cases.pdf><ISO-IEC JTC 1-SC 27-WG 5_27091 meeting 240117 Contribution study methodology.pdf>_______________________________________________ A Community Group mailing list of KantaraInitiative.org Wg-ancr mailing list -- wg-ancr(a)kantarainitiative.org To unsubscribe send an email to staff(a)kantarainitiative.org List archives -- https://mailman.kantarainitiative.org/hyperkitty/list/wg-ancr@kantarainitia… ______ Group wiki -- https://kantara.atlassian.net/wiki/spaces/Wg-ancr

2 2

FYI - BiT Supplement
by MarkL 23 Jan '24

23 Jan '24

HI All, Paul has submitted a concrete list of what data is considered ultra-sensitive and Blinding Identity Taxonomy is a practice to mitigate clear text use of identifiers in this attached draft supplement. FYI The supplement is currently in the review phase with the Kantara Leadership Council and will be openly discussed in their next meeting on Feb 20 Best, Mark

1 0

ISO Liaison
by Salvatore D'Agostino 23 Jan '24

23 Jan '24

Hi WG, I wanted to remind folks that in order to access ISO drafts you need to go through this page. https://kantara.atlassian.net/wiki/spaces/lsc/overview?homepageId=4456453 Thanks, Sal

1 0

Re: Jan 24 AdHoc Call - ANCR Use Case Call for 27091: Security & Privacy in AI
by ccbw＠duck.com 22 Jan '24

22 Jan '24

Thanks for including the use cases. I’ve reviewed a few and am concerned that some — which speak to tracking individuals and their preferences — do not list any "threats & vulnerabilities” much less any privacy risks to the individual. Without fulsome consideration and disclosure of the privacy and human rights risks that individuals will face from the AIs, the status quo is further endorsed and entrenched. My 2c. Sharon Polsky DPO BIS MAPP • President — Privacy and Access Council of Canada <http://pacc-ccap.ca/> • Vice-Chair, Digital Governance Council Technical Committee <https://dgc-cgn.org/standards/> for Privacy & Access Control Standards <https://dgc-cgn.org/standards/> • Vice-Chair, Digital Governance Council Technical Committee <https://dgc-cgn.org/standards/> for Canadian Information Privacy Protection Framework <https://dgc-cgn.org/standards/> • PbD — Privacy By Design Ambassador <http://web.archive.org/web/20121012080217/http:/privacybydesign.ca/ambassad…> On Jan 22, 2024, at 6:07 AM, MarkL <mark_at_0pn.org_ccbw(a)duck.com> wrote: DuckDuckGo did not detect any trackers. More <https://duckduckgo.com/-AfbRryfaswqENWPS6jOkjZauDmjumUSaympnaaOznAEt2SBlID5…> Report Spam <https://duckduckgo.com/-AfbRryfaswqENWPS6jOkjZauDmjumUSaympnaaOznAEt2SBlID5…> Hi All, As mentioned on the last call, this coming Wed we will have a call working on submitting use case via the Kantara ISO liaison to expert ad-hoc committee, for security and privacy in AI. In the last ISO-Ad-Hoc for 27091 (held last week) there was a review of 132 and 187 AI use cases were reviewed for relevance to security and privacy, (See attached summary) WG5 experts have invited us to provide our ANCR privacy and security AI use case and it’s an opportunity to apply ANCR work. This brings up a number of items if we were to participate via ANCR, 1, administrative liaison 2. Use case development Attached is a use case info and template/pdf. Best, Mark <ISO-IEC JTC 1-SC 27-WG 5_27091 meeting 240117 Contribution existing use cases.pdf><ISO-IEC JTC 1-SC 27-WG 5_27091 meeting 240117 Contribution study methodology.pdf>_______________________________________________ A Community Group mailing list of KantaraInitiative.org Wg-ancr mailing list -- wg-ancr(a)kantarainitiative.org To unsubscribe send an email to staff(a)kantarainitiative.org List archives -- https://mailman.kantarainitiative.org/hyperkitty/list/wg-ancr@kantarainitia… ______ Group wiki -- https://kantara.atlassian.net/wiki/spaces/Wg-ancr

1 0

Jan 24 AdHoc Call - ANCR Use Case Call for 27091: Security & Privacy in AI
by MarkL 22 Jan '24

22 Jan '24

Hi All, As mentioned on the last call, this coming Wed we will have a call working on submitting use case via the Kantara ISO liaison to expert ad-hoc committee, for security and privacy in AI. In the last ISO-Ad-Hoc for 27091 (held last week) there was a review of 132 and 187 AI use cases were reviewed for relevance to security and privacy, (See attached summary) WG5 experts have invited us to provide our ANCR privacy and security AI use case and it’s an opportunity to apply ANCR work. This brings up a number of items if we were to participate via ANCR, 1, administrative liaison 2. Use case development Attached is a use case info and template/pdf. Best, Mark

1 0

Re: Call Agenda
by MarkL 17 Jan '24

17 Jan '24

Hi FYI - I might be couple min late, Mark In terms of TPS we need to discuss scope , PS - Here is some clip/edits on that from me. For reference, NOTICE This specification relies on (open access to) ISO/IEC 29100 Security and privacy techniques, to generate a notice receipt, which is stored in an ANCR consent record format for conformity assessment as specified in the Kantara Initiative Consent Receipt v1.1<https://kantarainitiative.org/download/7902/>.[1]<applewebdata://161B40AB-D6EE-456B-97E0-5D8BD5DB02DE#_ftn1> Conditions for use License Condition: This specification is for creating an ISO/IEC 29100 conformant record which is then used for assessing compliance with legal instruments and ISO/IEC standards 29100 security and privacy framework and 29184 Online privacy notice and consent. The compliance scheme international baseline is focused on digital transparency and consent adequacy performance. The ISO/IEC 29100 standard is compatible and interopeble with the international Council of Europe 108+, and GDPR Section 1 Transparency and modalities, as there are mirrored in these instruments ________________________________ [1]<applewebdata://161B40AB-D6EE-456B-97E0-5D8BD5DB02DE#_ftnref1> Consent receipt v1, CISWG Kantara Initiative https://kantarainitiative.org/download/7902/ 1 TERMS & DEFINITIONS Normative to 29100 and 29184 compliance and conformance assement nativel. In the TPS scheme, a 29100 conformant record is generated, then applied to measure the operational performance, which can then be compared against international baseline, or national baseline., , for Compliance it can be applied against any privacy regulation for a standard compliance rule set, and conformity assessment framework. Council of Europe, Convention 108+, The normative language for the TPI Scheme is defined by ISO/IEC 29100 which extends the 27002 security standard framework. The ANCR Record Framework is used to specify Transparency Performance Indicators (TPIs) and has evolved from the Kantara Minimum Viable Consent Receipt Specification in Kantara since 2013. \ On 17 Jan 2024, at 09:40, Salvatore D'Agostino <sal(a)idmachines.com> wrote: Hi ANCR Leadership, We have a call at noon. Suggested agenda 1. Roll 2. IPR 3. Agenda Approval 4. TPS review 5. TPS Scheme profile 6. Controller Credential and AuthZ roadmap 7. NIST and other comments 8. Other activity

1 0

Call reminder
by Salvatore D'Agostino 17 Jan '24

17 Jan '24

Hi ANCR WG, We have a call at noon. Suggested agenda 1. Roll 2. IPR 3. Agenda Approval 4. TPS review 5. TPS Scheme profile 6. Controller Credential and AuthZ roadmap 7. NIST and other comments 8. Other activity https://us06web.zoom.us/j/87282263538?pwd=K0RwY1g1b3pKeHdBcXpjeExVZUFpQT09

1 0