- Wg-ancr - mailman.kantarainitiative.org

All-in-one virtual event platform | Zoom Webinars & Events
by Salvatore D'Agostino 11 Sep '25

11 Sep '25

https://events.zoomgov.com/egj/AvYKnVbaF5MbP1JW-a3YSB9UfCJ0ZfN75YRktmAHx22u… Get Outlook for iOS<https://aka.ms/o0ukef>

1 0

Fw: [KI-LC] PUBLISHED: Transparency Performance Indicators - A Kantara Initiative Recommendation
by Salvatore D'Agostino 15 Aug '25

15 Aug '25

Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: Amanda Gay <amanda(a)kantarainitiative.org> Sent: Friday, August 15, 2025 12:04 PM To: Kantara Board of Directors <directors(a)kantarainitiative.org>; lc(a)kantarainitiative.org <lc(a)kantarainitiative.org> Subject: [KI-LC] PUBLISHED: Transparency Performance Indicators - A Kantara Initiative Recommendation Good afternoon all: I'm happy to announce the publication of the Transparency Performance Indicators Kantara Initiative Recommendation<https://kantarainitiative.org/download/transparency-performance-indicators-…>, a product of the ANCR Work Group. Congrats to Sal and ANCR for all their hard work, and thanks to everyone who offered comments, voted, and helped finalize the document! Have a great weekend! Best, -A -- Amanda Gay | Work Groups and Membership [Logo, company name Description automatically generated] Phone: +1 571-475-8895 LinkedIn: @KantaraInitiative

2 1

FW: [KI-LC] Fwd: Webinar on 8/20 | NIST’s Digital Identity Guidelines
by Salvatore D'Agostino 14 Aug '25

14 Aug '25

From Alec IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender. From: Alec L via LC <lc(a)kantarainitiative.org> Sent: Thursday, August 14, 2025 10:17 AM To: Kantara Leadership Council <lc(a)kantarainitiative.org> Subject: [KI-LC] Fwd: Webinar on 8/20 | NIST’s Digital Identity Guidelines Hi all, NIST is running a webinar next week on the 800-63 rev4. Please distribute to your groups as appropriate Best, - Alec From: NIST Cybersecurity and Privacy Program <csrc.nist(a)announcements.nist.gov<mailto:csrc.nist@announcements.nist.gov>> Date: August 12, 2025 at 9:36:39 AM CDT To: kay(a)kantarainitiative.org<mailto:kay@kantarainitiative.org> Subject: Webinar on 8/20 | NIST’s Digital Identity Guidelines <https://content.govdelivery.com/attachments/fancy_images/USNIST/2019/04/248…> View As Web Page<https://links-1.govdelivery.com/CL0/https:%2F%2Fcontent.govdelivery.com%2Fa…> <https://content.govdelivery.com/attachments/fancy_images/USNIST/2019/09/280…> NIST Cybersecurity and Privacy Program One Week Away… Join us for a Digital Identity Guidelines Public Webinar! <https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.nist.gov%2Fnews-events%…> August 20, 2025 | 12:00 PM – 1:30 PM EDT NIST will host a public webinar to discuss the recently released final version of Special Publication 800-63, Digital Identity Guidelines, Revision 4<https://links-1.govdelivery.com/CL0/https:%2F%2Fcsrc.nist.gov%2Fpubs%2Fsp%2…>, which intends to respond to the changing digital landscape that has emerged since the last major revision of this suite was published by NIST in 2017. This informative webinar featuring NIST’s identity team will cover the content changes recently made to the entire suite of Digital Identity Guidelines documents and will explore topics such as technical requirements for meeting digital identity assurance levels, requirements for security and privacy, and considerations for an improved customer experience relative to digital identity solutions and technology. Those interested are encouraged to join and bring questions. Register<https://links-1.govdelivery.com/CL0/https:%2F%2Fnist.zoomgov.com%2Fwebinar%…> NIST Cybersecurity and Privacy Program Questions/Comments about this notice: dig-comments(a)nist.gov<mailto:dig-comments@nist.gov> Connect with us <https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.facebook.com%2FNIST/1/0…><https://links-1.govdelivery.com/CL0/https:%2F%2Ftwitter.com%2FNIST/1/010001…><https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.youtube.com%2FNIST/1/01…><https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.linkedin.com%2Fcompany%…><https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.instagram.com%2Fnist%2F…> Received this email from a friend? Subscribe here<https://links-1.govdelivery.com/CL0/https:%2F%2Fpublic.govdelivery.com%2Fac…>. <https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.nist.gov%2Fitl/1/010001…> Subscriber services: Manage Preferences<https://links-1.govdelivery.com/CL0/https:%2F%2Fpublic.govdelivery.com%2Fac…> | Unsubscribe<https://links-1.govdelivery.com/CL0/https:%2F%2Fpublic.govdelivery.com%2Fac…> | Help<https://links-1.govdelivery.com/CL0/https:%2F%2Fsubscriberhelp.govdelivery.…> _____ If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com<https://links-1.govdelivery.com/CL0/https:%2F%2Fsubscriberhelp.govdelivery.…>. Technical questions? Contact inquiries(a)nist.gov<mailto:inquiries@nist.gov>. (301) 975-NIST (6478). This service is provided to you at no charge by National Institute of Standards and Technology (NIST). 100 Bureau Drive, Stop 1070 · Gaithersburg, MD 20899 · 301-975-6478 <https://links-1.govdelivery.com/CL0/https:%2F%2Fsubscriberhelp.granicus.com…> <https://links-1.govdelivery.com/CI1/010001989eb63ab3-166f6f55-b336-44f7-bd7…>

1 0

Fwd: Acceptance Notification – Emergent Ideas Track at IEEE ISOPE 2025
by Mark Lizar 06 Aug '25

06 Aug '25

Hi ANCR, Today is significant for a couple of reasons 1. am happy to also be informed that the IEEE paper abstract "Digital Forest Transparency Charter” acceptance, (see below) 2. I finally finished submitting required notice and complaints to Quebec Regulator, which were used to prototype the use of the TPI-Report The TPI-Report turned into 3 TPI-Reports and 3 complaints, that required actually trying to use what was specified for the first time, make reports and assessment format, and then try and produce reports that hold water and make sense. An unexpectedly long and overly gruelling task, as the two companies /products that have been the hardest to hold to account have been Google Chrome and IAB, which are highly designed to circumvent these rules. In addition, I suspect we are the first to do this as it is is a job no one wants to do. This first test of the TPI presented evidence, of deceit, fraud an malicious intent worthy of the maximum penalty, for 1 of the complaints which is 25 million or 4% of world wide turn over, and for IAB, 28 complaints at 50k, per complaint in a collective action complaint trial. So who knows, could be the TPI-R might demonstrate value through its prototype. Tomorrow, I will post the TPI-Results @global privacy rights, found in the transparency directory <https://www.globalprivacyrights.org/digital-transparency-consent-directory-…>for them, - Best, Mark > short bio (200 words max) > Mark Lizar is a world-leading authority on digital transparency, privacy engineering, and consent governance. > > With 20+ years of experience transforming complex privacy laws into operational systems, Mark has shaped the international standards that power today’s digital trust economy. He is the creator of the Consent Receipt specification and a driving force behind ISO 27560 and other key privacy frameworks. > > Through his leadership in Transparency & Consent governance , Mark advises governments, Fortune 500s, and regulators on building lawful, ethical, and auditable data ecosystems—turning privacy obligations into competitive advantage. > > Mark is the founder of 0PN <https://www..0pn.org/> a Transparency Consultancy, and the Executive Director of Global Privacy Rights <https://www.globalprivacyrights.org/>, a Canadian nonprofit focused on operational transparency, data governance, and digital rights. He regularly consults with governments, regulators, and private organisations on the implementation of lawful and auditable transparency and consent governance in accordance with the Convention 108+ Treaty, the GDPR, the EU AI Act, and other global regulatory standards. > > >> Begin forwarded message: >> >> From: "gurvirender tejay" <tejay(a)ieee.org> >> Subject: Acceptance Notification – Emergent Ideas Track at IEEE ISOPE 2025 >> Date: 6 August 2025 at 14:47:49 GMT-4 >> To: "Mark @ 0PN" <mark(a)0pn.org> >> Cc: "Sin-Kuen Hawkins" <sinkuen.hawkins(a)ieee.org> >> Reply-To: "gurvirender tejay" <tejay(a)ieee.org> >> >> Dear Mark, >> >> Thank you for your submission to the IEEE Symposium on Privacy Expectations (ISOPE). We are pleased to inform you that your work has been selected for presentation in our special track titled "Shifting Grounds: Emergent Ideas on Privacy Expectations.” >> >> This track highlights innovative, forward-looking concepts with the potential to meaningfully advance the field of privacy. Your submission was selected based on the strength of its novel contribution and its promise to spark thoughtful dialogue. As part of this session, you will have 5 minutes to present your idea to the symposium audience. You may use up to 2 slides to support your presentation. In addition, the abstract of your submission will be included in the conference proceedings as part of the front matter, which will be openly accessible via IEEE Xplore (i.e., no subscription required to view). >> >> The symposium will be held in person, and all presentations are expected to be delivered on-site. To support our planning efforts, we kindly ask that you confirm your ability to attend and present in person by August 12, 2025. Please reply to this email or contact us at isope(a)ieee.org <mailto:isope@ieee.org> with your confirmation. >> >> We look forward to your participation in what promises to be a dynamic and engaging event. >> >> Best regards, >> Dr. Gurvirender Tejay >> Chair, IEEE Symposium on Privacy Expectations (ISOPE) >> >> >> ___ >> >> Gurvirender P. S. Tejay, Ph.D. >> Chair, IEEE Symposium on Privacy Expectations <https://ieee-isope.org/> >> Chair - Education & Training Sub-Group <https://digitalprivacy.ieee.org/education>, >> IEEE Digital Privacy Initiative >> Editor-in-Chief, Organizational Cybersecurity Journal <https://www.emeraldgrouppublishing.com/journal/ocj> >> >> Associate Professor <https://www.hofstra.edu/faculty-staff/faculty-profile.html?id=11132> of Information Systems >> Co-Director, Cybersecurity Innovation and Research Center <https://www.hofstra.edu/cybersecurity-innovation-research/> >> Director, Cybersecurity Programs >> Department of Information Systems and Business Analytics >> Frank G. Zarb School of Business >> Hofstra University <https://www.hofstra.edu/> >> >> >> >

1 0

Fw: Acceptance Notification – IEEE Symposium on Privacy Expectations (ISOPE)
by Salvatore D'Agostino 05 Aug '25

05 Aug '25

Fyi paper on TPIs accepted for IEEE conference in fall. Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: gurvirender tejay <tejay(a)ieee.org> Sent: Wednesday, July 30, 2025 11:45 PM To: Salvatore D'Agostino <sal(a)idmachines.com> Cc: Sin-Kuen Hawkins <sinkuen.hawkins(a)ieee.org> Subject: Acceptance Notification – IEEE Symposium on Privacy Expectations (ISOPE) Dear Salvatore (Sal) D’Agostino, Thank you for your submission to the IEEE Symposium on Privacy Expectations (ISOPE). We are pleased to inform you that your work has been accepted for presentation at the symposium. As a reminder, the symposium will be held in person, and all presentations are expected to be delivered on-site. To help us with planning, we kindly request that you confirm your ability to present in person by August 6, 2025. Please reply to this email, or contact us directly at isope(a)ieee.org<mailto:isope@ieee.org>, to confirm your participation. We look forward to your contribution to what promises to be a stimulating and engaging event. Warm Regards, Dr. Gurvirender Tejay Chair, IEEE Symposium on Privacy Expectations (ISOPE) ___ Gurvirender P. S. Tejay, Ph.D. Chair, IEEE Symposium on Privacy Expectations<https://ieee-isope.org/> Chair - Education & Training Sub-Group<https://digitalprivacy.ieee.org/education>, IEEE Digital Privacy Initiative Editor-in-Chief, Organizational Cybersecurity Journal<https://www.emeraldgrouppublishing.com/journal/ocj> Associate Professor<https://www.hofstra.edu/faculty-staff/faculty-profile.html?id=11132> of Information Systems Co-Director, Cybersecurity Innovation and Research Center<https://www.hofstra.edu/cybersecurity-innovation-research/> Director, Cybersecurity Programs Department of Information Systems and Business Analytics Frank G. Zarb School of Business Hofstra University<https://www.hofstra.edu/> On Jun 30, 2025, at 2:46 PM, Salvatore D'Agostino <sal(a)idmachines.com> wrote: Dear committee, Please find attached an abstract for a presentation at the symposium on privacy expectations. This looks at work that has been taking place over the last 10 years on notice and consent in the International Organization for Standardization (ISO) and at the Kantara Initiative. Title: Transparency Performance Indicators (TPIs) – A User-Centric Methodology for Measuring the PII Controller Compliance and Conformance Presenter: Salvatore (Sal) D’Agostino Bio: Salvatore (Sal) D’Agostino is founder of IDmachines and recently launched Surveillance Trust. Sal’s experience in physical and digital systems include EZ Pass and numerous intelligent transport systems, 100+ industrial automation, robotics and computer vision systems, and numerous government and enterprise security, privacy, access control, and identity programs around the globe. Sal is active in the development and use of standards for physical and logical security and privacy. At the Kantara Initiative, Sal chairs the Anchored Notice and Consent Receipts (ANCR) Work Group. At IDmachines, Sal partners with the Security Industry Association (US) to conduct the OSDP Verified™ program that certifies “card” readers and “door” controllers to the ISO/IEC 60839-11-5 Open Supervised Device Protocol standard. Sal served as President and Chair of the Identity Ecosystems Steering Group (IDESG), the National Institute of Standards and Technology (NIST) sponsored initiative that developed and published a framework<https://www.idesg.org/The-ID-Ecosystem/Identity-Ecosystem-Framework/IDEF-Co…> for trusted identities in cyberspace. Sal has an AB from Harvard College, collaborated with Ha Ha at the Hyde Park Art Museum, had a brief (8 minute) career as a professional wrestler. Sal is a retired member of the Mystic River Rugby Club, and the George Washington Rugby Football (PAC) Club. More information at https://www.linkedin.com/in/idmachines/ Sincerely, Sal D’Agostino Chair, ANCR WG, Kantara Initiative IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender. ________________________________ To unsubscribe from the ISOPE list, click the following link: https://listserv.ieee.org/cgi-bin/wa?SUBED1=ISOPE&A=1

2 1

TPIs out for all-member ballot
by Salvatore D'Agostino 25 Jul '25

25 Jul '25

Hi WG, I hope everyone is on their way to an enjoyable weekend. You should have received an email for the all member ballot. Thanks to all who have worked to get the TPIs to this point, in particulary Amanda (thanks again) for the attention to details and consistency with style. Here is the link to the announcement. All Member Ballot - KIR20250725 - General Information - Kantara Initiative<https://kantara.atlassian.net/wiki/spaces/GI/pages/1109557249/All+Member+Ba…> There is also a link to SurveyMonkey for the vote. I just completed it. Fwiw the link in the email did not resolve for me to the AMB page. Best, Sal IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 0

Re: Insights from Digital Benefits Network
by Salvatore D'Agostino 18 Jul '25

18 Jul '25

Thanks for sharing, Jorge. best, Sal Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: Jorge Flores <jorge(a)entidad.io> Sent: Friday, July 18, 2025 12:57:21 PM To: wg-riup <wg-riup(a)kantarainitiative.org> Subject: [WG-RIUP] Insights from Digital Benefits Network I attended my first meeting at the Digital Identity Community of Practice sponsored by the Digital Benefits Network<https://beeckcenter.georgetown.edu/projects/digital-benefits-network/>. I’m sharing slides that were presented by Colorado Peak and Public Policy Lab + the DBN over insights from (public benefit) applicant feedback and experiences with authentication and proofing. [signature_4191920133] Jorge Flores | Co-founder and CTO | https://www.entidad.io<https://www.entidad.io/> | Book time with me: 30 minutes meeting <https://outlook.office.com/bookwithme/user/0ecdfe2ced8e4bf9a3f895d60556df0c…>

1 0

45 day period off
by Gigi Agassini 17 Jul '25

17 Jul '25

Dear ANCR WG, I hope this email finds you well. I am writing to inform you that today’s meeting will not take place. We are entering a 45-day review period starting next week, pending the final formatting and last round of edits for the TPI document. Please find attached the presentation that Sal delivered at Identiverse alongside Kay, on behalf of the PEMC. As a result, we will pause our meetings during August, and we will notify you by email once we are ready to resume our bi-weekly sessions. Enjoy the summer season! Kindest regards, Gigi Agassini

3 2

Re: no call today
by Salvatore D'Agostino 09 Jul '25

09 Jul '25

unsigned IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender. From: Salvatore D'Agostino Sent: Wednesday, June 18, 2025 12:22 PM To: wg-ancr(a)kantarainitiative.org Subject: no call today Hi WG. I have had some personal time off this week and sorry for the late notice. The TPIs should go out for all member ballot next week. Best regards, Sal IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

2 1

Notice - Release of Work Group Participant Code of Conduct
by Amanda Gay 17 Jun '25

17 Jun '25

Dear WG Participants: This email is to inform you that the Work Group Participant Code of Conduct <https://kantara.atlassian.net/wiki/spaces/LC/pages/1055227915/Code+of+Condu…> has been passed by the Leadership Council and is in effect immediately – all group participation is now subject to the Code of Conduct. Reminder: Participation in Kantara Work Groups is subject to all Kantara policies <https://kantara.atlassian.net/wiki/spaces/GI/pages/1081775/All+Policies>. The Code of Conduct is now explicitly included in the Group Participation Agreement (GPA) for transparency as part of the applicable policies for Work Group participation. We request that Work Group participants complete a new GPA <https://kantarainitiative.org/gpa-signup/> at your earliest convenience. **Please note that if you do not complete a new GPA, you are still bound by the Code of Conduct. Thank you for your continued interest and participation in Kantara Initiative Work Groups! Please reach out to your WG Chairs or the Leadership Council with any questions or concerns. Best, -Amanda -- Amanda Gay | Work Groups and Membership [image: Logo, company name Description automatically generated] Phone: +1 571-475-8895 LinkedIn: @KantaraInitiative

1 0

TPI LC Vote
by Salvatore D'Agostino 05 Jun '25

05 Jun '25

Hi WG, The TPI document has been approved by the LC! It will go out for all member ballot next week. Thanks for all your work and support. Almost there. Best, Sal IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 0

No call today
by Salvatore D'Agostino 04 Jun '25

04 Jun '25

We are taking a break as the TPIs move thorough approval See you I two weeks Best Sal Get Outlook for iOS<https://aka.ms/o0ukef>

1 0

FYO. No Meetings this month
by Mark Lizar 04 Jun '25

04 Jun '25

Hi ANCR WG, Identiverse + summer = Holidays - no meetings this month We are looking fwd to the ANCR TPI Report. Review and publishing Until then — good bleedy jo everyone, the TPI - Report for Valid Consent could be a game changer !!! Lets see

1 0

Fwd: [EXTENDED DEADLINE: 2nd CfP] 2nd NeXt-Generation Data Governance workshop @ SEMANTiCS 2025 – NXDG 2025
by Mark Lizar 22 May '25

22 May '25

FYI > Begin forwarded message: > > From: Beatriz Gonçalves Crisóstomo Esteves <Beatriz.Esteves(a)UGent.be> > Subject: [EXTENDED DEADLINE: 2nd CfP] 2nd NeXt-Generation Data Governance workshop @ SEMANTiCS 2025 – NXDG 2025 > Date: 22 May 2025 at 04:37:02 GMT-4 > To: "public-solid" <public-solid(a)w3.org> > Resent-From: public-solid(a)w3.org > Reply-To: Beatriz Gonçalves Crisóstomo Esteves <Beatriz.Esteves(a)UGent.be> > > Please circulate within your networks. Apologies for multiple postings. > ==== > 2nd NeXt-Generation Data Governance workshop @ SEMANTiCS 2025 – NXDG 2025 > Vienna, Austria > September 3–5, 2025 > https://w3id.org/nxdg/2025 > ==== > > Deadline for paper submission: July 04, 2025 (11:59 pm, AoE) > > The NeXt-generation Data Governance 2025 workshop aims to bring together technical, legal and societal researchers, and industry experts to discuss data governance, emergence of data spaces and the impact of the European strategy for data in such systems. The workshop aims to support the development of solutions to manage data, policies and provenance in a trustful and interoperable manner and to aid in the management and reporting of legal documentation falling from the EU’s GDPR for data protection and the DGA, Data Act, AI Act and EHDS to create legally-aligned, AI-powered data ecosystems, using semantic-based specifications such as ODRL, DPV or Solid. > > As such, this workshop will have presentations and discussions of interest to both data providers and consumers, researchers, standardisation bodies, businesses, and citizens who want to interoperate in the Data Spaces era. > > The workshop will accept two types of contributions: > Full papers must be at least 8 and at most 16 pages of main content, with additional pages for references. > Short/demo papers must be at least 5 and at most 7 pages of main content, with additional pages for references. > > = Important Dates = > – Paper Submissions: July 04, 2025 (11:59 pm, AoE) > – Acceptance Notifications: July 23, 2025 (11:59 pm, AoE) > – Conference Date: September 3–5, 2025 > > = Topics of Interest = > Broadly, we welcome submissions on any of the following topics: semantics and interoperability, AI & data governance, regulations, data protection, privacy, policy management and enforcement. A non-exhaustive list of suggested topics is below: > Role of the Semantic Web in the European strategy for data > FAIR management and interoperability of data spaces > Management of data altruism / intermediation services activities > Legal and governance aspects of data spaces > Legal and governance aspects of IoT data management > Legal and governance aspects of AI models and AI-generated data > Policies for access and usage control > Policy management and enforcement in data spaces > Going beyond consent for personal data processing > Data spaces and secondary reuse of data > Reasoning over data and data policies > Negotiation of access to data through Web agents > Personalisation of data management interfaces > Usability of data management interfaces > Digital identity and data wallets > User-centric perspectives on privacy and data protection > Decentralisation and personal data spaces > Personal knowledge graphs > Standards for personal data management > Standards for AI-based systems > Auditing methods/tools for data spaces > > = Author Guidelines and Submission = > For Submission Guidelines please head to the online call for papers: > https://w3id.org/nxdg/2025 > Contributions will be reviewed in an open manner with OpenReview. Submission link: https://openreview.net/group?id=SEMANTiCS.cc/2025/Workshop/NXDG > > We are looking forward to your contribution! > > Beatriz Esteves, Harshvardhan J. Pandit, Ruben Verborgh > NXDG 2025 Organisers

1 0

ANCR WG call reminder - tomorrow 23rd, April / 1.00pm EST
by Gigi Agassini 20 May '25

20 May '25

Dear ANCR WG. This is a friendly reminder about our meeting scheduled for tomorrow at 1:00 PM EST. Agenda: Please find the agenda here: Agenda Link<https://kantara.atlassian.net/wiki/x/DQBYOg> Call Link: Join the Meeting<https://us06web.zoom.us/j/87282263538?pwd=K0RwY1g1b3pKeHdBcXpjeExVZUFpQT09> I look forward to seeing you all tomorrow. Kindest Regards, Gigi Agassini

1 2

Fw: [KI-LC] Leadership Council Meeting Notice - May 20, 2025
by Salvatore D'Agostino 16 May '25

16 May '25

Tuesday LC call Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: Amanda Gay <amanda(a)kantarainitiative.org> Sent: Friday, May 16, 2025 1:01 PM To: lc(a)kantarainitiative.org <lc(a)kantarainitiative.org> Subject: [KI-LC] Leadership Council Meeting Notice - May 20, 2025 Hi all: The Leadership Council will meet next Tuesday, May 20, 2025 at 10 AM ET. Zoom info below: https://us06web.zoom.us/j/94897867446?pwd=YSsxdjZLMzFmUmhNd2NBMnlwbEZHZz09<https://www.google.com/url?q=https://us06web.zoom.us/j/94897867446?pwd%3DYS…> A draft agenda<https://kantara.atlassian.net/wiki/spaces/LC/pages/1009451009/2025-05-20+LC…> is located on the Wiki. We look forward to seeing everyone! Best, -Amanda -- Amanda Gay | Work Groups and Membership [Logo, company name Description automatically generated] Phone: +1 571-475-8895 LinkedIn: @KantaraInitiative

1 0

latest version of document
by Salvatore D'Agostino 13 May '25

13 May '25

Hi WG, Here is the latest version of the document. We have finished the comment period. The tracked changes are suggestions, mostly from me, though the title change was something Mark and I crafted at the end of the call today. I would like to get consensus on these changes and... At this point there is really only the terms and definitions and new title to address. Can you all please review these and if you have any suggestions on either of these items can you please provide those comments here on this thread, and if you like mirror those in the Signal channel. For example on page 12 after the call today we reduced the new terms to the following two: PII Controller Identification The process of identifying a controller of Personally Identifiable Information (PII) through the disclosure of key details, including their physical address, contact information, and a designated privacy access point, in order to ensure transparency regarding the applicable policy jurisdiction and the legal authority governing the processing of personal data. PII Controller Identification Record A record created with the information provided in the process of PII Controller Identification. So.. if you want to comment on these definitions please do so. I don't believe we have an need to introduce any other new terms, but am willing to listen if someone wants to make the case, and feel free to do so here. By working in this manner we can move ahead independently of meetings and calls and use those to confirm the work being done asynchronously. I would be happy to get a return copy of the attached document from anyone who want to use this to make track changes, as there is still a decent chance that some things may have been missed. I think this is easier than trying to do this via the wiki. Alternatively and likely more easily I have loaded this as a Google doc https://docs.google.com/document/d/1pgTVyGCRuKuWhSAJUMINKuGbwIRyjC7__vitOqQ… And happy to share that with anyone that wants to put in comments or suggest edits in that way. Thanks for your continued support of the work. Best, Sal IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Please note our new address. Email, phones, other contacts remain the same. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

3 6

Quick Poll - Re: Breaking news: opportunity to present ancr work as EU ROPA replacement for SME's
by Mark Lizar 13 May '25

13 May '25

Hi Sal, A receipt based system would be amazing, which is why I want to reference the great work at ANCR, I have drafted an email to promote this work for this purpose, highlighting the progress. My question was slightly more procedural, in that, I was referring to the Controller Identification specification. On a previous wg Call we discussed pulling the controller identification record into its own document and I took this action then I drafted its and i posted this for collaboration, comment - and discussion. https://kantara.atlassian.net/wiki/x/OADaNQ Regardless of whether it makes it to the ANCR roadmap or not? Is there any objection to making saving this wiki page so it is to the public again? I can put a note on it, - saying proposed worked item, if that is a concern, Yes, I object, ___ No, I dont object ____ Abstain ______ Best Regards Mark > On 13 May 2025, at 12:19, Salvatore D'Agostino <sal(a)idmachines.com> wrote: > > So, clearly it would be great to get the EU to move ahead with receipts as means for small business. > > We can take up making this public on the call tomorrow, it is an “off-week” call. So we need to put this out to the list to let people know this is happening. > > From: Tim Reiniger <tsreiniger(a)gmail.com> > Sent: Tuesday, May 13, 2025 12:05 PM > To: Mark Lizar <smartopian(a)icloud.com> > Cc: Salvatore D'Agostino <sal(a)idmachines.com> > Subject: Re: Breaking news: opportunity to present ancr work as EU ROPA replacement for SME's > > Interesting idea to bring Eve Maler back for a reprise on UMA! > > On Tue, May 13, 2025 at 11:47 AM Mark Lizar <smartopian(a)icloud.com <mailto:smartopian@icloud.com>> wrote: > > > > Begin forwarded message: > > From: Mark Lizar <smartopian(a)icloud.com <mailto:smartopian@icloud.com>> > Subject: Breaking news: opportunity to present ancr work as EU ROPA replacement for SME's > Date: 10 May 2025 at 15:10:31 GMT-4 > To: wg-ancr(a)kantarainitiative.org <mailto:wg-ancr@kantarainitiative.org> > > Hi All, > > in light of calls to update the GDPR - and make it easy for Small Business, by derogating the ROPA, record requirements for small businesses in the EU, i reached out to ask, why not implement consent receipts instead? (To the person who put consent receipts in the EU Digital Markets Act in the first place) > > His response was to send him an email with this as an alternative approach so that he can share this with the EU Justice Department team. > > As a part of my response, I would like to update them on how far the Consent Receipt work has evolved in the last 6 years into Standard Operational Transparency record information structure, that can be used for international consent record based information flows. (International Consent which was the objective of the work) > Mentioning how the Kanatara Consent Receipt work was > Used and is in use by industry > Adopted into: > ISO/IEC 27560: 2023 About to become an open standard (in 2025 Fall) > Extending the open and free to access ISO/IEC 29100 - privacy framework (recently updated) > TPI Benchmark for Valid Consent, coming out (next week Tbc) > Conv 108+ being ratified(next month Tbc) > > To add to this, would there be any objections to making the ANCR Controller Identification Record. <https://kantara.atlassian.net/wiki/x/OADaNQ> Spec (On the ANCR Wiki) publicly accessible so I can include it in my response ? > > Best Regards, > > Mark > > > > > > > > Are there any objections to making the draft of the Controller Identification Record Spec publicly accessible ?

2 4

WRT TPI Report - Could it be in time for Privmas?
by Mark Lizar 12 May '25

12 May '25

Hi Sal, (everyone) Do you know if its possible to Release for May 24 - 2025? If so, perhaps we can pick up the Privmas Eve Thread ? Would anyone/everyone be interested in an Open Zoom Call - presenting the work on Monday 26th of May? If so, Maybe we can invite some of our favourite identerati, and invite parallel efforts that might find use for the TPI? e.g. - support this work contribution to efforts working in delegation, or immortal consent topics? Best, Mark Proposing Monday May 26 - (Catchy title) 10:00 am - 12:00 pm (Tentative) Agenda -(to be collaborated on) * 2025 the Year Digital Privacy Transparency Becomes a Standard? privacy transparency to scale consent (and govern surveillance /AI)? Present TPI Report * TPI Report Use Case(s) 27560 going to be open The Digital Identity Transparency Layer Landscape ? (Special Guest Speaker)

1 0

Minutes - meeting April 23rd
by Gigi Agassini 11 May '25

11 May '25

Dear ANCR WG Thank you for attending our meeting on Wednesday, April 23rd. Please find the link to the minutes, which include the key actions and discussions we covered: Meeting Minutes<https://kantara.atlassian.net/wiki/x/DQBYOg> If you notice anything missing or have any questions, please don’t hesitate to reach out. Additionally, please mark your calendars for our next Working Session on Wednesday, April 30th at 1:00 PM EST. The meeting link remains the same. Meeting Link<https://us06web.zoom.us/j/87282263538?pwd=K0RwY1g1b3pKeHdBcXpjeExVZUFpQT09> Looking forward to seeing you all there! Kindest Regards, Gigi Agassini

1 1

Breaking news: opportunity to present ancr work as EU ROPA replacement for SME's
by Mark Lizar 10 May '25

10 May '25

Hi All, in light of calls to update the GDPR - and make it easy for Small Business, by derogating the ROPA, record requirements for small businesses in the EU, i reached out to ask, why not implement consent receipts instead? (To the person who put consent receipts in the EU Digital Markets Act in the first place) His response was to send him an email with this as an alternative approach so that he can share this with the EU Justice Department team. As a part of my response, I would like to update them on how far the Consent Receipt work has evolved in the last 6 years into Standard Operational Transparency record information structure, that can be used for international consent record based information flows. (International Consent which was the objective of the work) Mentioning how the Kanatara Consent Receipt work was Used and is in use by industry Adopted into: ISO/IEC 27560: 2023 About to become an open standard (in 2025 Fall) Extending the open and free to access ISO/IEC 29100 - privacy framework (recently updated) TPI Benchmark for Valid Consent, coming out (next week Tbc) Conv 108+ being ratified(next month Tbc) To add to this, would there be any objections to making the ANCR Controller Identification Record. <https://kantara.atlassian.net/wiki/x/OADaNQ> Spec (On the ANCR Wiki) publicly accessible so I can include it in my response ? Best Regards, Mark Are there any objections to making the draft of the Controller Identification Record Spec publicly accessible ?

1 0

reminder TPR review call
by Salvatore D'Agostino 30 Apr '25

30 Apr '25

On now.. https://us06web.zoom.us/j/87282263538?pwd=K0RwY1g1b3pKeHdBcXpjeExVZUFpQT09 IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Please note our new address. Email, phones, other contacts remain the same. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 0

test
by Salvatore D'Agostino 29 Apr '25

29 Apr '25

IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Please note our new address. Email, phones, other contacts remain the same. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 0

TPI-R Spec, Semantic Opportunity for nnovation
by Mark Lizar 23 Apr '25

23 Apr '25

Some Notes, Wrt to today’s call, we decided to continue next week, finishing up the spec while we likely await a barrage of last minute inputs, and we havent even discussed the idea of extending the deadline. (Common practice ;-) Today, we actually accomplished work on terms, draft list now here <https://kantara.atlassian.net/wiki/x/EQDTNw> We also decided to be specific to scope of legal terms, and notice obligations that are specified legally, in particular those with regards to permission to be identified. (Of using a cookie) To this point, I invite everyone to interpret - Quebec Law 25, wherein, it references in 8.1 (quoted below) and see if there is a missing control we can add ? "any person who collects personal information from the person concerned using technology that includes functions allowing the person concerned to be identified,located or profiled must first inform the person (1) of the use of such technology; and (2) of the means available to activate the functions that allow a person to be identified, located or profiled.” The complaint for the TPR focuses online identified, (not location or profiling) and the law here indicates a control that is not opt-in, but turn on. Does this resemble an online control ? (An example would be nice) While the current T&C environment is opt-out, as it is mainly US Service based, -could this be a - turn on - identification, button? Would this also be. Notice record (in our spec), a ROPA in the EU, and a consent receipt? Best, Mark

1 0

Fw: Public Comment to the Joint Committee on Advancing Information Technology, the Internet and Cybersecurity
by Salvatore D'Agostino 22 Apr '25

22 Apr '25

________________________________ From: Salvatore D'Agostino Sent: Monday, April 14, 2025 4:56 PM To: Tricia.Farley-Bouvier(a)mahouse.gov <Tricia.Farley-Bouvier(a)mahouse.gov>; Michael.Moore(a)masenate.gov <Michael.Moore(a)masenate.gov> Cc: Daniel Schleifer <dan(a)idmachines.com>; gigi.agassini(a)gmail.com <gigi.agassini(a)gmail.com> Subject: Public Comment to the Joint Committee on Advancing Information Technology, the Internet and Cybersecurity Joint Committee on Advanced Information Technology, the Internet and Cybersecurity Chairs, Thank you for the opportunity to comment on the legislation under consideration. The ability of security and privacy professionals to apply their skills for good are greatly enhanced by the power of law. Too often security measures and privacy compliance are put in place only as a reaction to something gone wrong. The comprehensive slate of legislation here empowers better design and operation of data processing systems, and associated products and services by organizations and citizens. Massachusetts and the United States have, in the past, led the way in terms of privacy rights and frameworks. The Fair Information Practice Principles (FIPPs<https://www.fpc.gov/resources/fipps/>) that are adopted into the ISO/IEC 29100:2024<https://www.iso.org/standard/85938.html> Privacy framework from 50 years ago still apply today. It is good to see Massachusetts come back into the fight with other states across the country in enacting substantial legislation. The Kantara Initiative, where I chair a workgroup<https://kantarainitiative.org/work-groups/ancr/> on Anchored Notice and Consent Receipt, recently published for public comment a set of transparency performance indicators that can be used to measure whether there is a valid basis for consent. This legislation provides the ability to add further to legal requirements that help to define consent. S45 and H78 for example have excellent language around the requirements for consent. What exists today in too many cases are the dark patterns referenced in the legislation, provides a light to expose and change them. In the work we do we reference laws and frameworks to create security and privacy technology for people, this legislation helps. At IDmachines, we believe that there is a great opportunity for innovation when it comes to privacy and security for people. We believe this can be done in a way that benefits all stakeholders, and provide a better data economy, and that we can do that in Massachusetts. In addition to the legislation we need privacy and security infrastructure for people. While that may seem like a big dig, it in fact can be done with a fraction of the investment and provide tremendous benefits to the Commonwealth its citizens and beyond. We can create an alternative to surveillance valley that provides more useful, secure, and private digital, and real world identity, access, and mobility. The establishment of a public registry for 3rd party collecting entities could be expanded to all PII Controllers, including all covered entities in the legislation. It could include all that operate in the state of MA. It would provide sufficient information so that people could understand who they are dealing with, as could a program operating on their behalf, as to whether their status as a covered entity was in good standing, in effect the availability of a certificate of good standing, and in the case of where they are not registered in the Commonwealth, the same from the jurisdiction of their registration. In the past, I had the honor to serve as the Chair and President of the Identity Ecosystem Steering Group, a public-private partnership in cooperation with the National Institute of Standards and Technology. We published and stood up an initial registry<https://idefregistry.edufoundation.kantarainitiative.org/>. There now exists an significant opportunity, even perhaps more than before. The attached recommendation gives an example of the information that could be aggregated into controller records in that registry. It would better enable direct digital interactions between people and organizations. It is possible to go beyond managing data brokers to enabling dynamic direct data, business, and personal exchanges and reduce the need and impact of things in the middle. Respectfully, Salvatore D’Agostino IDmachines LLC 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

2 1