Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

2019 | Keeping Up With The Kantarians - Andrew Hughes | Identiverse | Day 1, June 25 | Washington D.C.

41 views

Published on

2019 marks Kantara's 10 year anniversary. What a ride! Kantara's provenance can help folks newer to the digital identity domain appreciate why recent history informs the current challenges. It also helps contextualize Kantara's 'raison d'etre' in drawing the community together to work on a range of specifications, best practice, R&D and conformity assessment programs. This session will connect the recent past with the 'here and now' to give attendees a rich tapestry of understanding to appreciate the role of industry consortia and standards development organizations to transition the digital economy to a more mature state.

Published in: Technology
  • Be the first to comment

  • Be the first to like this

2019 | Keeping Up With The Kantarians - Andrew Hughes | Identiverse | Day 1, June 25 | Washington D.C.

  1. 1. Privacy Control Panel An Introduction Identiverse June 2019 Andrew Hughes AndrewHughes3000@gmail.com Leadership CouncilChair, Kantara Initiative 1
  2. 2. 2 » PersonalData(Consent) Receipt » TheKantaraInitiative PrivacyControlPanelDemo » KantaraInitiativeConsent& InformationSharingWork Group Copyright © 2019 Kantara Initiative Inc.
  3. 3. 3 A simpleapproach A standardizeddata format A basis for invention& innovation Copyright © 2019 Kantara Initiative Inc.
  4. 4. WHAT IS A RECEIPT? 4Copyright © 2019 Kantara Initiative Inc.
  5. 5. 5 Asalesreceipt is: » A personalrecord » Independent of the receipt issuer » Evidence of the event » Containsinteraction‘metadata’ » Timestamps, Contact information, Verification codes » Transaction details, Cryptographic elements & signatures » Points to or containsissuer’s policy statements Copyright © 2019 Kantara Initiative Inc.
  6. 6. RECEIPTS AND THE ‘AGREEMENT FLOW’ 6Copyright © 2019 Kantara Initiative Inc.
  7. 7. 7Copyright © 2019 Kantara Initiative Inc.
  8. 8. 8Copyright © 2019 Kantara Initiative Inc.
  9. 9. 9Copyright © 2019 Kantara Initiative Inc.
  10. 10. 10Copyright © 2019 Kantara Initiative Inc.
  11. 11. 11Copyright © 2019 Kantara Initiative Inc.
  12. 12. 12Copyright © 2019 Kantara Initiative Inc.
  13. 13. 13Copyright © 2019 Kantara Initiative Inc. The ‘agreementflow’ illustratesimportant interactions » Offer—acceptterms » ‘Meeting of the minds’ » Intent to enter intoagreement » Record keeping » Exchange of ‘valuableconsideration’
  14. 14. 14Copyright © 2019 Kantara Initiative Inc. Salesreceiptsare requiredby law (AUS,NZ, others) or bycustom Why not Personal Data Receipts?
  15. 15. 15 Whenpersonal data is involved: » PrivacyNotice » Privacy Statement » Purpose of processing » Data controller contact information » PLUS Additional detailsthatare very familiarto Data ProtectionOfficers (but not to regular people) Copyright © 2019 Kantara Initiative Inc.
  16. 16. 16Copyright © 2019 Kantara Initiative Inc. The Kantara Initiative Consent Receipt * Privacy Statement & Notice Personal Data Receipt* Data Subject Rights
  17. 17. 17Copyright © 2019 Kantara Initiative Inc. The ‘agreementflow’ illustrates that theindependentpersonal record-keepingfunction is not supported fordata-related interactions!
  18. 18. 18 Apersonal data receiptis: » A personalrecord » Independent of the receipt issuer » Evidence of the event » Containsinteraction‘metadata’ » Timestamps, Contact information, Verification codes » Transaction details, Cryptographic elements & signatures » Points to or containsissuer’s policy statements Copyright © 2019 Kantara Initiative Inc.
  19. 19. 19 Standardized Personal Data Receipts offered to you whenever you agree to personal dataprocessing willhelp enable a product ecosystem that assists you to exercise your data rights… Copyright © 2019 Kantara Initiative Inc.
  20. 20. 20Copyright © 2019 Kantara Initiative Inc.
  21. 21. THE DEMO NARRATIVE 21Copyright © 2019 Kantara Initiative Inc.
  22. 22. Imaginein a few years: you have‘agreed’at 500 services Copyright © 2019 Kantara Initiative Inc. 22
  23. 23. Now What?
  24. 24. Use Your KantaraInitiative PrivacyControlPanel! (ofcourse) Copyright © 2019 Kantara Initiative Inc. 24
  25. 25. 25Copyright © 2019 Kantara Initiative Inc.
  26. 26. FeaturingKantaraMembers Copyright © 2019 Kantara Initiative Inc. 26
  27. 27. Live Demo@Identiverse Friday,June 28,2019 Copyright © 2019 Kantara Initiative Inc. 27
  28. 28. Live Demo@Identiverse Friday,June 28,2019 8:30 am Copyright © 2019 Kantara Initiative Inc. 28
  29. 29. 29Copyright © 2019 Kantara Initiative Inc. Automatic Receipt Generation& Offer  Definethe‘Shoebox’ API  Sites should offer receipts by default  Develop browser add-ons to convert existinginformation to Kantara standard receipt  Once people have many receipts, apps can be inventedfor management,control and action
  30. 30. 30Copyright © 2019 Kantara Initiative Inc.
  31. 31. 31Copyright © 2019 Kantara Initiative Inc. Next work items  Discover more implementations  Next version of the specification  Functional & structural updates  Additional use case requirements  Specification update project has started  Introduce personal data receipt concept to Privacy Engineeringcommunity  Adapt/adopt controlled vocabularies (e.g. W3C DPV)
  32. 32. 32Copyright © 2019 Kantara Initiative Inc. Known Implementations Tell us about your project! kantarainitiative.org/confluence/display/infosharing
  33. 33. Kantara Initiative Groups Contact Kantara Initiative: - the global consortium improving trustworthy use of identity and personal data kantarainitiative.org kantarainitiative.org/membership/ colin@kantarainitiative.org Consent & Information Sharing WG: - Consent Receipt specification - Interop demo development - Data sharing specifications kantarainitiative.org/confluence/display/infosharing andrewhughes3000@gmail.com JOIN: https://kantarainitiative.org/gpa-signup/?selectedGroup=3 Consent Practices WG: - Common practices for consent management kantarainitiative.org/confluence/display/consentmanagement andrewhughes3000@gmail.com JOIN: https://kantarainitiative.org/gpa-signup/?selectedGroup=40 Copyright © 2019 Kantara Initiative Inc. 33
  34. 34. Nurture. Develop. Operate. – that’s what we do Colin Wallis,Executive Director colin@kantarainitiative.org Twitter: @KantaraColin, @KantaraNews Join us at https://kantarainitiative.org/membership/ Ethics & Conformance Trust Marked 34

×