The Digital Chamber (“TDC”) applauds the National Institute of Standards and Technology (NIST) for incorporating key recommendations from the Chamber’s October 2024 comment letter into its recently released update of the Digital Identity Guidelines (SP 800-63, Rev. 4).
TDC’s comments, developed by Policy Director Jonathan Rufrano, highlighted the urgent need for digital identity standards that protect individual rights while enabling innovation in secure, user-controlled wallet infrastructure.
Among the changes NIST confirmed were:
- Establishing clearer requirements to ensure individuals have accessible mechanisms for grievances and redress, strengthening accountability between credential providers and users.
- Expanded expectations for transparent disclosure of terms governing trust agreements, ensuring users understand how their information is shared and protected.
- Stronger provisions around subscriber notice and consent, affirming that identity transactions must not be hidden from users or conducted without their knowledge.
- Structural clarifications that improve the resilience of wallet-based and decentralized identity solutions, an essential step toward user-controlled, self-sovereign identity.
These guidelines affirm that privacy and user self-determination remain critical priorities underpinning digital identity standards. However, TDC sees additional protections in forthcoming revisions to Digital Identity Guidelines, including:
- Enhanced user privacy protections by mandating derived attribute, rather than whole attribute, verifications (where applicable)
- Enhanced user control over deletion of data – to include video recordings and Personally Identifiable Information (PII)
- Removal of user location tracking during Digital ID verification
- Inclusion of public blockchain attestations as validation/verification platforms alongside phone, email, and physical communication platforms
As agencies, lawmakers and standards bodies navigate rulemaking the digital future, the Chamber remains committed to ensuring that the next generation of identity systems enhances freedom, privacy, and innovation.
If you have any questions, please reach out to policy@digitalchamber.org