International Digital Privacy Day - Jan 28th

Share
International Digital Privacy Day - Jan 28th
Humans manage consent, systems manage permissions

We had a great event celebrating the Jan 28th launch of the Convention 108+ Digital Privacy and Trust Code of Conduct profile for digital identity and AI governance interoperability. The event featured the latest in digital transparency tech with presentations from Internet Safety Labs, Sal D'Agostino (IDmachines & Surveillance Trust), Joanne Cooper (IDExchange and the Global Digital Transparency Alliance), and Paul Knowles with Role Based Containment from Secours.AI—all presenting research and projects that scale with standard digital transparency.

Event Host & Moderation

Sharon Polsky, President of the Privacy and Access Council of Canada (PACC), hosted this landmark event—bringing together international transparency infrastructure leaders on International Data Protection Day. Her moderation highlighted critical governance challenges: lobbying influence on privacy legislation, regulatory capacity gaps, and the urgent need for grassroots infrastructure deployment independent of political cycles.

Core Framework: Transparency by Default

Our panel demonstrated controller transparency first digital-id architecture: controllers disclose identity BEFORE collecting personal data, enabling individuals to choose architectures they trust. Enabling Digital Consent.

This privacy-enabling approach implements Convention 108+ Article 8.2 notice requirements through:

  • Controller Identification Records at /.well-known/notice.txt
  • Universal Notice Receipts providing bilateral proof-of-notice
  • Notice Event Logs creating glass-box audit trails
  • 72 transparency configurations across 3 vectors × 4 TATA levels × 6 legal bases

Public Controller Technical Breakthroughs & Research

Kantara Transparency Performance Indicators Automated Compliance Assessment

Sal D'Agostino (IDmachines & Surveillance Trust, at the Kantara Initiative) Innovation: TPI-R (Transparency Performance Indicators) methodology for automated compliance assessment.

Live demonstration: Real-time Transparency Performance Reporting generated during presentation. Assessed healthcare site controller identification, notice timing, privacy access points, and security credentials against Convention 108+, GDPR, HIPAA, and sector standards.

Key distinction: "Humans manage consent, systems manage permissions." Conflating them enables surveillance architecture.

Role-Based Containment for Agentic AI

Paul Knowles (Dynamic Data Governance) presented warrant token architecture that is presented to the American Bar Association.
Innovation: Role-Based Containment for agentic AI. American Bar Association presentation (January 31, 2026).

Core concept: Ward as privacy boundary — bearer of consequence, locus of agency. Distinct from principle (accountability binding).

Internet Safety Labels That Drive Behaviour Change

Lisa LeVasseur (Internet Safety Labs) shared how App Microscope safety labels measure actual software behaviour risks.
Innovation: App Microscope safety labels measuring empirical software behaviour risks.

Transparency resistance pattern: "Nobody wants to admit they've seen our labels because then they'd have to act." Plausible deniability rather than overt opposition prevails. Products change or disappear after measurement.

Approach: Objective risk measurement infrastructure, not ethics compliance theater. Safety labels combine information and ingredient labels, doubling in scope during 2026 to include AI-related and dark pattern risks.

Strategic Coalition: Global Digital Transparency Alliance

Joanne Cooper (ID Exchange) outlined how harmonized transparency standards can unify siloed initiatives across open banking, health, and insurance—sectors facing identical cross-border data challenges.
Vision: Global Digital Transparency Alliance as multi-stakeholder coalition harmonising siloed initiatives across open banking, health, insurance, and other sectors facing identical transparency problems.

Strategic approach: "Don't ask permission, deploy, then bang the drums." Grassroots demonstration bypasses lobby resistance. Private-public partnership model where private sector sets pace, government follows evidence.

Commonwealth strategy: Leverage harmonised legal frameworks across 55+ jurisdictions as initial deployment target.

As Joanne noted, 0PN Lab is 18 months ahead of the closest competitor in multi-lateral transparency infrastructure. The window is open for early adopters to shape international digital transparency standards.

Key distinction validated across all speakers: Humans manage consent, systems manage permissions. Current surveillance-by-default architecture conflates these—enabling the exact privacy violations it claims to prevent.

Learn More

You are invited - the 0PN Lab is starting the Public-Privacy Transparency Conversation with a focus on new Digital Privacy Policy with Standard Public Transparency Technology.

Would you like to participate in OPN Workshops, present or Demo on DPTI topics, receipts, sovereignty tech ? join the new 0PN Lab community —> lab.0pn.org