- Wg-ancr - mailman.kantarainitiative.org

NIST NCCoE mDL update
by Salvatore D'Agostino 15 Dec '25

15 Dec '25

This is tomorrow. Mobile Driver's License Project Update Webinar Registration here if interested. https://nist.zoomgov.com/webinar/register/WN_8lw8qrPrQTCdaedOrKrCjQ IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 0

Can the GPC standard eliminate consent banners in the EU?
by Salvatore D'Agostino 10 Dec '25

10 Dec '25

0 *H÷ 010 `He0 *H÷ $eContent-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Working draft TPIs call much of this out and map it to 27560 and other frameworks, I am working now to show mappings to this and will share with the group. https://arxiv.org/pdf/2512.08856 IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender. ü0`0H BE#ÈDµ0 *H÷ 0J10 UUS10U IdenTrust1'0%UIdenTrust Commercial Root CA 10 140116181223Z 340116181223Z0J10 UUS10U IdenTrust1'0%UIdenTrust Commercial Root CA 10"0 *H÷ 0 §PÞ?=Ô3FñoQa²©Og]ÙSÝ(Ù×ðÿ®Crùµ]|ÁBá1PtÑ |Í!«Câ¬^nó Z2œ¢ëùè\ ìÿÒ¯q³ŽSNïŒœìO20K^WÄSÂöÙb+¿$bßÃž)KIx<`"üÚ6ÈÂ¢Ô,Tg5ns¿Xð€Ýå°¢&zÊà6¥õý·ï®?@õmZýÎ4Ê$Üt#]3]Ä%ö0Ý]àÕGœŽë¡»IIØ[óä$äbOOÁ¯tšÑrjzIÌŽFyÆ±ÚYúu!eÝVÎû«¥`ÄùR°œù+# #v;÷3áÉóiùK¢àNŒ~9÷Dp~þZå±¬ÑÌò5åIIÊVÉ=û};ÁÂMÉO7é¡jßb.Ë5Qy,È%8ôúK§\Òã 9Jt|ÕYÂ?N\Rô=÷Rñê£¬ýI4(óA:îèÞÿ_ºËèò¹P`À1ÓsåïŸ í3tŸ ÄglðzUFN§ô>áöØ á3d+c×2^ùÀ{xoŒùxz×rtUtx±ºánpºO ºhÃ{ÿ1ðs==*±A þMeky3Ž×£B0@0Uÿ0Uÿ0ÿ0UíDÀÓðî€{ŸBç&TÈ6v0 *H÷ ®2öŠK|Dva'(Í^Tï%Œãù)×®háXï..~SR¶\êºP×ßa æÎÁò7x°_³¢sž8Í>°žûÀÏ±òì--Ììª³ª`-;Ã=WužÓ0Í`ÓTñMfÀ]t@£î~ÂwèÁ§]RíÉÝ%mú©í£:4ÐY{ÚíPó5¿íëM1Ç`ôÚñâHâÆÅ7ûúuYf1G)Úvé®ï¹Q÷#ib<åU6×Tÿñ¹]ÎÔ#oØEJ[eïÝ§ Ë¥%Ž ùð¢ÒôÈt¡*HeÛÄâ%}ëŸ[ TQJSì]Ê3íbýEÇ/[ÜX 9æú×þŠí=JBtÔÃwYsÍFŸU8ïúè2êX"Þ8ÃÌŒmÉ3:j i? Èêrc#œm<àILª¢¹*6xíÃèFâ&YDuÙuQÍa`Ë]ù"Mæãö[»®ÍÊJk^óQát+é~'§ÙINø¥Û%cbÉ3gk<ÆÞšÍð7qò«üAõÁì7] åNïú±\8¥JáÜ8-<Ü«ÕJîÑplÌîôWøºn00 @žáê<zÌ>BO0 *H÷ 0:10 UUS10U IdenTrust10UTrustID CA A140 240425192606Z 260426192506Z0M1!0 *H÷ sal(a)idmachines.com1(0&UA01410C0000018F16B8E1DC00130CBB0"0 *H÷ 0 êPV_FŒÞÇYÞ»1w@ ÿÈÈr/näœ»uoBŠZ@^üÈ »wýVá!ó}gk° >:¥4:ütÅe"°³XÉº&XºðpÓ²>ºEÍ?z ¬b^5á¯ôRiÓïVOgLaèÕ².úrÑF~ÃöÕ?ô5,ËÅú2¯áâœú"EÆšŽ5õ4Åk~CP*ÒfnTnhÄÈ*£}ÞIºÝ€VÛÄTÞÄEh\8ºº ù]BÊÑÈQi1¢/vNþŠÆk'5²;6ÿËènë®0 |=£00Uÿ00Uÿ 0+x0v00+0$http://commercial.ocsp.identrust.com0B+…U#0ÂÔD qÏHVŸh8\§·÷EŒ0#U 00 g0 `Hù/0EU>0<0: 8 64http://validation.identrust.com/crl/trustidcaa14.crl0U0sal(a)idmachines.com0U6(Óqï/ØD@Ø;lmXæSE~0U%0 +0 *H÷ °`ó0Äùê2`'3V-ŠÔý.ÛvéñNF$~L/2A2õþèC(á£Ãüûdï\×î ;!)GùÓ¬NÍÏÐÖ®êòrš¥%]TaË#ÑQ÷²Ö/ªÆÛä$]IÙNØCÓ*Yµ°ôHàî+ÈŠå£ªaóòœyJl[RU*wœZºé%¹v9N6¬N}íà³so4=µ#Ü)}MÅQWãQüÊoHÖþÿ©ðMoÃŠÌ^ªê,®j³± Li;I)¡Øâ&È:÷€ôÿÕç<fëñA±°ßÙm°x~š-Çu<Îý>>U±5íkªmÀÇÏë|Ô`îMEa³©)&sGriûi=Ñïfhµîuø$ÐqÃ 6ÅÆ<A<šÄÞAr7À¢dŒÀ£0ŠbZÍ»ÄÏž.î£ú§Bì)! Ûª¬Éã#jÕäbßúätâV\1èÑÄN ÓÝÝ ^ÐGÜ]šb¹ÜÞFûn}Ácô2ŽÅ]OÝ 1ö)ÉË ."La\W!!ìRj[Ø@ðÒ{ìKÆ+ÜZ3Ù%¯Áf{"ÀË7WF¯\¬1vyÓŽÄ0ô0Ü @ÿÒiÚwÂéÕMM0 *H÷ 0J10 UUS10U IdenTrust1'0%UIdenTrust Commercial Root CA 10 230816192846Z 330812192845Z0:10 UUS10U IdenTrust10UTrustID CA A140"0 *H÷ 0 è©õŒ±éäÙËíX€ËF`eð¬ûÃA`kX»0DÙ9bÜrÁñRñÕ×«²3È÷6u/!²Öa§? Œ§8lxn×î%ûf¬<²Ñ»X$=-Ÿà§ÆÍ£EðiùëžÅFÖ{ePH»òÒßqEK tG%£¹yP2`A6ìL[Nä\ÍÒ§»Ó À[:«CQR ãL|70ídj¢Et«¹}Ì u÷@ òxb× Æ°K=°1dªØØWÐ.ïvkª r Xý(bšFr|qG Ôñ³ÿ£|\3òÚtÈ:ÒXTßŒôBp`¡Â`@±[xoÄR^.W°ö@ÁÃé7¯Ì;Œ=Us¯Ø$YÂîníºË*tÅùÛò\ oþåê'Y. xp,¬\¿åù!³I.EÛË7ï¢±ßÔh[P:4£ÿ]|×2`vZXtZ+cÒŒ~ÚÖP!!4Ó3aózG]wËí=.DÜ"X¯jë]êq?å§â!»aææVBJFQCj)(ñ" êÀÈ"©&?žR§gßû--Ùùt=µK7w¬eÀ#×k%ã3Ö)ŠÁåwsšxh:ÂÝ 8Ÿmí&Û5®i"\OŽEÝ£ä0à0Uÿ0ÿ0Uÿ0+}0{00+0$http://commercial.ocsp.identrust.com0G+0;http://validation.identrust.com/roots/commercialrootca1.p7c0U#0íDÀÓðî€{ŸBç&TÈ6v0_U X0V0TU 0L0J+>https://secure.identrust.com/certificates/policy/ts/index.html0JUC0A0? = ;9http://validation.identrust.com/crl/commercialrootca1.crl0UÂÔD qÏHVŸh8\§·÷EŒ0AU%:08++ +7 +7 +7 0 *H÷ ò][i]ãR®hÝE#+ 9q7%,Lya`VRÐÛ|ìAs«ÊœkYPÄÜdw S_ÇS¡Šá°èö(1Ü@ žæŒ&tš-B9Ì§åÚTt³Ý¿xQ¿0_¬óã°lÏ>Çc@±]NDì[£]ùb9"fkj¬ØçÀÉ¬Å»µû]5O®šªJ}ø@/Sä":MÄ ¥ÜIpÎ-'- WÌ»/MNÎŸaŒ@,µtí ¿ÛøÎxÒ]ªK'Eh2»ëô¬EØÍìÁjìñK³Ô g£JGÌüž«b]aÕ6ì·»m>Ë¡Ér"HA)ãÔ®r"Dë$\4Áìwš"0ØëQ%DœÐgëZÏ]\×¹IŽ¶l#@0â èÜ;£_àº,÷íèjA=UéOÆ0üôÈÖAg!Y6 ô*s!YTÉŒ¿é©J^íxàÝN}ý+Š°L%Rmü?â/[ìs$ßÃÿeZ((ôjdÓ±x*EB;2SšDåêìÄXyÈÍÏ3ké/ÒysáÎZªf²žÍ~º£±}EÐ*)K]b8NU¢f1<080N0:10 UUS10U IdenTrust10UTrustID CA A14@žáê<zÌ>BO0 `He ¿0 *H÷ 1 *H÷ 0 *H÷ 1 251210194349Z0/ *H÷ 1" 1ÎDæ|cÀžÎ,'áµÌëÊ>ÕüB/Î©÷CZ0] +71P0N0:10 UUS10U IdenTrust10UTrustID CA A14@žáê<zÌ>BO0_*H÷ 1P N0:10 UUS10U IdenTrust10UTrustID CA A14@žáê<zÌ>BO0 *H÷ 100 `He*0 `He0 *H÷ 0 `He0*H÷ 0 *H÷ @0 `He0 `He0 `He0+0 *H÷ ka=©ÿ 9Yi=tãf÷ú6?ë}êíî.]hXø(³ö7óôHÏoÒô4Kt.4ü<Š3CËóÙZh]8Êðg<®Ë)/Ê&>¶bÇ{Þt|·SÜ<V³ÆÆCë*C\¬yÜH*kL_6³y[²YQ-ðØ·ìúâŒÒ<ì2^âÙµ~ÆØíîv³jG{àpÉjwëéŽÎóúØ(ø'tëÔ}ÈeucÓB çŒÿ\å-Ná ¥Õqýú"ëU<(+€.÷Êô-æõ©Õ®î6£_<èy

1 1

IEEE Digital Privacy Presentation today at 4pm
by Mark Lizar 04 Dec '25

04 Dec '25

Hello All, Just a heads up there is a IEEE Digital Privacy presentation today which i am presenting on the update to ANCR WG, and the 27560 MVCR-ANCR Digital Privacy Profile due for submission on Dec 24, which has extensions for ISO security and privacy of genAI, and a security and privacy of digital twins use case using the 27560/ANCR PII controller identity record, which is also used for the ANCR Transparency Performance Indicator - Benchmark Conformance and Compliance Report. Everyone is welcome, Executive Director Digital Transparency Lab Mark 4pm today IEEE Digital Privacy cheduled Zoom meeting. Join Zoom Meeting https://us06web.zoom.us/j/85629922168?pwd=TQxdjivkqH5wMi9gVOC4gdL5savz3k.1 Meeting ID: 856 2992 2168 Passcode: 178595

1 0

ANCR WG call reminder - tomorrow 23rd, April / 1.00pm EST
by Gigi Agassini 02 Dec '25

02 Dec '25

Dear ANCR WG. This is a friendly reminder about our meeting scheduled for tomorrow at 1:00 PM EST. Agenda: Please find the agenda here: Agenda Link<https://kantara.atlassian.net/wiki/x/DQBYOg> Call Link: Join the Meeting<https://us06web.zoom.us/j/87282263538?pwd=K0RwY1g1b3pKeHdBcXpjeExVZUFpQT09> I look forward to seeing you all tomorrow. Kindest Regards, Gigi Agassini

1 7

AGM slides
by Salvatore D'Agostino 25 Nov '25

25 Nov '25

Here are the AGM slides, the formatting got a bit muddled when I copied them from the overall deck, ignore that and let me know if you want to suggest any comments, not sure these caught all the comments from the last call. https://docs.google.com/presentation/d/1C872JKhC8fflmM7Qv1JxPsToP1ALyMkBA8g… you should have direct access with the link, let me know if there are any issues. Best, Sal IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 0

Cancel call
by Salvatore D'Agostino 19 Nov '25

19 Nov '25

Hi all, Sorry for the late notice I am at a conference in NYC and won't be able to make the call today I know Gigi is on NYC as well Let's work via group email thread on any active topics I will follow up with email this week Again, my apologies for the late notice. Best Sal Get Outlook for iOS<https://aka.ms/o0ukef>

1 0

AGM
by Salvatore D'Agostino 18 Nov '25

18 Nov '25

Here is the link to register for the Annual General Meeting on 9 December. Best, Sal IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 0

Invite to Presentation Thursday 4pm UTC & IPR Clause for Review
by Mark Lizar 10 Nov '25

10 Nov '25

Dear WG, I am presenting at the Eclipse privacy model group this Thursday, aiming to fully draw upon the ANCR body of work to present Digital Transparency by Default as a universal privacy model pattern for glass-boxed data governance. In this model I would like to present ANCR as an id-governance transparency and consent pattern, that can be implemented as a 27560 profile, to complete the original consent receipt work and try to Cleary explain the difference. Promoting the ANCR work, the consent receipt as intended, and this 27560 ANCR information structure for digital transparency by default and am leaning into this a path towards an international Digital Trust for AI Code of practice. (To use common buzzwords) To this end I am aware of a number of parties that might be interested in, or maybe directly overlapping with the ANCR model, besides the ISO/IEC 27560 Committee and W3C DPV, there is UN CEFACT, the Canadian Standards Council of Canada, the Digital Governance Standards Institute, also potentially Australian Regulators. Building off the last WG call, I have review the current IPR license, and it seems to me that we could use the TPI-Report as mechanism in the WG to register a members ANCR implementation, for a development license. And that with a few updates - might be able to update it to a international / rather than US specific FRAND, Event details Topic: Models4Privacy Mtg #16 Date: Thu, Nov 13, 2025 Time: 16:00 UTC: Join Zoom Meeting: https://eclipse.zoom.us/j/85805999825?pwd=TQKPFO9bbHwQa8VjkdWfwBIwLCbn8Z.1 Meeting ID: 858 0599 9825 Passcode: 879001 Audience: Privacy officers, regulators, policy leaders, product and risk teams Best Regards, Mark PS. My Action Item from last meting - to review IPR - Rand, <https://kantara.atlassian.net/wiki/spaces/WA/pages/215285761/WG+IP+License> and clauses, Here is the text for attribution from Sal for TPI “ This registration and referenced artefacts implement the Kantara Initiative ANCR (Anchored Notice and Consent Receipt) Work Group specifications under the Reciprocal Royalty‑Free with Opt‑out to RAND license. TPI assessments and reports comply with the ANCR WG IP Policy to ensure transparent and open use of the specification for measuring transparency performance indicators.: Draft Text from Me, for ANCR model and Pattern development presentation on Thursday, "The ANCR privacy model pattern presented here complies and conforms with the ANCR WG TPI-R, and the ANCR WG IPR, this provides DTL with a valid ANCR Development license, that complies with Kantara Initiative IPR Requirements (Article 2), to enable the ANCR Copyright (Article 3), (see below) “ My Recommendation @Tim R - what do you think? I suggest we register these on the wiki during a meeting, and update the IPR Policy to be international instead of the 3 USA specific, so that there is a valid grant for the work we are presenting, with a process to validate more, as long as conformant with the KI requirement to be a steward of the work, achieved with the ANCR TPI-R, Note some funny references The parties hereto acknowledge that works created by employees of the Federal Government are not subject to copyright protection within the United States and may be copied or used by interested parties. Or, 4.1, use and license rights to the United States Government’s interest in any applicable patent rights developed in whole or part by its employees or contractors are subject to and governed by Federal law and regulation. Terms of this Option are applicable to Federal employees, agencies, or contractors to the extent that they do not conflict with Federal law or regulation, and if Participant is a Federal agency or contractor it agrees to use its best efforts to exercise whatever discretion granted to it by Federal law and regulation to make such patent rights available on terms consistent with the principles of this Option. *Sections from the IPR Policy) ARTICLE 2: DEVELOPMENT LICENSES Each Participant hereby grants to each other Participant a limited, irrevocable, non- exclusive, worldwide, no-fee, royalty-free right and license of such Participant’s Licensed Materials and under any of the Participant’s claims that would be Necessary Claims if the Licensed Materials were included in an Corporation Recommendation Technical Specification solely to conduct the work of the Group up to the point at which the Members approve (or reject) a Final Draft Technical Specification recommended by the Group in question. ARTICLE 3: COPYRIGHT Each Participant hereby grants to all other Participants an irrevocable, perpetual, non- exclusive, worldwide, paid-up copyright license to reproduce, display, perform, prepare and have prepared derivative works based upon, distribute and sublicense its Licensed Materials included in the specific Corporation Recommendation and derivative works thereof, including the right to authorize Subsidiaries to do any, some or all of the foregoing, and including under any copyright interest such Participant holds in the Corporation Recommendation that is distinct from its copyright interest(s) in the Licensed Materials included in such Corporation Recommendation; provided, however, that each Participant acknowledges that the Kantara Initiative seeks to act as the steward for defining and revising Corporation Recommendations, and no Participant shall take any actions under the foregoing license, including but not limited to granting sublicenses to third parties, that would be inconsistent with this intention. The parties hereto acknowledge that works created by employees of the Federal Government are not subject to copyright protection within the United States and may be copied or used by interested parties. digital identfication anchor framework the ISO/IEC 27560 ANCR record information structure

1 0

FW: [KI-LC] REMINDER--ACTION REQUIRED - eBallot to Approve the Shadow AI Discussion Group Proposal
by Salvatore D'Agostino 10 Nov '25

10 Nov '25

Hi WG, I would like to see if there is WG consensus to approve the Shadow AI DG. I am in favor, and want to make sure our WG vote is counted. Hope everyone is having an enjoyable weekend. Best, Sal IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender. From: Amanda Gay <amanda(a)kantarainitiative.org> Sent: Friday, November 7, 2025 11:00 AM To: lc(a)kantarainitiative.org Subject: [KI-LC] REMINDER--ACTION REQUIRED - eBallot to Approve the Shadow AI Discussion Group Proposal Good afternoon all: This is a reminder that the eBallot to approve the Shadow AI Discussion Group Proposal<https://docs.google.com/document/d/1lcICXCzVG42YiwmYYJVSzEWkkuFhC8rt/edit?u…> is now open. Motion: To approve the Shadow AI Discussion Group Proposal Wiki Record<https://kantara.atlassian.net/wiki/spaces/LC/pages/1244037156/05+November+2…> Vote here: eBallot<https://www.surveymonkey.com/r/KS5H8CZ> (Reminder--Only 1 vote per Group. At present, we have 4 active groups and 1 BoD vote.) Open: Wednesday, November 5, 2025, 3PM ET Close: Tuesday, November 11, 2025, 3PM ET Please reach out with any questions or concerns! -- Amanda Gay | Work Groups and Membership <https://lh7-rt.googleusercontent.com/docsz/AD_4nXfHwJ-rzpysEzGWLZ07DoUVltjG…> Phone: +1 571-475-8895 LinkedIn: @KantaraInitiative

5 5

FW: [KI-LC] ACTION REQUIRED - eBallot to Approve the Shadow AI Discussion Group Proposal
by Salvatore D'Agostino 05 Nov '25

05 Nov '25

Ballot for Shadow AI DG. IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender. From: Amanda Gay <amanda(a)kantarainitiative.org> Sent: Wednesday, November 5, 2025 3:00 PM To: lc(a)kantarainitiative.org Subject: [KI-LC] ACTION REQUIRED - eBallot to Approve the Shadow AI Discussion Group Proposal Good afternoon all: Thank you for your patience! I am happy to announce that the eBallot to approve the Shadow AI Discussion Group Proposal<https://docs.google.com/document/d/1lcICXCzVG42YiwmYYJVSzEWkkuFhC8rt/edit?u…> is now open. Motion: To approve the Shadow AI Discussion Group Proposal Wiki Record<https://kantara.atlassian.net/wiki/spaces/LC/pages/1244037156/05+November+2…> Vote here: eBallot<https://www.surveymonkey.com/r/KS5H8CZ> (Reminder--Only 1 vote per Group. At present, we have 4 active groups and 1 BoD vote.) Open: Wednesday, November 5, 2025, 3PM ET Close: Tuesday, November 11, 2025, 3PM ET Please reach out with any questions or concerns! Thank you for your involvement with Kantara Groups! Best, -A -- Amanda Gay | Work Groups and Membership <https://lh7-rt.googleusercontent.com/docsz/AD_4nXfHwJ-rzpysEzGWLZ07DoUVltjG…> Phone: +1 571-475-8895 LinkedIn: @KantaraInitiative

1 0