Kantara Initiative, Inc. is a non-profit trade association that works to develop standards for identity and personal data management. It focuses on improving trustworthy use of identity and personal data in the area of digital identity management and data privacy. Kantara translates to “wooden bridge” in Kiswahili, which is the inspiration for the bridge of Kantara’s logo. The name is attributed to Nat Sakimura, a Kantara founding board director and Open ID Foundation chair, who spent his childhood in Africa. Kantara drafts technical specifications and recommendations for industry use and submits them to standards development organisations, such as Organization for the Advancement of Structured Information Standards (OASIS), World wide Web Consortium (W3C), Internet Engineering Task Force (IETF) and SC27 (Security Techniques) Working Group 5 (Identity Management and Privacy) of the International Organization for Standardization (ISO). Kantara provides input to policy bodies such as OECD as well as some inter-government initiatives related to identity management and personal data agency. Kantara operates two distinct programs for the digital identity and personal data privacy communityApplied R&D (called KIPI Kantara Identity & Privacy Incubator) and Trust Framework Assurance. The Trust Framework Assurance program involves the creating assessment criteria for publicly available and industry sector standards and specifications, undertaking conformity assessment of a provider's service seeking compliance and subsequent granting of Trust Marks, along with the associated governance. Projects The Kantara Assurance Framework facilitates the 3rd party assessment and assurance of providers' services seeking conformance to NIST 800-63-3 at IAL 2 and AAL2, which was expected to extend to FAL2 later in 2019. The Kantara Consent Receipt specification v1.1 underwent a minor revision, and simultaneously a more generic broader based information sharing framework (from which the Consent Receipt was partly derived) was s being developed in response to community feedback interested in standardizing an expanding suite of profiles. An example of the Consent Receipt is referenced in the standard ISO/IEC 29184 Online privacy notices and consent. According to the initiative's executive director, the idea behind the consent receipt is for individuals and companies to both be able to maintain and manage permissions for personal data. The Kantara User-Managed Access (UMA) specificationa set of standardized extensions to OAuth 2.0 aimed at asynchronous user permissioning and delegated authorizationhas stabilized at V2.0 with the early adopter implementers now standardizing profiles and extensions. A Business and Legal framework is being developed to complement the technical protocol framework already completed.