Web 4.0 and virtual worlds

Working group of the Metaverse Standards Forum dedicated to securing accessibility and inclusion for everyone in the metaverse.

The goal is to generate insights, identify risks, and recommend strategies and best practices to ensure that immersive experiences, environments, interfaces, and interactions are accessible to all, regardless of abilities or disabilities and access needs.

Ultimately, we will support the creation of comprehensive XR standards on par with the Web Content Accessibility Guidelines. This will enable organizations to know with certainty whether their XR applications are accessible or not, and open the door to the next phase of ethical growth of the metaverse.

This document provides a user-centric framework for handling personally identifiable information (PII), based on privacy preferences.

The requirements for a systems/software engineering process for privacy-oriented considerations regarding products, services, and systems utilizing employee, customer, or other external user's personal data are defined by this standard. Organizations and projects that are developing and deploying products, systems, processes, and applications that involve personal information are candidate users of the IEEE 7002 standard. Specific procedures, diagrams, and checklists are provided for users of the IEEE 7002 standard to perform conformity assessments on their specific privacy practices. Privacy impact assessments (PIAs) are described as a tool for both identifying where privacy controls and measures are needed and for confirming they are in place.

This document provides a framework for identifying and mitigating re-identification risks and risks associated with the lifecycle of de-identified data.This document is applicable to all types and sizes of organizations, including public and private companies, government entities, and not-for-profit organizations, that are PII controllers or PII processors acting on a controller’s behalf, implementing data de-identification processes for privacy enhancing purposes.

ISO/IEC 29100:2011 provides a privacy framework which- specifies a common privacy terminology;- defines the actors and their roles in processing personally identifiable information (PII);- describes privacy safeguarding considerations; and- provides references to known privacy principles for information technology.ISO/IEC 29100:2011 is applicable to natural persons and organizations involved in specifying, procuring, architecting, designing, developing, testing, maintaining, administering, and operating information and communication technology systems or services where privacy controls are required for the processing of PII.