Kantara Initiative Privacy & Public Policy Teleconference

Date and Time

...

Suggested questions to raise:

• what measures does the strategy include to ensure that the goals of citizens/users are met, as well as those of government and public sector service providers?

• has correlation and its possible effect on user privacy been considered in the formulation of strategy? NB - a single service might be considered to have a 'low' privacy impact, but if its use can be correlated with access to other services (for instance, through use of the same e-authentication method) the over-all privacy impact may well be higher.

• has the USG classification of applications (according to appropriate LoA) been reviewed recently to take account of technical developments, changes in application and/or delivery channel (e.g. mobile access, PKI applicability etc)?

• "scope and mission creep": if the strategy is to "segment" applications according to LoA/authentication type, what plans are there for handling cases where i) the LoA pre-requisite of an application changes over time; ii) pressure grows to use a deployed 'low-assurance' credential for access to a 'medium-assurance' service rather than incur the expense of re-working for 'medium-assurance' credentials?

Closed actions from previous call:

• RW, IG to arrange meeting with US VISIT program CPO at Burton Catalyst - DONE.

Actions

(1) PC to help P3WG engage with policy-maker community - ONGOING (with RW apologies for late distribution of previous action items)

(2) Call for nominations to the posts of P3WG Chair and Vice Chair. - ONGOING

• First stage: nominations (staff at kantarainitiative dot org)
• Second stage: secret ballot (process to be determined)

(3) RW to invite Paul Hasson (CPO - US Visit) to participate in P3WG and report status.

(4) RW to post draft of "Privacy Assurance Module" concept for Identity Assurance schemes.

Document references:

• USG ICAM page, including documents on Trust Framework Providers and Identity Scheme Adoption http://www.idmanagement.gov/drilldown.cfm?action=privacy_workshop
• White House/OMB memorandum M-0404 (Levels of Assurance) http://www.whitehouse.gov/OMB/memoranda/fy04/m04-04.pdf

Next Meeting

• Date: Thursday, Aug. 20, 2009
• Time: 8:00 PDT | 11:00 EDT | 15:00 UTC (Time Chart)
  Dial-in details:
• US/Canada toll-free number: 1.866.305.1460
• Direct dial (toll) number: +1.416.620.1296
• Attendee Code: 9247530
• International toll-free numbers:
  o UK: 0800 917 5847
  o Netherlands: 08002659007
  o Belgium: 080079491
  o Japan: 00531160345
  These toll-free numbers are generously provided by BIPAC.