Privacy Considerations for FIDO and Beyond
summary
FIDO has five articulated privacy principles and the guidance stresses biometric data never leaves device, disassociability and data minimization as concrete safeguards. NIST’s Privacy Framework (published Jan 2020) maps into five functions, 18 categories and 99 subcategories and is recommended to show how passkey deployments meet privacy engineering objectives. NIST DI Rev‑4 tightens requirements for privacy risk assessments, redress processes, biometric retention rules, independent algorithm testing and metrics for real‑world performance.
AI-written summary · about
chapters (10)
- 0:00Introduction and speaker intro
- 1:27FIDO privacy principles overview
- 3:11NIST privacy engineering objectives
- 6:25NIST Privacy Framework introduction
- 9:56Privacy Framework functions and categories
- 11:19NIST Digital Identity Guidelines Rev 4 privacy updates
- 12:25Privacy risk assessment explained
- 14:54Redress and metrics requirements
- 16:21Biometrics privacy requirements
- 18:33Q&A session
related talks
50mFIDO Passkeys - Passwordless in the Future
24mWhere FIDO Meets SSI
38mJourney to passwordless
07mImagine: A world without passwords, it is easy if you try
17mFIDO CTAP 2.1
47mWhy FIDO Security Keys & Webauthn are Awesome
24mFIDO in a Reusable digital identity network
18mA path to a world without passwords