- Wg-ancr - mailman.kantarainitiative.org

Cannot host call
by Salvatore D'Agostino 12 Mar '25

12 Mar '25

Hi WG, Sorry for this but timing isn't working today as I have to pick up Sarah who has just had a procedure, and she comes out at 12:30. Also, Gigi is on vacation this week. The TPR document should be formatted with appreciation from Amanda and Kantara this week and be ready to share for public comment, clearly, we all want to be able to cross that milestone, and that it happens shortly. There are drafts of blog post associated with the TPR to share with Kantara and promoting this. Best, Sal

3 2

Updates: 27560 Comment & ANCR Controller Draft is Posted
by Mark Lizar 04 Mar '25

04 Mar '25

Dear WG, The 2 Updates, 1. posted an initial spec outline for the Controller_notice_ Id record draft <https://kantara.atlassian.net/wiki/x/OADaNQ?atlOrigin=eyJpIjoiYTU3NDA5ZTRjY…> taken from the appendix of ANCR Transparency Reporting specification. It should also contain a link to the google doc in active development. ( Feel free to jump in and comment/ contribute/discuss and edit. if you have ideas for what should be included, or would like to get involved in drafting, please let me know 2. I have also tried to submit late comments - referencing the controller notice id record to 27560, but due to technical account issue (@ standards council of Canada) it was not submitted on time. Even so comments were eventually submitted, so the editors hopefully will get a chance to review them. And, yes, it does recommend the use of the ANCR PII controller_idenitty_ record, (with a Link) to be used in the record information structure, as well as minimumal changes to update to to a notice record and receipt record and information structure, (so as to be suitable for (all use case) including the original Surveillance/Terms and Condition / Cookie use cases). So fingers crossed, the ANCR / Kantara Work might actually work out in the end by not only interoperate in the next edition,with 27560, 29184, 29100, and DPV, but also be useable for ‘operational personal data security/surveillance access and control.’ Which would make the effort definitely worthy while in the end Best, Mark PS. Key Comment Summary #1 comment (imo) is recommending to swap the PII_principal identifier from the record header with with the pii_controller_record_id, (as specified in the ANCR WG) #2 Second most important, is a recommendation of a generic use case for getting permission to identify the pii_principal in the consent record header. (which demo’s how privacy is used for identify management) In the context of providing and withdrawal of consent using a consent receipt for a secondary purpose of use (for any lawful basis) PSS - In essence completing the work to propose a standard that can make a real consent record and receipt 10 years after the v1 was drafted. - comments received or not - is a big milestone in my book.

1 0

ANCR PII Controller Notice Identification Record Draft v0.8
by Info 03 Mar '25

03 Mar '25

Dear WG, I posted an initial spec outline for the Controller_notice_ Id record draft <https://kantara.atlassian.net/wiki/x/OADaNQ?atlOrigin=eyJpIjoiYTU3NDA5ZTRjY…> currently found in the TPR appendix. It contains a link to the google doc in active development. Feel free to jump in and comment on the website posted version if you have ideas for what should be included, or let me know if you want to actively draft or edit, and we can co-ordinate, as we generally aim to work on this doc in a session on Monday afternoons, for the short period of time it will take to draft. Kind Regards, Mark 0PN Director Zero Privacy Needed

1 0

FW: Event Registration | NCCoE Cybersecurity and AI Workshop
by Salvatore D'Agostino 28 Feb '25

28 Feb '25

From: NIST Cybersecurity and Privacy Program <csrc.nist(a)service.govdelivery.com> Sent: Friday, February 28, 2025 12:27 PM To: Salvatore D'Agostino <sal(a)idmachines.com> Subject: Event Registration | NCCoE Cybersecurity and AI Workshop Register Now! <https://content.govdelivery.com/attachments/fancy_images/USNIST/2019/04/248…> View As Web Page<https://links-1.govdelivery.com/CL0/https:%2F%2Fcontent.govdelivery.com%2Fa…> <https://content.govdelivery.com/attachments/fancy_images/USNIST/2019/09/280…> National Cybersecurity Center of Excellence <https://content.govdelivery.com/attachments/fancy_images/USNIST/2025/02/110…> Join Us! Register Now for the NCCoE Cybersecurity and AI Workshop Event Date: April 3, 2025 Event Time: 9:00 AM – 5:00 PM EST Event Location: Virtual and at the National Cybersecurity Center of Excellence (NCCoE) Recent advancements in Artificial Intelligence (AI) technology bring great opportunities and challenges to organizations, including how AI can affect their cybersecurity capabilities and risks. The potential positive and negative impacts of AI need to be understood and managed. NIST is proposing the creation of a NIST Cybersecurity Framework (CSF) Profile (Cyber AI Profile), in collaboration with the cybersecurity and AI communities, to focus on three sources of risk that impact an organization’s operational risk: Cybersecurity of AI Systems, AI-enabled Cyber Attacks, and AI-enabled Cyber Defense. To inform these discussions, join our upcoming workshop where we will explore ideas discussed in the newly released Cybersecurity and AI Workshop Concept Paper<https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.nccoe.nist.gov%2Fprojec…>* through a variety of hybrid presentations and panel discussions and in-person only working sessions. Registration for in-person attendance closes on March 27, 2025. Due to space limitation, registration is limited to the first 150 registrants on a first come, first served basis. There is no registration needed to attend virtually. Please see the link to the event page and watch the stream on April 3, 2025: https://www.nccoe.nist.gov/get-involved/attend-events/cyber-and-ai-workshop<https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.nccoe.nist.gov%2Fget-in…> We look forward to your participation at this event. *Please provide any feedback using the form found on our project page<https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.nccoe.nist.gov%2Fprojec…> before 11:59 p.m. EDT on Friday, March 14, 2025, to inform workshop topics. Register Now!<https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.nccoe.nist.gov%2Fget-in…> Questions/Comments about this notice: CyberAIProfile(a)nist.gov<mailto:CyberAIProfile@nist.gov> NCCoE Website questions: nccoe(a)nist.gov<mailto:nccoe@nist.gov> Connect with us <https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.facebook.com%2FNIST/1/0…><https://links-1.govdelivery.com/CL0/https:%2F%2Ftwitter.com%2FNIST/1/010001…><https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.youtube.com%2FNIST/1/01…><https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.linkedin.com%2Fcompany%…><https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.instagram.com%2Fnist%2F…> Received this email from a friend? Subscribe here<https://links-1.govdelivery.com/CL0/https:%2F%2Fpublic.govdelivery.com%2Fac…>. <https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.nist.gov%2Fitl/1/010001…> Subscriber services: Manage Preferences<https://links-1.govdelivery.com/CL0/https:%2F%2Fpublic.govdelivery.com%2Fac…> | Unsubscribe<https://links-1.govdelivery.com/CL0/https:%2F%2Fpublic.govdelivery.com%2Fac…> | Help<https://links-1.govdelivery.com/CL0/https:%2F%2Fsubscriberhelp.govdelivery.…> _____ If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com<https://links-1.govdelivery.com/CL0/https:%2F%2Fsubscriberhelp.govdelivery.…>. Technical questions? Contact inquiries(a)nist.gov<mailto:inquiries@nist.gov>. (301) 975-NIST (6478). This service is provided to you at no charge by National Institute of Standards and Technology (NIST). 100 Bureau Drive, Stop 1070 · Gaithersburg, MD 20899 · 301-975-6478 <https://links-1.govdelivery.com/CL0/https:%2F%2Fsubscriberhelp.granicus.com…> <https://links-1.govdelivery.com/CI1/010001954d994af1-a120e018-5461-4eb6-a4e…>

1 0

ANCR WG - meeting
by gigi.agassini＠gmail.com 26 Feb '25

26 Feb '25

Dear WG, Thank you all for attending today's meeting. As a follow-up, please find the meeting minutes in the link below. I would greatly appreciate any comments or additions you may have. https://kantara.atlassian.net/wiki/spaces/WA/pages/897581057/ANCR+WG+2025022 6 Thank you so much for your attention and looking forward to seeing you all at our next meeting. Kindest regards, Gigi Agassini

2 1

UN Transparency Report
by Salvatore D'Agostino 23 Feb '25

23 Feb '25

Timely, given we are putting out Transparency Performance Reporting for comment this week. Public Review 2: Recommendation No. 49: Transparency at Scale<https://uncefact.unece.org/display/uncefactpublicreview/Public+Review+2%3A+…> Public Review 2: Recommendation No. 49: Transparency at Scale<https://uncefact.unece.org/display/uncefactpublicreview/Public+Review+2%3A+…> Download all the files for Public Review for this project uncefact.unece.org

1 0

Fw: Upcoming security bulletin from Atlassian
by Salvatore D'Agostino 19 Feb '25

19 Feb '25

Rather, that we are taking a more proactive approach to vulnerability transparency ________________________________ From: Atlassian <security(a)e.atlassian.com> Sent: Tuesday, February 18, 2025 1:07 PM To: Salvatore D'Agostino <sal(a)idmachines.com> Subject: Upcoming security bulletin from Atlassian [Atlassian]<https://click.e.atlassian.com/?qs=d85a4d3dfbeaad281e6649fd7fe84b7646852aa49…> Security bulletin for vulnerabilities in multiple Atlassian products<https://click.e.atlassian.com/?qs=d85a4d3dfbeaad28bd3284ab57e50b137e34c0d83…> Atlassian has released a bulletin with vulnerabilities and CVEs affecting multiple products. Please keep in mind that the issues included in this bulletin are a result of our increase in scope of vulnerability disclosure. While this change results in an increase of visibility and disclosures, it does not mean there are more vulnerabilities. Rather, that we are taking a more proactive approach to vulnerability transparency and are committed to providing our customers with the information they need to make informed decisions about updating our products. Unlike a critical security advisory, we are not calling for immediate action to be taken from the bulletin. Generally, customers can keep to their existing upgrade schedule unless their own assessment or processes dictate otherwise. Please see the full bulletin learn more. See full bulletin<https://click.e.atlassian.com/?qs=d85a4d3dfbeaad2847f9070172380ace98a6335be…> Kind regards, The Atlassian Team Read in browser<https://view.e.atlassian.com/?qs=75ff950ce47eb27fd09c7f155f9064f3e66529468d…> • Privacy policy<https://click.e.atlassian.com/?qs=d85a4d3dfbeaad288096762415216e3013e154ba0…> • Contact us<https://click.e.atlassian.com/?qs=d85a4d3dfbeaad28a124821f21dc5222db3d310be…> • Read our blog<https://click.e.atlassian.com/?qs=d85a4d3dfbeaad28ff8abae56aa33317a4ae1f5b8…> • Join Atlassian Community<https://click.e.atlassian.com/?qs=d85a4d3dfbeaad28280065e64fe8e25f67bd94f70…> [Facebook]<https://click.e.atlassian.com/?qs=d85a4d3dfbeaad28ed9af9806b1cffee94e7c09db…> [LinkedIn] <https://click.e.atlassian.com/?qs=d85a4d3dfbeaad28d308fc3063901e31ebcf2af87…> [Twitter] <https://click.e.atlassian.com/?qs=d85a4d3dfbeaad287c0eb338fd26886549bd53c51…> Copyright 2025 Atlassian Pty Ltd. All rights reserved. We are located at 341 George Street, Sydney, NSW, 2000, Australia [https://image.e.atlassian.com/lib/fe4011727164047d751070/m/1/Atlassian-logo…]<https://click.e.atlassian.com/?qs=d85a4d3dfbeaad28406d841492c8dd349e0cd560d…> You are receiving this email because this is an important message regarding your account and products you are using. You are not allowed to unsubscribe from this type of message.

1 0

Update on ISO/IEC 27568 Digital Twins inputs
by Mark Lizar 19 Feb '25

19 Feb '25

Hi ANCR, Positive news I had the opportunity to participate and further support the ANCR Work, in ISO/IEC 27568 ad-hoc call, following up on the previous two submissions with the use case for digitally twinning notice, for transparency and the ethical governance of Ai. The work is well received and now being included for a document ballot next month, if all goes well, then a draft next fall. In addition, I mentioned dynamic and operational personal data functions of this use case to Antonio, who mentioned that this is a current topic with Europol. In addition, in the UK, they are calling for comments on a proposed governance framework to reform government services, due before March 8th, Which suggest a secure privacy, with transparency performance reporting, as a use case might be of high short term value. Best, Mark

1 0

Fw: Share Your Thoughts: New Cybersecurity Framework Profile for AI
by Salvatore D'Agostino 14 Feb '25

14 Feb '25

Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: NIST Cybersecurity and Privacy Program <csrc.nist(a)service.govdelivery.com> Sent: Friday, February 14, 2025 4:00:16 PM To: Salvatore D'Agostino <sal(a)idmachines.com> Subject: Share Your Thoughts: New Cybersecurity Framework Profile for AI We want to hear from you! [NIST] View As Web Page<https://links-1.govdelivery.com/CL0/https:%2F%2Fcontent.govdelivery.com%2Fa…> [Header] National Cybersecurity Center of Excellence Participate in the Development of a New Cyber AI Profile Recent advancements in Artificial Intelligence (AI) technology bring great opportunities to organizations, but also new risks and impacts that need to be managed in the domain of cybersecurity. NIST is evaluating how to use existing frameworks, such as the NIST Cybersecurity Framework (CSF), to assist organizations as they face new or expanded risks. Discussions with many in the cybersecurity community strongly suggest that there would be value in developing guidance based on the CSF to address these risks. NIST, through the National Cybersecurity Center of Excellence (NCCoE), is considering developing a Community Profile that is based on the CSF (a "Cyber AI Profile"). ________________________________ Share Your Thoughts Now and at Our Upcoming Workshop Cybersecurity, privacy, and AI practitioners are highly valued audiences for a Cyber AI Profile. To provide additional background information around potential approaches for creating the Profile, we have developed the Cybersecurity and AI Workshop Concept Paper<https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.nccoe.nist.gov%2Fprojec…>. You're invited help us define the scope of this work by providing your thoughts on the concept paper before 11:59 p.m. EDT on Friday, March 14, 2025. We encourage you to submit all feedback using the form found on our project page<https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.nccoe.nist.gov%2Fprojec…>. Your inputs will inform discussions during our upcoming workshop on Thursday, April 3, 2025. Please save the date! Join the Community of Interest Consider joining the Community of Interest (COI) to receive the latest project news and announcements. Email the team<mailto:CyberAIProfile@nist.gov> declaring your interest or complete the sign-up form on our project page. ________________________________ Questions/Comments about this notice: CyberAIProfile(a)nist.gov<mailto:CyberAIProfile@nist.gov> NCCoE Website questions: nccoe(a)nist.gov<mailto:nccoe@nist.gov> Connect with us [facebook]<https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.facebook.com%2FNIST/1/0…>[twitter]<https://links-1.govdelivery.com/CL0/https:%2F%2Ftwitter.com%2FNIST/1/010001…>[youtube]<https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.youtube.com%2FNIST/1/01…>[linkedin]<https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.linkedin.com%2Fcompany%…>[flickr]<https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.instagram.com%2Fnist%2F…> Received this email from a friend? Subscribe here<https://links-1.govdelivery.com/CL0/https:%2F%2Fpublic.govdelivery.com%2Fac…>. [ITL NIST]<https://links-1.govdelivery.com/CL0/https:%2F%2Fwww.nist.gov%2Fitl/1/010001…> Subscriber services: Manage Preferences<https://links-1.govdelivery.com/CL0/https:%2F%2Fpublic.govdelivery.com%2Fac…> | Unsubscribe<https://links-1.govdelivery.com/CL0/https:%2F%2Fpublic.govdelivery.com%2Fac…> | Help<https://links-1.govdelivery.com/CL0/https:%2F%2Fsubscriberhelp.govdelivery.…> ________________________________ If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com<https://links-1.govdelivery.com/CL0/https:%2F%2Fsubscriberhelp.govdelivery.…>. Technical questions? Contact inquiries(a)nist.gov<mailto:inquiries@nist.gov>. (301) 975-NIST (6478). This service is provided to you at no charge by National Institute of Standards and Technology (NIST). 100 Bureau Drive, Stop 1070 · Gaithersburg, MD 20899 · 301-975-6478 [GovDelivery logo]<https://links-1.govdelivery.com/CL0/https:%2F%2Fsubscriberhelp.granicus.com…> [https://links-1.govdelivery.com/CI1/0100019506431e1a-fa9d3ca3-0049-4d83-8e3…]

1 0

Approved WG Draft Kantara Recommendation Transparency Performance Report
by Salvatore D'Agostino 12 Feb '25

12 Feb '25

Hi WG, Thanks to everyone who has contributed to the effort in producing this document. It was unanimously approved on our call today. It now goes to the leadership council and then 45 day public review as a Kantara Recommendation. Transparency is critical and foundational to authority, security, and privacy. It is greatly lacking from a human perspective with regards to online activity. This work looks to change that. ANCR Transparency Performance Indicators v0.9 - Google Docs<https://docs.google.com/document/d/1XF5CQH7Z4hVVqcMPZPkTjgdIP-UQum8OWDlmaS8…> Sincerely, Sal IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Please note our new address. Email, phones, other contacts remain the same. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 0