ITU Focus Group on Trust and Identity for Humans and Agentic AI
Issued by
International Telecommunication Union
- September 30, 2026 · Correction — Replaced a link to an unrelated website with the ITU page, and added the launch date. (Cody Maxwell)
- September 30, 2026 · Correction — Corrected the group's acronym (FG-TIDA) and June 2026 founding, and removed OAuth claims that its terms of reference put out of scope (fact-check finding). (Cody Maxwell)
- October 1, 2026 · Correction — Rewrote the practical steps, newsletter hook, search description, and audience fields to match the entry's corrected content. (Cody Maxwell)
The International Telecommunication Union (ITU) launched a Focus Group on trusted digital identity and accountable behavior throughout the lifecycles of AI agents. It addresses agent identification, credentials, authorization, and agent-to-agent interactions. The work concerns organizations developing or deploying agents with delegated authority or external system access.
Applies To
Overview
The ITU Focus Group on Trust and Identity for Humans and Agentic AI (FG-TIDA) was set up by ITU-T Study Group 17 in June 2026 and announced in July. It prepares groundwork for formal standards. It was convened to define technical frameworks for non-human identity (NHI) management, meaning how AI agents are identified and controlled. It covers common terminology, reference architectures, trust frameworks, and interoperable identity and credentials for agents. Agentic AI protocols, AI governance, and national digital ID are out of scope. Its scope spans the full agent lifecycle, from provisioning and authorization through to revocation and audit. Outputs are expected to inform future ITU-T Recommendations (the ITU's formal technical standards), which member states and industry participants may incorporate into national and sector-specific requirements. The Focus Group operates as a consensus-building mechanism and does not itself carry binding enforcement authority. Obligations will arise downstream as its outputs are adopted into formal standards or referenced by regulators. Enterprises operating AI agents in cross-border or multi-party environments should monitor the group's working documents as early indicators of emerging international norms.
Key Requirements
- •No binding obligations exist at this stage; the Focus Group is a pre-standardization body producing draft frameworks and technical specifications.
- •Organizations participating as contributors must adhere to ITU membership and contribution procedures for Focus Group activities.
- •Future ITU-T Recommendations derived from this work may require conforming identity and credentialing architectures for AI agents operating in regulated or interconnected environments.
- •Agent identity systems will likely be expected to support verifiable credentials, delegation chains, and revocation mechanisms aligned with emerging ITU specifications.
- •Agentic AI protocols, AI governance, and national digital ID are outside the group's scope.
- •Timelines for formal Recommendations have not been published; enterprises should track Focus Group meeting cycles for draft deliverable releases.
What Your Organization Must Do
- →Inventory every AI agent your organization runs, noting what each one is allowed to do.
- →Document how each agent is authenticated, authorized, and switched off when no longer needed.
- →Assign ownership of agent identity to an existing team, such as identity and access management.
- →Add questions about agent credentials and delegation to vendor due diligence checklists.
- →Track the Focus Group's meetings and draft documents as early signals, not current duties.
- →Decide whether to join as a contributor, which requires following ITU membership and contribution procedures.
Playbook Guidance
Step-by-step implementation guidance for compliance teams.
Frequently Asked Questions
- Does ITU FG-TIDA create any binding compliance obligations for enterprises deploying AI agents right now?
- No, the Focus Group is a pre-standardization body, so enforceable requirements would only arise if its outputs feed formal ITU-T Recommendations that regulators then reference. Treat current drafts as early signals.
- Which types of organizations need to monitor ITU FG-TIDA outputs most closely?
- Organizations running AI agents with delegated authority across organizations or borders have the most to watch. That includes large technology firms, financial institutions, and public bodies whose agents deal with outside platforms.
- Does ITU FG-TIDA work on OAuth or other agent authorization protocols?
- No, its terms of reference put agentic AI protocols out of scope. It focuses on terminology, reference architectures, trust frameworks, and interoperable identity and credentials for agents.
- What is the expected timeline for ITU-T Recommendations to emerge from this Focus Group?
- No publication timeline has been announced. Track the group's meetings and working documents to see when drafts might mature into Recommendations.
- How does ITU FG-TIDA differ from the EU AI Act in terms of non-human identity requirements for AI agents?
- The EU AI Act covers transparency and risk classification but has no framework for agent identity or credential delegation. FG-TIDA works on that technical gap, so the two are complementary.
- What internal governance steps should compliance teams take now to prepare for future ITU agent identity standards?
- Inventory your AI agents and document how each is authenticated and authorized. Give an existing team, such as identity and access management, ownership of agent identity, and add agent credentials to vendor due diligence.