Privacy-certification standards for extended-reality devices and services

In this position paper, we discuss the need for, and potential requirements for privacy certification standards for extended-reality devices and related services. We begin by presenting motivations, before discussing related efforts. We then review the issue of certification as a research problem and identify key requirements. Finally, we out-line key recommendations for how these might feed into a grander roadmap for privacy and security research.