The identity-tech knowledge base for AI systems and human operators.

Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

Pennsylvania Senate Committee Advances Adult-Site Age Verification Bill

Pennsylvania’s Senate Judiciary Committee has advanced Senate Bill 603 to establish mandatory age verification on adult websites that contain more than one-third content deemed harmful to minors, reporting the amended measure by a 12-to-2 vote. Under the updated legislative print, commercial platforms must verify that visitors are at least 18 years old using third-party commercial databases or transactional verification mechanisms, with strict statutory prohibitions barring the retention of identifying personal information after checks conclude. The bill exempts bona fide news and public-interest reporting while establishing a private right of action that permits affected users to seek damages, court costs, and legal fees for unauthorized data retention, with the mandate slated to take effect 90 days after enactment if cleared by the full Senate.

DigiCert Adds Verifiable Agent Identity to NVIDIA OpenShell Runtime

DigiCert has expanded its AI Trust Manager platform to support NVIDIA’s OpenShell runtime, introducing verifiable identities for autonomous AI agents through cryptographically signed AI Passports that link software agents to accountable human owners. Operating within NVIDIA’s external policy enforcement environment, the architecture issues policy-based permissions known as visas to govern agent access across local files, corporate networks, API credentials, and Model Context Protocol servers. When an autonomous agent attempts prohibited operations outside its designated operational scope, the integrated runtime blocks the action in real time, enabling administrators to revoke permissions and quarantine compromised agents across multi-enterprise environments.

VIDIZMO Pitched Police on Facial Search of Flock Camera Data

Surveillance software vendor VIDIZMO pitched police in Johnson City, Tennessee on deploying facial recognition across Flock camera footage and Axon body-worn video within a consolidated investigative search platform. According to public records from a May sales proposal, the vendor described workflows to ingest license-plate captures and surveillance clips to search for individuals by facial watchlist matches, vehicle attributes, and demographic classifications such as estimated age, gender, and race. While VIDIZMO CEO Nadeem Khan clarified that the company has not built a dedicated Flock export integration and Flock reiterated that it will not add facial recognition to its hardware, the proposal highlights vendor efforts to bridge automated license plate readers with external biometric video analytics.

New Zealand Moves Digital ID Accreditation Applications to Updated Rules

New Zealand’s Trust Framework Authority has formally transitioned digital identity accreditation to the consolidated Digital Identity Services Trust Framework Rules 2024, requiring all new provider applications submitted from September 28 onward to comply with the updated standards. Enacted under the Digital Identity Services Trust Framework Act 2023 following a 90-day transition period, the regulatory assessment evaluates provider operational capability, identity verification standards, privacy protections, and technical risk management over a three-year accreditation lifecycle. While pending applications filed prior to the cutoff remain under legacy rules, the updated benchmark governs all new commercial vendors and financial institutions seeking trust marks for reusable digital credentials.

Thales Brings Agent Access Controls to Google Cloud Gemini Enterprise

Thales has integrated its AI Security Fabric directly into Google Cloud Gemini Enterprise to enforce runtime security controls on AI agents as they query corporate tools, enterprise models, and sensitive databases. Designed to inspect multi-step agent workflows in real time, the policy enforcement layer prevents unauthorized data retrieval, restricts agent-to-agent interactions, and blocks prompt-injection attacks from hijacking business tasks. By continuous inspection at tool invocation rather than relying solely on initial employee login credentials, the integration provides enterprise security teams with centralized visibility to prevent data leakage across automated enterprise operations.

Entrust and MK Group Expand Cooperation on Government Credential Programs

Entrust and Vietnam-based smart-card manufacturer MK Group have signed a strategic framework agreement to jointly target government digital credential and e-passport programs across emerging international markets. The expanded alliance pairs Entrust’s physical and digital issuance systems, cryptographic security, and verification infrastructure with MK Group’s secure production plants and local integration capabilities across Vietnam, Laos, and Cambodia. Building on previous Asia-Pacific citizen identity implementations, the companies aim to bid jointly on national identity cards and electronic travel credential tenders across Asia, Africa, and Latin America.

British Transport Police Trial Scanned 500,000 Faces, Produced No Direct Arrests in First Phase

A public records disclosure revealed that the British Transport Police’s live facial recognition trial scanned over 500,000 faces across 18 London rail deployments between February and July without yielding a single direct arrest from biometric watchlist matches. The initial phase incurred £320,786 in operational costs, absorbed nearly 100 hours of officer time, and generated one false alert, though separate, unrelated arrests occurred while camera vans were operating on site. While the force reported three confirmed alerts in a subsequent pilot phase across London Underground stations, the initial outcome highlights ongoing scrutiny from civil liberties advocates regarding watchlist composition, public transit surveillance efficacy, and deployment expenditures.

IDEMIA Adds Passkeys and Restricted-Use Tokens for AI-Agent Payments

IDEMIA Secure Transactions has unveiled dedicated payment infrastructure enabling card networks and issuers to support tokenized AI-agent payments with passkeys while maintaining cardholder control over autonomous purchasing. Leveraging FIDO2-certified authentication, the platform combines cardholder passkey consent during setup with restricted-use digital tokens that limit agent spending by specific merchant, purchase category, transaction amount, or validity window. The architecture maintains an immutable audit trail of consumer authorization to protect financial institutions during dispute resolution, ensuring card issuers retain direct authorization controls without delegating payment security to third-party shopping agents.

New Haven Replaces Municipal Fingerprint Time Clocks with Face Recognition

The municipal government of New Haven, Connecticut, is deploying UKG InTouch TouchFree ID terminals to replace workplace fingerprint time clocks with facial recognition across 11 city facilities by the end of September. The transition affects approximately 340 municipal workers across public works, parks, IT, the assessor’s office, and a 911 dispatch center following the manufacturer’s end-of-life support for legacy Kronos 4500 fingerprint hardware. According to city Chief Technology Officer Michael Simeone, the standalone timekeeping units convert face scans into encrypted numerical templates, deleting original images immediately and storing records within the city’s private cloud to feed automated payroll systems.

–

By the ID Tech Editorial Team