This week, the Kantara Initiative was represented by Mark Lizar 2FC and Consent Receipt Specification author, who attended the Childrens AI Conference, with MyData for Children hosted by Unicef Helsinki / Finland. The focus was centred on the use, application and ethically / operational problems with AI and AI interaction for children with some deep dives into privacy and security challenges and benefits.

In addition, this week the Data Governance Act was also ratified in the EU. A deep dive into both of these topics both highlighted the role, use, and control of personal data and meta data by intermediaries.

The core AI and ethical issues are easily conflated, so it can be difficult to know how control and consent over surveillance may overlap with digital identity technology which controls it, or the rules which govern or required its use. AI topics produce questions around the role of a technical or legal intermediary and the control of personal data access and processing. The Data Governance Act looks to address these roles in practice. Practices in which a consent receipt is required but missing personal record system, and which is used as a vehicle for safeguarding rights and data controls in processing supply chains. Micro-credentials which can be managed in software systems with digital identity and access management technology. The Data Governance a credential wrapper for digital identifier management.

In this WG's effort to address these core technical and governance issues 2FN and 2FC will work to separate technical permissions in the context of access management and human permission referred in this workgroup (and draft charter update) as 'purpose of use' management. Distinguishing from identity management or online service provider implementation of consent with system centric permissions. Made more difficult through a consolidated industry effort to conflate these two types of permission (as digital trust) for commercializing digital identity (session based micro- security services) as digital trust services, which insinuate a micro-technical operational impact on trust or privacy.

The 2FN proof of authorization before processing policy, is a policy control for the use of AI, and through discussion was conceived as tool for safeguarding children's privacy in AI. The mirrored notice record standard : aka a Consent Receipt provides high quality, labelled data for people to manage their own micro-data and control its use and who benefits from this data when used as - meta-data. Promoting an alternative to services t&Cs for children, youth, indigenous data sovereignty and education environments. 2FN before 2FC for processing sovereign data to address the data governance requirements and safeguard the use of meta-data for data trusts - like school records with access management utilizing Consent Receipts.

Support the Children's Privacy Assurance Lab (Future Christmas Present) Policy . Micro-Data is Soverign Data, and requires data (and identity) trust, to be trustworthy by parents for a child's future.