Fw: Acceptance Notification – IEEE Symposium on Privacy Expectations (ISOPE)

Fyi paper on TPIs accepted for IEEE conference in fall. Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: gurvirender tejay <tejay@ieee.org> Sent: Wednesday, July 30, 2025 11:45 PM To: Salvatore D'Agostino <sal@idmachines.com> Cc: Sin-Kuen Hawkins <sinkuen.hawkins@ieee.org> Subject: Acceptance Notification – IEEE Symposium on Privacy Expectations (ISOPE) Dear Salvatore (Sal) D’Agostino, Thank you for your submission to the IEEE Symposium on Privacy Expectations (ISOPE). We are pleased to inform you that your work has been accepted for presentation at the symposium. As a reminder, the symposium will be held in person, and all presentations are expected to be delivered on-site. To help us with planning, we kindly request that you confirm your ability to present in person by August 6, 2025. Please reply to this email, or contact us directly at isope@ieee.org<mailto:isope@ieee.org>, to confirm your participation. We look forward to your contribution to what promises to be a stimulating and engaging event. Warm Regards, Dr. Gurvirender Tejay Chair, IEEE Symposium on Privacy Expectations (ISOPE) ___ Gurvirender P. S. Tejay, Ph.D. Chair, IEEE Symposium on Privacy Expectations<https://ieee-isope.org/> Chair - Education & Training Sub-Group<https://digitalprivacy.ieee.org/education>, IEEE Digital Privacy Initiative Editor-in-Chief, Organizational Cybersecurity Journal<https://www.emeraldgrouppublishing.com/journal/ocj> Associate Professor<https://www.hofstra.edu/faculty-staff/faculty-profile.html?id=11132> of Information Systems Co-Director, Cybersecurity Innovation and Research Center<https://www.hofstra.edu/cybersecurity-innovation-research/> Director, Cybersecurity Programs Department of Information Systems and Business Analytics Frank G. Zarb School of Business Hofstra University<https://www.hofstra.edu/> On Jun 30, 2025, at 2:46 PM, Salvatore D'Agostino <sal@idmachines.com> wrote: Dear committee, Please find attached an abstract for a presentation at the symposium on privacy expectations. This looks at work that has been taking place over the last 10 years on notice and consent in the International Organization for Standardization (ISO) and at the Kantara Initiative. Title: Transparency Performance Indicators (TPIs) – A User-Centric Methodology for Measuring the PII Controller Compliance and Conformance Presenter: Salvatore (Sal) D’Agostino Bio: Salvatore (Sal) D’Agostino is founder of IDmachines and recently launched Surveillance Trust. Sal’s experience in physical and digital systems include EZ Pass and numerous intelligent transport systems, 100+ industrial automation, robotics and computer vision systems, and numerous government and enterprise security, privacy, access control, and identity programs around the globe. Sal is active in the development and use of standards for physical and logical security and privacy. At the Kantara Initiative, Sal chairs the Anchored Notice and Consent Receipts (ANCR) Work Group. At IDmachines, Sal partners with the Security Industry Association (US) to conduct the OSDP Verified™ program that certifies “card” readers and “door” controllers to the ISO/IEC 60839-11-5 Open Supervised Device Protocol standard. Sal served as President and Chair of the Identity Ecosystems Steering Group (IDESG), the National Institute of Standards and Technology (NIST) sponsored initiative that developed and published a framework<https://www.idesg.org/The-ID-Ecosystem/Identity-Ecosystem-Framework/IDEF-Core-Documents.html> for trusted identities in cyberspace. Sal has an AB from Harvard College, collaborated with Ha Ha at the Hyde Park Art Museum, had a brief (8 minute) career as a professional wrestler. Sal is a retired member of the Mystic River Rugby Club, and the George Washington Rugby Football (PAC) Club. More information at https://www.linkedin.com/in/idmachines/ Sincerely, Sal D’Agostino Chair, ANCR WG, Kantara Initiative IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender. ________________________________ To unsubscribe from the ISOPE list, click the following link: https://listserv.ieee.org/cgi-bin/wa?SUBED1=ISOPE&A=1

Hi, I have some notes I thought I could share, that provides feedback to this specification. I am working on iAB Canada TPI #3 and #4 assessment and I noticed that for #3 - controller address is added again, but, I do think its a good idea to focus on the safety, security, privacy, and or consent access point and method, for TPI#3, (for future reference) For #4 - browsers are making it more difficult t get t the SSL certificate and for IAB - you actually have to download it to see the USA part of the Cert. Need to use Chrome browser to get it now. And, they hide analytics. So it’s a good example of SSL certificate being masked as much as possible to hide the little detail that demonstrates non-compliance at a national security level. If anyone else is into auditing IAB from the US perspective, #4 what score would you give it? - from Canada TPI-4 I think is a -1, Best, Mark
participants (2)
-
Mark Lizar
-
Salvatore D'Agostino