- Wg-pemc - mailman.kantarainitiative.org

PEMC document comments
by Andrew Hughes 25 Nov '24

25 Nov '24

Hi PEMC - I took a slightly different approach to analysis of the requirements than perhaps others have. This document contains every statement of requirements in the document - excluding every "NOTE". I have commented on many of the requirements. (I ran out of steam for group 9 and group 10). andrew. *Andrew Hughes *CISM mobile/signal +1 250.888.9474 AndrewHughes3000(a)gmail.com *https://www.linkedin.com/in/andrew-hughes-682058a <https://www.linkedin.com/in/andrew-hughes-682058a>*

2 1

Update on PEMC
by John Wunderlich 21 Nov '24

21 Nov '24

1 0

Update on PEMC
by John Wunderlich 21 Nov '24

21 Nov '24

Hello; Please see yesterday’s minutes. • Some comments have come in, with promises of more to come by the deadline. I will be doing the comment disposition and circulating a track changes document in advance of next week’s meeting. Please read and attend if you can. • We are looking for organisations to take on the task of implementing the requirements internally. This serves two purposes: • The experience of real life implementations will feed into updating the implementors guidelines for the actual requirements • The experience will help determine how a certification process can proceed. Looking forward to seeing you next week Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

acm code of ethics would be a good reference
by Tom Jones 19 Nov '24

19 Nov '24

ACM 2018 Code of Ethics and Professional Conduct would always apply "Only the minimum amount of personal information necessary should be collected in a system. The retention and disposal periods for that information should be clearly defined, enforced, and communicated to data subjects. Personal information gathered for a specific purpose should not be used for other purposes without the person's consent. Merged data collections can compromise privacy features present in the original collections. Therefore, computing professionals should take special care for privacy when merging data collections" https://www.acm.org/code-of-ethics

2 1

Comment Disposition Draft of the PEMC report
by John Wunderlich 19 Nov '24

19 Nov '24

Please find attached the PEMC report with comment disposition in track changes. This is for your reference for tomorrow’s group call, and to provide a last opportunity to provide feedback. Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Reminder: No PEMC Call Today
by John Wunderlich 13 Nov '24

13 Nov '24

We will reconvene next week. Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Biometric Update points to PEMC report comment period!
by Andrew Hughes 12 Nov '24

12 Nov '24

ICYMI: https://www.biometricupdate.com/202411/kantara-wants-comment-on-privacy-rec… *Andrew Hughes *CISM mobile/signal +1 250.888.9474 AndrewHughes3000(a)gmail.com *https://www.linkedin.com/in/andrew-hughes-682058a <https://www.linkedin.com/in/andrew-hughes-682058a>*

1 0

Reminder: PEMC Call this week
by John Wunderlich 04 Nov '24

04 Nov '24

Hi folks; We are two weeks from the end of the public comment period for the draft report. The call this week will be to: 1. Take the group's pulse to ensure that all stakeholders have been engaged. 2. Review the next steps in the Kantara process to publication. 3. Brainstorm what to do next. Possibilities include: a. Update the implementor’s report to reflect the published recommendations b. Working with Kantara to train third parties to ‘certify’ vendors against PEMC c. Start working on Version 2 of the PEMC to include online transactions d. Discuss the Credential Exchange Protocol from FIDO. Is this in the scope of the PEMC? e. Other ideas? FYI, this was posted today: https://papersplease.org/wp/2024/11/04/tsa-launches-smartphone-based-digita… Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Re: agenda for wednesday
by John Wunderlich 29 Oct '24

29 Oct '24

1 0

agenda for wednesday
by Tom Jones 28 Oct '24

28 Oct '24

I hope that we are meeting this week because some issue have been raised by the EU ARF that we might need to address, not necessarily in the current draft - but we still need a response before the question is raised. 1. Is it required that the wallet verifiers the verifier and under what trust framework 2 Is it required that private keys are kept and used in secure storage on the phone Peace ..tom jones

1 0