Federal Privacy Council Digital Authentication Task Force | Members !!top!!

| | Agency / Office | Title / Role | Key Expertise / Background | |------------|---------------------|-------------------|--------------------------------| | Dr. Michele C. Miller | Office of Management and Budget (OMB) – Office of Federal Chief Information Officers (OFCIO) | Chair | 20+ years in federal IT governance, former CIO of the U.S. Department of Commerce, lead architect of the Federal Identity, Credential, and Access Management (FICAM) framework. | | Mr. John R. Cox | Department of Homeland Security (DHS) – Cybersecurity and Infrastructure Security Agency (CISA) | Vice‑Chair | Cyber‑risk analyst, former senior advisor on Identity & Access Management (IAM) for the Department of Defense, author of the “Secure Federal Authentication Blueprint.” | | Ms. Laura S. Baker | National Institute of Standards and Technology (NIST) – Information Technology Laboratory (ITL) | Technical Advisor – Standards | Lead of the NIST Digital Identity Guidelines (SP 800‑63 series), specialist in cryptographic authentication mechanisms and privacy‑enhancing technologies. | | Mr. Ravi K. Patel | U.S. Digital Service (USDS) | Technical Advisor – User Experience | Former product lead at a major consumer‑auth tech firm, champion of user‑centric design, responsible for the “One‑Stop Federal Login” prototype. | | Ms. Katherine L. O’Neil | Office of the Chief Information Officer, U.S. Department of Health & Human Services (HHS) | Agency Representative – Health | Oversaw rollout of the “MyHealthID” program, expertise in HIPAA‑compliant authentication and health data privacy. | | Mr. Samuel J. Gonzalez | Department of Treasury – Internal Revenue Service (IRS) | Agency Representative – Tax | Managed the IRS’s Secure Access platform, experience in large‑scale credential issuance and fraud detection. | | Ms. Rebecca M. Nguyen | Department of Justice (DOJ) – Office of the Attorney General – Privacy & Civil Liberties Division | Legal Counsel | Civil‑rights attorney, former counsel on the “Privacy Impact Assessment” for the FBI’s Next‑Generation Identification system. | | Dr. Ana M. Silva | Department of Education – Office of the Chief Information Officer (OCIO) | Agency Representative – Education | Directed the implementation of a federated login for federal student aid, research on privacy‑preserving authentication for minors. | | Mr. David P. Thompson | Federal Trade Commission (FTC) – Bureau of Consumer Protection | Policy Liaison | Leads the FTC’s “Identity Theft & Authentication” enforcement program, expert on consumer‑focused privacy regulations. | | Ms. Jenna M. Rogers | United States Postal Service (USPS) – Office of Information Technology | Agency Representative – Logistics | Spearheaded the USPS “Secure Mail Access” initiative, background in physical‑digital credential integration. | | Dr. Ethan L. Wang | Office of the Director of National Intelligence (ODNI) – Office of the Chief Information Officer | Intelligence Community Representative | Oversees secure authentication for classified and unclassified intelligence platforms, specialist in multi‑factor and hardware‑based token solutions. | | Ms. Sofia R. Mendoza | Department of Veterans Affairs (VA) – Office of Information and Technology | Agency Representative – Veterans | Managed the VA’s “Veteran Identity Credential” (VIC) system, focus on accessibility for disabled veterans. | | Mr. James K. Ellis | Library of Congress – Office of the Chief Information Officer | Cultural‑Sector Representative | Implemented federated access to digital archives, champion of open‑source authentication frameworks. | | Ms. Anita D. Singh | Office of the United States Trade Representative (USTR) – Digital Trade Team | International Liaison | Coordinates with foreign governments on cross‑border authentication standards, experience in the EU‑U.S. “Privacy Shield” negotiations. | | Mr. Thomas B. Kelley | Department of Transportation (DOT) – Federal Aviation Administration (FAA) | Agency Representative – Transportation | Led the FAA’s “Secure Traveler ID” project, expertise in biometric verification for high‑throughput environments. | | Ms. Grace H. Kim | Department of Energy (DOE) – Office of Cybersecurity, Energy Security, and Emergency Response (CESER) | Energy‑Sector Representative | Oversees authentication for critical energy infrastructure, focus on resilient, low‑latency credential systems. |

in multi-factor authentication (MFA). Creating frameworks for interoperable digital credentials. | | Agency / Office | Title /

Ensures veterans can access benefits securely and privately. Department of Commerce, lead architect of the Federal

| | Goal | Lead(s) | Status (as of Q1 FY 2025) | |----------------|----------|------------|------------------------------| | Unified Federal Authentication Service (UFAS) | Create a single sign‑on (SSO) platform for all public‑facing federal websites, leveraging OpenID Connect and FIDO2. | Dr. Miller (Chair), Ravi Patel (UX), Laura Baker (NIST) | Prototype completed; limited rollout to IRS, HHS, and VA. | | Zero‑Knowledge Identity (ZKI) Framework | Enable identity verification without exposing personally identifiable information (PII). | Ethan Wang (IC), Anita Singh (International), David Thompson (FTC) | Draft guidelines published; seeking public comment. | | Biometric Authentication Guidance for High‑Throughput Environments | Standardize facial/iris scans for transportation and border services while embedding privacy‑by‑design controls. | Thomas Kelley (DOT/FAA), Grace Kim (DOE), John Cox (CISA) | Pilot in three major airports; early data shows 1.8% false‑positive reduction vs. legacy systems. | | Credential Portability for Veterans | Allow veterans to carry a single, portable credential across VA, DoD, and civilian benefits platforms. | Sofia Mendoza (VA), Katherine O’Neil (HHS) | Beta testing with 5,000 veterans; 97% satisfaction rate. | | Privacy Impact Assessment (PIA) Automation Tool | Provide agencies an open‑source tool to auto‑generate PIAs for new authentication solutions. | Rebecca Nguyen (Legal), James Ellis (Library of Congress) | Open‑source release on GitHub; 12 agencies have adopted it. | | International Credential Exchange Protocol (ICEP) | Facilitate secure, privacy‑preserving credential verification with partner nations (e.g., Canada, EU). | Anita Singh (USTR), Laura Baker (NIST) | Draft MOU signed with Canada; technical specs in review. | Cox | Department of Homeland Security (DHS) –

Particularly members involved with Login.gov , the primary authentication hub for the public. 2. Technical Standards Contributors

The digital frontier is no longer a lawless wild west; it is becoming a highly structured landscape where identity is the most valuable currency. At the heart of this evolution sits the . While the name might sound like bureaucratic alphabet soup, their work represents the essential friction between national security and personal liberty. The Guardians of the Digital Handshake