National Strategy for Trusted Identities in Cyberspace (NSTIC) 

Privacy Workshop 

June 27-28, 2011 

Massachusetts Institute of Technology Media Lab 

E14 Building, 6th Floor, 75 Amherst St, Cambridge, MA 02139

WORKSHOP AGENDA 

Workshop Logistics 

The National Institute of Standards and Technology (NIST) will be holding the National Strategy for 

Trusted Identities in Cyberspace (NSTIC) Privacy and Usability Workshop on June 27 and 28, 2011 at 

the Massachusetts Institute of Technology Media Lab, E14 Building, 6th Floor, 75 Amherst St, 

Cambridge, MA 02139. 

Workshop Goals 

This workshop will discuss the privacy-enhancing objectives of the Strategy, including overcoming 

challenges of establishing user-centric privacy protections, and how to effectively implement them in the 

Identity Ecosystem Framework. 

The goal of this workshop is to provide a venue for discussion on topics related to the challenges of 

developing workable rules, guidelines and technologies for privacy protection, as well as possible means 

of implementing these protections. 

Day One - June 27 

7:30 – 8:30 A.M. Onsite registration and check-in 

8:30 – 8:40 A.M. Welcome: Jeremy Grant, Senior Executive Advisor for Identity Management, 

NIST 

 Welcome and opening comments 

 Goals of the Workshop 

8:40 – 9:00 A.M. Keynote: Professor Alex (Sandy) Pentland, MIT Media Lab 

9:00 – 10:00 A.M. NSTIC Background and Workshop Overview: 

 NSTIC Background: Jeremy Grant, NIST 

 Why privacy matters to the Administration and the NSTIC: 

Naomi Lefkovitz, National Security Staff, Executive Office of the President 

 Question and Answer period 

10:00 – 10:15 A.M. Break 
National Strategy for Trusted Identities in Cyberspace (NSTIC) 

Privacy Workshop - Agenda 

June 27-28, 2011 

2 

10:15 – 11:50 A.M. Panel Discussion – Privacy in Practice: A Case Study and Discussion on 

Implementing the FIPPs in the Identity Ecosystem 

Moderator: Dan Chenok, Senior Fellow, IBM Center for the Business of 

Government and Chair, Information Security and Privacy Advisory Board 

1) Case Study: FICAM Trust Framework Adoption Process(TFPAP) Privacy 

Criteria and Assessor Guidance 

Panelists: 

 Kellie Cosgrove Riley, Senior Attorney, Privacy and Identity Protection, 

Federal Trade Commission. Federal Trade Commission (FTC) 

 Don Thibeau, Open Identity Exchange (OIX) 

2) Moderated discussion 

Panelists: 

 Anna Slomovic, Chief Privacy Officer, Equifax 

 Mark Coderre, Head of Security Architecture, Aetna 

 Aaron Titus, Chief Privacy Officer, Identity Finder 

 Amie Stepanovich, National Security Counsel, EPIC 

 Alex Popowycz, VP of Information Security, Fidelity Investments 

11:50 – 12:00 Noon Introduction of breakout sessions 

12:00 – 1:15 P.M. Lunch 

1:15 – 3:00 P.M. Breakout Sessions: First Session 

Breakout Session 1 Breakout Session 2

This breakout will explore how the FIPPs 

can be translated from general principles 

into workable rules and guidelines 

specific to the Identity Ecosystem. 

 This breakout will explore questions 

around assessment, accountability and 

enforcement with respect to 

implementing privacy protections. 

3:00 – 3:15 P.M. Break 

3:15 – 4:30 P.M. Breakout Sessions: Second Session 

Topics from the first sessions will continue in each room. Participants are free 

to stay in the same session, or join a different one. 

4:30 – 4:45 P.M. Break 

4:45 – 5:30 P.M. Report summaries of discussions in Breakout Sessions 
National Strategy for Trusted Identities in Cyberspace (NSTIC) 

Privacy Workshop - Agenda 

June 27-28, 2011 

3 

Day Two – June 28

7:30 – 8:30 A.M. Onsite registration and check-in 

8:30 – 8:40 A.M. Welcome/Discussion of Goals for Day 2 

8:40 – 10:15 A.M. Panel Discussion – Privacy-Enhancing Technologies, Usability and the EndUser Experience 

Moderator: Dazza Greenwood, eCitizen Foundation 

Panelists: 

 Jeffrey Friedberg, Chief Trust Architect, Microsoft 

 Ken Mortenson, Chief Privacy Officer, CVS Caremark 

 John Clippinger, Harvard Berkman Center for Internet and Society and 

Co-Director of The Law Lab at Harvard University 

 Kaliya Hamlin (“Identity Woman”), Executive Director, Personal Identity 

Ecosystem Consortium 

 Seth Schoen, Staff Technologist, Electronic Frontier Foundation (EFF) 

 Dawn Jutla, Professor, Saint Mary's University, Halifax 

10:15 – 10:45 A.M. Break 

10:45 – 12:15 P.M. Breakout Session 

This breakout will focus on usability/user experience issues and the role of 

PETs in implementing privacy protections, along with related challenges. 

12:15 – 1:30 P.M. Lunch 

1:30 – 2:15 P.M. Report-outs from breakouts and wrap-up