- Wg-pemc - mailman.kantarainitiative.org

(2) Notice and Choice Cannot Stand Alone | LinkedIn
by John Wunderlich 05 Dec '24

05 Dec '24

https://www.linkedin.com/pulse/notice-choice-cannot-stand-alone-association… Have a better than expected day, John Wunderlich “The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.” ― Anatole France Calendly: https://calendly.com/privacycdn LinkedIn: https://www.linkedin.com/in/privacycdn/ Bluesky: https://bsky.app/profile/privacycdn.bsky.social Mastodon: https://mastodon.social/@PrivacyCDN Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

2 1

Is this telling us that aamva & ausroada are collaborating on trust?
by Tom Jones 04 Dec '24

04 Dec '24

https://austroads.gov.au/latest-news/austroads-digital-trust-service-positi… thx ..Tom (mobile)

1 0

Cancelling tomorrow’s call
by John Wunderlich 03 Dec '24

03 Dec '24

No-one objected when I proposed cancelling tomorrow to catch up on comments and to allow for the absence of members at ISO meetings. Have a better than expected day, John Wunderlich “The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.” ― Anatole France Calendly: https://calendly.com/privacycdn LinkedIn: https://www.linkedin.com/in/privacycdn/ Bluesky: https://bsky.app/profile/privacycdn.bsky.social Mastodon: https://mastodon.social/@PrivacyCDN Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Next week?
by John Wunderlich 28 Nov '24

28 Nov '24

Hi; Next week a number of regular attendees at the PEMC calls will be in Japan at ISO meetings. I’m tempted to cancel the call. I’m still working to get the comments entered with proposed changes by next week. Any objections to cancelling next week’s call? Have a better than expected day, John Wunderlich “The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.” ― Anatole France Calendly: https://calendly.com/privacycdn LinkedIn: https://www.linkedin.com/in/privacycdn/ Bluesky: https://bsky.app/profile/privacycdn.bsky.social Mastodon: https://mastodon.social/@PrivacyCDN Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

ISO AI workshops
by Salvatore D'Agostino 28 Nov '24

28 Nov '24

https://jtc1info.org/technology/subcommittees/ai/workshops/ Get Outlook for iOS<https://aka.ms/o0ukef>

1 0

Comment Dispostion discusion starts today
by John Wunderlich 27 Nov '24

27 Nov '24

Folks; We received a number of comments close to the deadline last week. I’m still working on the disposition and there are a number that should be discussed - which will start today. Have a better than expected day, John Wunderlich “The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.” ― Anatole France LinkedIn: https://www.linkedin.com/in/privacycdn/ Bluesky: https://bsky.app/profile/privacycdn.bsky.social Mastodon: https://mastodon.social/@PrivacyCDN Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

FPF Launches New Privacy-Enhancing Technologies Repository - Future of Privacy Forum
by John Wunderlich 27 Nov '24

27 Nov '24

FYI: https://fpf.org/blog/fpf-launches-new-privacy-enhancing-technologies-reposi… Have a better than expected day, John Wunderlich “The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.” ― Anatole France LinkedIn: https://www.linkedin.com/in/privacycdn/ Bluesky: https://bsky.app/profile/privacycdn.bsky.social Mastodon: https://mastodon.social/@PrivacyCDN Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Cartoon - Notice and Choice
by John Wunderlich 25 Nov '24

25 Nov '24

Cartoon - Notice and Choice - TeachPrivacy https://teachprivacy.com/cartoon-notice-and-choice/ Have a better than expected day, John Wunderlich “The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.” ― Anatole France LinkedIn: https://www.linkedin.com/in/privacycdn/ Bluesky: https://bsky.app/profile/privacycdn.bsky.social Mastodon: https://mastodon.social/@PrivacyCDN Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

PEMC document comments
by Andrew Hughes 25 Nov '24

25 Nov '24

Hi PEMC - I took a slightly different approach to analysis of the requirements than perhaps others have. This document contains every statement of requirements in the document - excluding every "NOTE". I have commented on many of the requirements. (I ran out of steam for group 9 and group 10). andrew. *Andrew Hughes *CISM mobile/signal +1 250.888.9474 AndrewHughes3000(a)gmail.com *https://www.linkedin.com/in/andrew-hughes-682058a <https://www.linkedin.com/in/andrew-hughes-682058a>*

2 1

Update on PEMC
by John Wunderlich 21 Nov '24

21 Nov '24

1 0

Update on PEMC
by John Wunderlich 21 Nov '24

21 Nov '24

Hello; Please see yesterday’s minutes. • Some comments have come in, with promises of more to come by the deadline. I will be doing the comment disposition and circulating a track changes document in advance of next week’s meeting. Please read and attend if you can. • We are looking for organisations to take on the task of implementing the requirements internally. This serves two purposes: • The experience of real life implementations will feed into updating the implementors guidelines for the actual requirements • The experience will help determine how a certification process can proceed. Looking forward to seeing you next week Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

acm code of ethics would be a good reference
by Tom Jones 20 Nov '24

20 Nov '24

ACM 2018 Code of Ethics and Professional Conduct would always apply "Only the minimum amount of personal information necessary should be collected in a system. The retention and disposal periods for that information should be clearly defined, enforced, and communicated to data subjects. Personal information gathered for a specific purpose should not be used for other purposes without the person's consent. Merged data collections can compromise privacy features present in the original collections. Therefore, computing professionals should take special care for privacy when merging data collections" https://www.acm.org/code-of-ethics

2 1

Comment Disposition Draft of the PEMC report
by John Wunderlich 19 Nov '24

19 Nov '24

Please find attached the PEMC report with comment disposition in track changes. This is for your reference for tomorrow’s group call, and to provide a last opportunity to provide feedback. Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Reminder: No PEMC Call Today
by John Wunderlich 13 Nov '24

13 Nov '24

We will reconvene next week. Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Biometric Update points to PEMC report comment period!
by Andrew Hughes 12 Nov '24

12 Nov '24

ICYMI: https://www.biometricupdate.com/202411/kantara-wants-comment-on-privacy-rec… *Andrew Hughes *CISM mobile/signal +1 250.888.9474 AndrewHughes3000(a)gmail.com *https://www.linkedin.com/in/andrew-hughes-682058a <https://www.linkedin.com/in/andrew-hughes-682058a>*

1 0

Reminder: PEMC Call this week
by John Wunderlich 04 Nov '24

04 Nov '24

Hi folks; We are two weeks from the end of the public comment period for the draft report. The call this week will be to: 1. Take the group's pulse to ensure that all stakeholders have been engaged. 2. Review the next steps in the Kantara process to publication. 3. Brainstorm what to do next. Possibilities include: a. Update the implementor’s report to reflect the published recommendations b. Working with Kantara to train third parties to ‘certify’ vendors against PEMC c. Start working on Version 2 of the PEMC to include online transactions d. Discuss the Credential Exchange Protocol from FIDO. Is this in the scope of the PEMC? e. Other ideas? FYI, this was posted today: https://papersplease.org/wp/2024/11/04/tsa-launches-smartphone-based-digita… Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Re: agenda for wednesday
by John Wunderlich 29 Oct '24

29 Oct '24

1 0

agenda for wednesday
by Tom Jones 28 Oct '24

28 Oct '24

I hope that we are meeting this week because some issue have been raised by the EU ARF that we might need to address, not necessarily in the current draft - but we still need a response before the question is raised. 1. Is it required that the wallet verifiers the verifier and under what trust framework 2 Is it required that private keys are kept and used in secure storage on the phone Peace ..tom jones

1 0

Appeal for a graphic
by John Wunderlich 24 Oct '24

24 Oct '24

Hi folks; I’m wondering if you have a good graphic that shows a mobile credential on the phone, suitable for use on the PEMC web page or our communications? It would need to be an unbranded graphic that is either creative commons licensed or available to Kantara for unrestricted us. If you have any options please email me, and CC Karyn Bright (cc’ed on this email) Have a better-than-expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

2 Reminders for today
by John Wunderlich 23 Oct '24

23 Oct '24

Hello; Reminder 1: The PEMC Approved Draft is out for comments. Reminder 2: No Work Group Meeting today as we wait for and dispose of comments Current Disposition of Comments: https://kantara.atlassian.net/wiki/spaces/PEMCP/pages/683999246/Disposition… Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Rushed EU eID Wallet risks privacy and security - European Digital Rights (EDRi)
by John Wunderlich 16 Oct '24

16 Oct '24

Another FYI: https://edri.org/our-work/rushed-eu-eid-wallet-risks-privacy-and-security-c… Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Fwd: mDL use cases.
by Tom Jones 16 Oct '24

16 Oct '24

I would like to call out the team that is focused on Inclusive Identifiers - Entidad, also a contributor to Kantara. *Most Compelling and Most Socially Impactful* Team Entidad Use Case – Integrating mDL for nonprofits to reach and enroll underserved community members into social benefits programs. Peace ..tom jones ---------- Forwarded message --------- From: Marc L. Aronson <maronson(a)notary.org> Date: Wed, Oct 16, 2024 at 6:20 AM Subject: mDL use cases. To: John Wunderlich <john(a)wunderlich.ca>, Tom Jones < thomasclinganjones(a)gmail.com> *CA DMV Recognizes Companies for Outstanding mDL Use Cases at First Community Hackathon* *October 10, 2024* *Sacramento* – The California Department of Motor Vehicles (DMV) today announced recognition awardees of its first community hackathon focused on expanding the use of the California mobile driver’s license (mDL). Held at the Computer History Museum in Mountain View on October 1, 2024, this event brought together over 50 participants representing leading private sector businesses and innovators. Teams presented a range of use cases designed to enhance secure, privacy-focused digital identity solutions using the California mDL. The hackathon highlighted the versatility and potential of mDLs in various industries, from financial services to retail, and showcased proposals addressing privacy and security, user experience, and social impact. “We were impressed by the innovative solutions presented by the teams. Their efforts underscore the mDL’s potential to empower Californians to verify their identity in a safe and privacy-conscious way,” said DMV Director Steve Gordon. “These use cases demonstrate how mDL technology can impact both private and public sectors to the benefit of their customers.” The following teams were recognized at the event for their outstanding contributions: - *Most Compelling and Most Socially Impactful* Team Entidad Use Case – Integrating mDL for nonprofits to reach and enroll underserved community members into social benefits programs. - *Most Promising* Team Cisco VC Verifiers Use Case – Using mDL as a root digital identity to enable password less authentication. - *Best Privacy and Security Design* Team Block Use Case – Leveraging mDL for point-of-sale age verification of age-restricted products sold by Square merchants. - *Most Scalable* Team US Bank Use Case – Implementing mDL for in-person identity verification at bank branches, specifically for high-risk transactions. - *Best User Experience* Team UltraPass Use Case – mDL, combined with encrypted biometric authentication, to streamline account creation for new users and helps businesses prevent users from creating duplicate accounts. - *Best Presentation* Team MATTR (MATTR, Samsung, Treez, Nuvei) Use Case – mDL for identity and age verification in cannabis dispensary and delivery services. - *Best Independent Submission * Team UFI Use Case – Integrating mDL into existing Identity and Access Management (IAM) systems. The hackathon, co-hosted by the OpenID Foundation, demonstrated the increasing acceptance of mDL technology and its potential to provide Californians with a convenient, secure, and privacy-protecting identity verification option and businesses an effective way to reduce fraud and improve operational efficiency. The DMV plans to continue exploring mDL’s potential through future events, including a second hackathon scheduled for November 1 in Sacramento, which will focus on public sector applications. Local, state, federal and international government entities will participate in this event. The DMV’s mDL pilot, available through the California DMV Wallet app, continues to evolve with more than 780,000 Californians already participating. For more information on how to enroll, visit dmv.ca.gov/mdl. https://www.dmv.ca.gov/portal/ca-dmv-wallet. We'd love to hear about your experience with us here <https://notaryne.ws/feedback>! *Marc L. Aronson * President & CEO *Pennsylvania Association of Notaries* p: 800-944-8790 x113 | f: 800-707-7075 maronson(a)notary.org | www.notary.org <https://www.notary.org?utm_medium=email&utm_source=direct&utm_campaign=empl…> One Gateway Center, Suite 401 420 Fort Duquesne Blvd., Pittsburgh, PA 15222-1498 <https://www.linkedin.com/company/pennsylvania-association-of-notaries> <https://www.facebook.com/PaAssocNotaries> <https://www.instagram.com/paassocnotaries/> <https://www.tiktok.com/@panotaries> <https://www.youtube.com/user/PaAssocNotaries> This message (including any attachments) is confidential and may be privileged. If you have received it by mistake, please notify the sender by return e-mail and delete this message from your system. Any unauthorized use or dissemination of this message in whole or in part is strictly prohibited. Please note that e-mails are susceptible to change. The Pennsylvania Association of Notaries (PAN) shall not be liable for the improper or incomplete transmission of the information contained in this communication nor for any delay in its receipt or damage to your system. PAN does not guarantee that the integrity of this communication has been maintained nor that this communication is free of viruses, interceptions or interference.

1 0

DMV Recognizes Companies for Outstanding mDL Use Cases at First Community Hackathon - California DMV
by John Wunderlich 16 Oct '24

16 Oct '24

This was shared with my by a member of the workgroup: https://www.dmv.ca.gov/portal/news-and-media/news-releases/dmv-recognizes-c… Have a better-than-expected day, John Wunderlich @PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Reminder: No PEMC call today
by John Wunderlich 16 Oct '24

16 Oct '24

The draft recommendations are out for comment. Please share with your stakeholders that might want to comment. You can see the Disposition of Comments here: Disposition of Comments: PICPR20241010 - Privacy Enhancing Mobile Credentials (PEMC) - Kantara Initiative Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Privacy Framework 1.1 + Data Governance and Management Profile Workshop Summary Report Available Now!
by John Wunderlich 16 Oct '24

16 Oct '24

FYI https://content.govdelivery.com/accounts/USNIST/bulletins/3bc3a65 -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0