Privacy Evaluations

This page documents the current status of deliverables being evaluated and previously evaluated by the Privacy Committee and its Evaluation Subcommittee. Evaluations are conducted in accordance with the Privacy Evaluation Methodology.

Current evaluations

Deliverable Title	Source Committee	Date Received	Evaluation Status	Next Action Date
SP 800-63	Standards	TBD	Beginning Review	8 March 2016
ISO 27001	Standards	6 November 2015	Queued	TBD

Previous evaluations

Deliverable Title	Source Committee	Date Received	Disposition	Date Completed	Report
ISO 27002	Standards	xx	xx	xx
OpenID Connect	Standards	8 October 2015	Privacy issues; no objection	5 January 2016
OAuth 2 Supplemental Specifications	Standards	17 December 2015	No privacy issues	5 January 2016
OAuth 2 Standard Adoption	Standards	10 September 2015	No privacy issues	3 November 2015
HIMSS Recommended Identity Assurance for Patient Portals	Management Council	10 June 2015	Privacy issues; objections to endorsement	11 August 2015	HIMSS Recommended Identity Assurance for Patient Portals evaluation
SP 800-37 R1 adoption	Standards	4 May 2015	No privacy issues	2 June 2015	SP 800-37R1 Privacy Evaluation
SP 800-53 R4 adoption	Standards	4 May 2015	1 privacy issue; no objection	2 June 2015	SP 800-53R4 Privacy Evaluation
IDESG Use Cases v1.4	Standards	11 Feb 2015	Tabled: Document not being forwarded to Plenary	3 March 2015	DRAFT Usecase v1.4 Privacy Evaluation
SAML standard adoption	Standards	18 Dec 2014	No privacy issues	20 Jan 2015	Privacy Eval of SAML 2.0 Standard
IDESG Use Cases 1.2	Standards	29 May 2014	Privacy issues, formal objection	13 Jan 2015	Use Case 1.2 Privacy Review
Standards Adoption Process	Standards	8 Oct 2014	No privacy issues	4 Nov 2014	SAP Privacy Review
Functional Model	Security	11 August 2014	No privacy issues	9 Sep 2014	Functional Model Privacy Review
Glossary (first 7 words)	Taxonomy AHG	TBD	No privacy issues	TBD
IDESG Use Cases 1.0	Standards	13 Feb 2014 (draft)	N/A	N/A
Value proposition	Financial Services	TBD	TBD	TBD
IDESG website		N/A	Privacy issues	March 2013	IDESG Website Privacy Evaluation