Save the date(s)!

February 22, 2024

• Webinar: EU-U.S. TTC Webinar: Unpacking the Digital Identity Mapping Results

February 29, 2024

• Feedback on the report, as well as use cases and areas of potential US-EU cooperation on digital identity, is requested by 5:59 AM CET on March 1, 2024 / 11:59 PM EST on February 29, 2024. 
• Submit all feedback via CNECT-H4@ec.europa.eu or dig-comments@nist.gov

Background

Following a successful round of government-to-government technical exchanges earlier this calendar year, in March 2023, the European Commission and the U.S. Government, operating under the auspices of the EU-U.S. Trade and Technology Council (TTC), publicly committed to undertake a transatlantic mapping exercise with the objective of finding commonalities between the EU and U.S. approaches to digital identity. 

Released today, the jointly authored EU-U.S. TTC Digital Identity Mapping Exercise Report, provides the preliminary results of an initial mapping centered on the definitions, assurance levels, and references to international standards included across Revision 3 of the NIST Digital Identity Guidelines (Special Publication 800-63, Revision 3) and European Regulation (EU) No 910/2014 on electronic identification and trust services for electronic transactions in the internal market.  

Mapping exercise here. 

The next phase of this project will include collecting feedback and selecting potential use cases for transatlantic cooperation that highlight the need for and value of enabling the cross-border use of digital identities. The EC and the U.S. are actively seeking comments from communities with subject matter expertise in digital identity, privacy, human-centered design, and cybersecurity; organisations that have designed or implemented digital identity systems within the EU, the U.S., or in cross-border contexts; and others with equities related to the topic of digital identity. 

The Digital Identity Subgroup is particularly interested in feedback on the following topics:

1. Definitions
   1. Additional definitions that could be added to the existing mapping exercise
   2. Any additional context that could be incorporated in the current mapping to clarify when and how certain definitions apply
2. Levels of assurance
   1. Feedback on the extent to which the mapping reflects the experiences of individuals and organisations that have overseen or been the subject of real-world implementation
   2. Additional components (i.e., Column A of each tab within the linked mapping exercise spreadsheet) that could be added to the mapping, for instance evidence requirements or allowed authenticators.
3. International standards references
   1. Additional references that could be added
   2. Which standards individuals and/or their organisations rely on most often, and for what sectors and scenarios
4. Ecosystem gaps and questions
   1. If/what gaps exist in technical guidance and standards
   2. If/what gaps exist in the body of knowledge and research related to identity verification; open questions that could be addressed through dedicated joint EU-U.S. research efforts
   3. If/what gaps exist in the market of available identity verification services and technologies
   4. Barriers to cross-border interoperability of identity solutions and processes, such as policies, practical challenges and other factors
5. Use cases
   1. Input on the most critical use cases that would benefit from transatlantic pre-standardisation research cooperation on remote identification, e.g.:
      1. transportation/travel (digital travel credentials, mobile driving licences)
      2. financial services (retail payment, eInvoicing)
      3. health (health records)
      4. education/professional credentials (diplomas, certifications).