"The draft guidelines add programmatic fraud requirements for credential service providers," attorney Sean Griffin said.
