Yearly Archives: 2019

Digital ID and the Future of Cities

On August 27 at The Bentway (an urban green space under the Gardiner Expressway in downtown Toronto), FedDev Ontario announced their investment of up to $11.1 million towards Innovate Cities. This not-for profit organization and Canadian-led network of innovators is involved in the development and commercialization of smart city technologies. 

The announcement touted Canada’s role in the global innovation race, and Toronto’s “moment on the world stage.” 

All over the world, the populations of cities are booming. Each week, an estimated 1.3 million people move into cities, and UN data indicates that, by 2050, around 70 per cent of the world’s population will live in cities. 

As populations grow, cities are also becoming more connected. Various connected devices are designed to enhance the daily routines of citizens, such as smart parking meters that help drivers find and pay for parking, and smart trash receptacles that can alert sanitation crews where trash collection services are required. 

“For smart cities to become a reality, they will need smart digital identity tools to connect citizens with their services,” noted an article from PYMNTS. 

In envisioning and building the cities of the future, digital ID has a role to play. 

Digital ID is the thread that connects individuals to such digital services. It will be the driving force in enabling such services and unlocking the full potential of smart cities.

To achieve this vision, digital identity innovation must be designed to protect people’s rights and privacy, while enabling them with tools that enable agency and choices over how and when information is shared and for what purpose. When designing for the cities of the future, it is important that citizens are put at the centre of an inclusive design process. 

“Digital ID is crucial to the development of our digital economy, and cities play a large role in this,” said DIACC President Joni Brennan. “As an organization strongly focused on collaboration, DIACC is excited by the work that Innovate Cities is doing to position Canada as a global leader in smart city innovation.” 

What if there were unattended kiosks through which citizens could access certain healthcare services, such as getting blood drawn or filling prescriptions? Digital ID plays a key role in this, as such a system will first require a secure digital identity solution before trusted by citizens or city officials. 

Digital ID is also applicable in the area of public transportation. Using connected devices as well as digital ID solutions, a smart city’s public transportation system would be able to automatically determine who is using these services and how much each traveler should pay. For example, Digital ID may also enable governments to deliver much needed benefits to low-income residents who ride the bus without subjecting those residents to a visible stigma. 

Digital ID plays an important role in making such solutions a reality, and achieving the optimal overall digital experience. In various cities around the world, we are seeing innovative experimentations in digital identity.

Trusted digital identity must enable people to access services efficiently and securely. Identity systems implemented across banks, government agencies, retailers and other organizations will improve the user experience. 

Investments such as this one from FedDev helps position Canada as a leader in our global digital economy, and ensure that innovation continues to occur.  As an organization that celebrates Canadian innovation and collaboration towards our digital future, DIACC is excited about the work that Innovate Cities is doing, and looks forward to seeing what’s next. 

 

Future Trust Markets Workshop

Seeking innovation funding?

DIACC invites you to join us at the Investing in Verified Information & Future Trust Markets Workshop taking place November 6-7, 2019, in Seattle, Washington. This is an invitation only event and space is limited. 

Attendees will include producers and B2B/G2B consumers of information verification and risk mitigation services alongside industry influencers and super-connectors.

How to Submit a Talk

  • Confirm your interest to participate by Friday, September 27th.
  • Send your outline to the DIACC event team via events@diacc.ca.
  • Using the NABC methodology, demos will be 15 minutes with 5 minutes for Q&A.
  • Demos must include
    • Title and Market: 
      • Need
      • Approach
      • Benefits
      • Competition 

Selection Process

  • An executive team comprising of the event organizers will review and select presentations to ensure a range of agenda diversity.
  • Early submissions will be treated with priority.
  • Submitters will be contacted following the review process.

If you are not interested to make a talk we would welcome you, or your designated representatives, to attend the event. 

If you have questions regarding this invitation, please don’t hesitate to advise the DIACC event team. 

We hope to see you there!

Trust in the Financial Sector: An Age Old Problem, A Modern Solution Needed

By Carrie Forbes, Chief Strategy Officer, League Data

Within the world of financial services, trust is core to the foundation of business and is assumed to be established in an exchange of these services. In modern times, this exchange is now invisible to us through the ether of digital banking. Yet, the problem of why we need trust in the first place has not evolved that much.

The evolution of the banking industry has been centred on this fundamental problem as old as the history of the rise of agriculture. Trust. It’s not just trust in the individual we make the transaction with, it’s also trust in process.

Picture yourself as a farmer at the dawn of agriculture, back in ancient Mesopotamia. You have agreed to exchange your grain for a pig at harvest. When the harvest arrives, your neighbour insists that the agreement was for you to give three bags of grain for the pig, but you understood it to be two. Do you trust that your neighbour is telling the truth? This issue created the need to establish a way to track a transaction, since simply agreeing to the deal was no longer enough. The next spring, we decide to imprint the exchange on a piece of clay, so we can avoid this embarrassing confusion next harvest. We have now just established one of the earliest forms of currency. From clay marks to coins to paper, civilizations established a physical token to ensure that the original value of that exchange held true. Currency became the means by which you could trust the transaction value.

From ancient times to today, trust remains an important component in conducting transactions

Let’s move forward a few centuries. You are now a trader, sailing through Europe trading silk, spices and gold. Unfortunately, you have been attacked by pirates who took half of your goods before you could fight them off. By the time you arrive to your port, you have some explaining to do. The merchant you are doing business with believes you are hoarding some of the goods and gold, and doesn’t believe your story about the pirates. He has seen this all too often from so-called ‘honest-brokers’ like you, and wants his full compensation. How can you prove that you were the unfortunate victim of piracy? This very real need gave rise to the development of double-entry accounting – a method to prove that the value of goods and services exchanged were as promised. By keeping a ledger, the exchange could be effectively tracked from point of departure to destination, mitigating these interceptions. The evolution of the banking industry has been centred on this fundamental problem as old as the history of the rise of agriculture. Trust. It’s not just trust in the individual we make the transaction with, it’s also trust in process.

Fast forward to the 21st century, where the digital revolution is now entrenched in everyday life, including how we bank and conduct transactions. The speed and convenience of making a purchase happens as quickly as we can hit ‘like’ on a social media post. We have all the means to say yes with a swipe or tap, often faster than our brains can actually process the decision. Modern pirates are finding new ways to intercept our transactions, using the very tools that provide the convenience and speed we demand as part of our financial service experience. However, the gold they are most interested in raiding is our personal data, including our personal identity.

The recent buzz at financial technology conferences continues to remind us that “data is the new oil.” Financial data is highly sought after by hackers, as it can facilitate criminal activities like money laundering and terrorist financing, which are much bigger bounties than just cash alone. With legitimate identities, bad actors can also infiltrate communities, create fake identities and disrupt government activities. The overall impacts are more sophisticated, but the problem remains the same as it did in Mesopotamia; we need new ways to build digital trust.

To learn more about digital ID’s role in the financial services sector, read our mini white paper, DIACC Industry Insights: Digital ID in Financial Services. 

Request for Comment and IPR Review: PCTF Notice and Consent Component Overview & Conformance Profile Draft Recommendations V1.0

Le français suit

STATUS: This review is now closed. Thank you for your participation!

Notice of Intent: DIACC is collaborating to develop and publish a Notice and Consent industry standard as a Component of the Pan-Canadian Trust Framework to set a baseline of public and private sector interoperability of identity services and solutions. 

Document Status: These review documents have been approved as Draft Recommendations by the DIACC’s Trust Framework Expert Committee (TFEC) that operates under the DIACC controlling policies.

Summary:

The Notice and Consent Component defines a set of processes used to formulate a statement about the collection, use and disclosure of personal information, and to obtain a consent decision on that statement from a person authorized to do so. The Notice and Consent processes ensure that notice statements are accurately formulated according to defined requirements, that the person making the consent decision has the authority to do so, and that the management of that consent decision is possible.

The objective of the Notice and Consent Component is to ensure the ongoing integrity of the notice and consent processes by applying standardized conformance criteria for assessment and certification. A certified process is a trusted process that can be relied on by other participants of the Pan-Canadian Trust Framework. 

The Notice and Consent Component builds on the Privacy baseline that is in development.

To learn more about the Pan-Canadian vision and benefits-for-all value proposition please review the Pan-Canadian Trust Framework Overview.

Invitation:

  • All interested parties are invited to comment.

Review Documents:

Supporting Documents:

Period:

  • Opens: September 9 at 23:59 PST | Closes: October 25, 2019 at 23:59 PST

Intellectual Property Rights:

Comments must be received within the 45-day comment period noted above. All comments are subject to the DIACC Contributor Agreement; by submitting a comment you agree to be bound by the terms and conditions therein. DIACC Members are also subject to the Intellectual Property Rights Policy. Any notice of an intent not to license under either the Contributor Agreement and/or the Intellectual Property Rights Policy with respect to the review documents or any comments must be made at the Contributor’s and/or Member’s earliest opportunity, and in any event, within the 45-day comment period. IPR claims may be sent to review@diacc.ca. Please include “IPR Claim” as the subject.

Process:

  • All comments are subject to the DIACC contributor agreement.
  • Submit comments using the provided DIACC Comment Submission Spreadsheet.
  • Reference the draft and corresponding line number for each comment submitted.
  • Email completed DIACC Comment Submission Spreadsheet to review@diacc.ca.
  • Questions may be sent to review@diacc.ca.

Value to Canadians:

The Notice and Consent Component will provide value to all Canadians, businesses, and governments by setting a baseline of business, legal, and technical interoperability. The DIACC’s mandate is to collaboratively develop and deliver resources to help Canadian’s to digitally transact with security, privacy and convenience. The Pan-Canadian Trust Framework is one such resource. The Pan-Canadian Trust Framework represents a collection of industry standards, best practices, and other resources that help to establish interoperability of an ecosystem of identity services and solutions. The DIACC is a not-for-profit coalition of members from the public and private sector who are making a significant and sustained investment in accelerating Canada’s Identity Ecosystem. 

Context:

The purpose of this Draft Recommendation review is to ensure transparency in the development and diversity of a truly Pan-Canadian, and international, input. In alignment with our Principles for an Identity Ecosystem, processes to respect and enhance privacy are being prioritized through every step of the PCTF development process. 

DIACC expects to modify and improve these Draft Recommendations based upon public comments. Comments made during the review will be considered for incorporation into the next drafts and DIACC will prepare a Disposition of Comments to provide transparency with regard to how each comment was handled. 

Guide d’examen des ébauches de recommandations pour l’aperçu de la composante « Avis et consentement » et le profil de conformité de l’avis et du consentement V1.0

Déclaration d’intention: Le DIACC collabore pour développer et publier une norme de l’industrie en matière d’avis et de consentement en tant que composante du cadre de confiance pancanadien afin d’établir une base d’interopérabilité des services et solutions d’identité dans les secteurs public et privé.

État des documents: Ces documents à examiner ont été approuvés en tant qu’ébauches de recommandations par le Comité d’experts du cadre de confiance (TFEC) du DIACC, qui est régi par les politiques qui contrôlent le DIACC.

Résumé

La composante « Avis et consentement » définit un ensemble de processus servant à formuler un énoncé sur la collecte, l’utilisation et la divulgation des renseignements personnels, et à obtenir une décision relative au consentement à propos de cet énoncé de la part d’une personne autorisée à la prendre. Les processus d’avis et de consentement s’assurent que les avis sont formulés avec exactitude conformément aux exigences définies, que la personne qui prend la décision relative au consentement est autorisée à le faire et que la gestion de cette décision est possible.

La composante « Avis et consentement » a pour objectif d’assurer l’intégrité continue des processus d’avis et de consentement en appliquant des critères de conformité uniformisés pour l’évaluation et la certification. Un processus certifié est un processus de confiance auquel peuvent se fier les autres participants du cadre de confiance pancanadien.

La composante « Avis et consentement » repose sur les éléments de base du respect de la vie privée qui sont en cours d’élaboration.

Pour en savoir davantage sur la vision du cadre de confiance pancanadien et les avantages qu’il procure à tous, veuillez lire le document Aperçu du cadre de confiance pancanadien.

Invitation

  • Toutes les parties intéressées sont invitées à faire des commentaires.

Documents à examiner

Documents de référence

Période

  • Début: 9 septembre 2019 à 23 h 59 HP | Fin : 25 octobre 2019 à 23 h 59 HP

Droits de propriété intellectuelle

Les commentaires doivent être reçus pendant la période de 45 jours indiquée ci-dessus. Tous les commentaires sont assujettis à l’entente de contributeur du DIACC; en soumettant un commentaire, vous acceptez d’être lié par les conditions qu’elle renferme. Les membres du DIACC sont également assujettis à la politique sur les droits de propriété intellectuelle. Tout avis d’intention de ne pas octroyer une licence en vertu de l’entente de contributeur et/ou de la politique sur les droits de propriété intellectuelle relativement aux documents à examiner ou à des commentaires doit être donné dès que le contributeur et/ou le membre en ont la possibilité, et en toute circonstance, pendant la période de commentaires de 45 jours. Les revendications au titre des droits de propriété intellectuelle peuvent être adressées à review@diacc.ca. Veuillez indiquer « Revendication en matière de propriété intellectuelle » dans l’objet.

Processus

  • Tous les commentaires sont assujettis à l’entente de contributeur du DIACC.
  • Veuillez utiliser le formulaire prévu à cet effet pour soumettre vos commentaires au DIACC.
  • Assurez-vous d’indiquer le numéro de ligne correspondant à chaque commentaire soumis.
  • Le formulaire de soumission de commentaires au DIACC doit être envoyé par courriel, dûment rempli, à review@diacc.ca.
  • Questions :review@diacc.ca.

Valeur pour les Canadiens

La composante « Avis et consentement » procurera de la valeur à l’ensemble des Canadiens, entreprises et gouvernements en établissant une base d’interopérabilité commerciale, juridique et technique. Le DIACC a pour mandat de collaborer au développement et à la prestation de ressources visant à aider les Canadiens à faire des transactions numériques qui sont sécuritaires et commodes, et qui respectent leur vie privée. Le cadre de confiance pancanadien est une de ces ressources. Il représente un ensemble de normes de l’industrie, de pratiques exemplaires et autres ressources qui aident à établir l’interopérabilité d’un écosystème de services et solutions en matière d’identité. Le DIACC est une coalition sans but lucratif de membres des secteurs public et privé qui effectuent un investissement important et soutenu pour accélérer l’écosystème de l’identité du Canada.

Contexte

L’examen des ébauches de recommandations a pour but d’assurer la transparence de l’élaboration et de la diversité d’un apport véritablement pancanadien et international. Conformément à nos principes pour un écosystème de l’identité, la priorité est accordée aux processus visant à respecter et à renforcer la vie privée à chaque étape du processus de développement du cadre de confiance pancanadien. Le DIACC s’attend à modifier et à améliorer ces ébauches de recommandations en fonction des commentaires du public. Les commentaires faits pendant l’examen seront pris en compte pour être intégrés dans les prochaines ébauches et le DIACC va préparer un document expliquant d’une façon transparente comment chaque commentaire a été traité.

Spotlight on Libro Credit Union

  1. What is the mission and vision of Libro Credit Union?

Libro is dedicated to growing prosperity in Southwestern Ontario by transforming banking.

We are a democracy and a cooperative, led by our social purpose. Every dollar we make is another dollar we can use to grow prosperity. And Libro is a B Corp – that means we have achieved accreditation as part of a global movement to use business as a force for good.

2. Why is trustworthy digital identity critical for existing and emerging markets?

Fraud and hacking continue to increase. Individuals and businesses want to safely and securely do business online, access health records, open accounts and more.  

Open Banking and Payment Modernization will enable the sharing of more data than ever before.

It’s critical to develop a digital identity framework that allows Canadians to use digital services while protecting their identity and data.

3. How will digital identity transform the Canadian and global economy? How does Libro Credit Union address challenges associated with this transformation?

A secure and trusted digital identity framework can benefit the economy in many ways: reduce fraud, eliminate inefficient and manual paper-based processes and enable seamless service delivery.

Libro is dedicated to growing prosperity in Southwestern Ontario by transforming banking. Our purpose is to help owners achieve their goals and support businesses to create a thriving local economy and contribute to a strong and prosperous communities.

4. What role does Canada have to play as a leader in the space?

Canada is a leader in financial services and protecting the privacy interests of Canadians. We have the opportunity for leaders from all sectors such as Financial, Health Care, Government, Education and Technology to collaborate on a secure and trusted solution for Canadians.

5. Why did Libro Credit Union join the DIACC?

DIACC brings together thought leaders from all sectors to collaborate on digital identity.  Libro joined DIACC to be part of the conversation, contribute and learn.

6. What else should we know about Libro Credit Union?

Everyone’s an Owner – shareholder value is the same as customer value.

Libro is based on coaching principles, for both staff and Owners. That means helping those around you to achieve more, by guiding them positively. We set people up for success. Everybody has a coach.

Libro always takes the long-term view. We’ll build a relationship with Owners over time, instead of trying to sell you something in the short-term. We’re looking for a customer relationship that lasts.

DIACC Industry Insights: Digital ID in Health Care

What is Digital ID and How Does It Impact Key Industries and Their Customers? How can you take action to progress digital ID?

This ‘mini white paper’ is the second in a four-part series prepared by DIACC, highlighting the potential impact that digital ID could have on key sectors of the Canadian (and global) economy.  

The focus of this paper is the health care industry. Find out what you need to know about the applications of digital ID in the industry, and how it impacts key stakeholders, including patients, practitioners and policymakers. 

Read the full paper: DIACC Industry Insights: Digital ID in Health Care

Spotlight on GET Group NA

  1. What is the mission and vision of GET Group NA?

GET Group North America has long been committed to combating identification fraud with cutting-edge, end-to-end solutions and personalization capabilities, enabling the most secure ID credentials possible.

Identity solutions are going mobile, and the security of physical documents must carry into this new age. GET Group NA is an early innovator in this space, ensuring that mobile driver’s licenses (mDLs) are standardized to support global interoperability and protect citizen privacy. We are looking to bring standardized in-person interactions into digital identity which has, to date, operated online.


2. Why is trustworthy digital identity critical for existing and emerging markets?

Many use cases we engage in daily require a government issued identity credential. While many other digital identities are becoming more trustworthy, the gap still exists for covering compliance and legal requirements that ID cards currently fulfill. The opportunity exists to improve privacy and control while streamlining physical world processes.

We’ve been working actively with the International Organization of Standardization (ISO) in developing a pivotal standard for mobile ID technology — ISO 18013-5 — which will become the international standard for mDLs upon publication in 2019 and will specify technical and interoperability requirements. The approach in ISO 18013–5 provides mechanisms to obtain and trust the data from an mDL that is similar to how ePassports are trusted. Developing applications on the ISO standard will enable more flexible options for how mDLs can be used globally.

3. How will digital identity transform the Canadian and global economy? How does GET Group NA address challenges associated with this transformation?

While fraud prevention and increased efficiency are often cited as benefits of mobile ID adoption, GET Group NA is also excited about the opportunities for changing the way services can be both delivered and personalized without compromise to citizen privacy. Existing services can be delivered in innovative ways, with the chance to re-personalize customer service and save citizens a considerable amount of time.

More and more daily transactions are taking place on mobile devices, from banking to shopping, and beyond. Having your ID right on your phone adds convenience, as tech-savvy consumers prefer to no longer carry a wallet at all. Increased accuracy will benefit Verifiers, and utilizing multiple modes of standardized interaction will permit Verifiers to provide services to customers in new, streamlined ways. This has the potential to transform economies around the world.  

GET Group NA’s GET Mobile ID™ is a mobile identity platform that combines compliance with identity security requirements, privacy by design, and American Association of Motor Vehicles Administrators (AAMVA) standards with the convenience and usability of a mobile application. GET Mobile ID can allow users to securely and efficiently convert to digital identification. Providing a high assurance identity on a user’s mobile device represents a convenient, secure and instant alternative to traditional physical identification documents. GET Mobile ID utilizes formidable data encryption algorithms and communication security measures. It is about putting the citizen in control of their government-issued identity documents and permitting them to securely use their identity everywhere – at point of sale, clubs, stadiums, travel, and for accessing government services.  

4. What role does Canada have to play as a leader in the space?

Canada has a united effort led by government, business, and thought leaders to build the most comprehensive framework tailored for Canadian interests.  The example being set for the rest of the world makes the DIACC effort worthy of participation.  Canada has always led the way in protecting the privacy interests of citizens, and will continue to do so.

5. Why did GET Group NA join the DIACC?

GET Group NA’s history in passport documents has led us to want to mobilize Canadian citizens with ISO 18013-5 standard-compliant identity.

We’re eager to bring our government identity document expertise into DIACC to apply to the Trust Framework, and are actively seeking a Mobile ID or mDL pilot in Canada.

6. What else should we know about GET Group NA?

GET Mobile ID is the first mobile ID solution to support ISO 18013-5-compliant near-field communication (NFC) identity transactions for retail on both iOS and Android devices. GET Group NA and our global partner Scytáles AB are the first to extend the new ISO 18013-5 standard so that iOS devices can also use NFC for data transmission, or allow NFC tap followed by either local or online data transfer, all under citizen control. 

Supporting NFC for both iOS and Android devices is critical to developing a variety of more secure and convenient retail, payment, and ID verification use cases for mobile driver’s licenses and other forms of mobile ID.

GET Group North America recently announced a new technology solution, GET Mobile Administrator, which will enable DMVs and other ID card Issuing Authorities to provide mobile driver’s licenses (mDLs) and other forms of mobile identification (mIDs) that comply with global interoperability standards. Read the press release.

Request for Review and Comment: PCTF Privacy Component Overview V0.05 and Privacy Conformance Profile V0.12 Discussion Drafts

STATUS: This review is now closed. Thank you for your participation!

Notice of Intent: DIACC is collaborating to develop and publish a Privacy industry standard as a Component of the Pan-Canadian Trust Framework (PCTF) to set a baseline of standards and practices that guide public and private sector interoperability of identity services and solutions.

Le français suit

Summary:

The Privacy Component of the PCTF is concerned with the handling of personal data for digital identity purposes. The objective of the Privacy Component is to ensure the ongoing integrity of the privacy processes, policies and controls of organizations in a digital identity ecosystem by means of standardized conformance criteria used for assessment and certification against the PCTF. The Conformance Criteria for the Privacy Component specify how the PIPEDA Fair Information Principles, defined by the Office of the Privacy Commissioner of Canada, are relevant/apply to the handling of digital identity data. (Note: These do not intend to replace existing regulations; organizations are expected to meet privacy regulations in their jurisdiction).  

Privacy is a fundamental requirement of digital identity interactions. As such, all components in the PCTF have a responsibility to follow privacy-respecting practices. Privacy-respecting practices rely on the principle that individuals are informed about the details and potential benefits and consequences associated with managing their personal information.

Invitation: 

  • All interested parties are invited to comment including identity issuers, identity consumers, developers, and potential users.
  • The Discussion Drafts have been developed by the DIACC Trust Framework Expert Committee (TFEC) that operates under the DIACC controlling policies.

Documents:

Period:

Opens: August 5, 2019 at 23:59 PST | Closes: September 5, 2019 at 23:59 PST

Process:

  • All comments are subject to the DIACC Contributor Agreement;
  • Submit comments using the provided DIACC Comment Submission Spreadsheet;
  • Reference the draft and corresponding line number for each comment submitted;
  • Email completed DIACC Comment Submission Spreadsheet to review@diacc.ca;
  • Questions may be sent to review@diacc.ca.

Value to Canadians:

The Privacy Component will provide value to all Canadians, businesses, and governments by setting a baseline standard to guide public and private sector interoperability of identity solutions and services. The DIACC’s mandate is to collaboratively develop and deliver resources to help Canadian’s to digitally transact with security, privacy and convenience. The Pan-Canadian Trust Framework is one such resource. The Pan-Canadian Trust Framework represents a collection of industry standards, best practices, and other resources that help to establish interoperability of an ecosystem of identity services and solutions. The DIACC is a not-for-profit coalition of members from the public and private sector who are making a significant and sustained investment in accelerating the establishment of Canada’s Identity Ecosystem.

Context:

The purpose of the Discussion Draft review is to ensure transparency in the development and diversity of a truly Pan-Canadian, and international, input. In alignment with our Principles for an Identity Ecosystem, processes to respect and enhance privacy are being prioritized through every step of the PCTF development process. DIACC expects to modify and improve these Discussion Drafts based upon public comments. Comments made during the review will be considered for incorporation to the next drafts and DIACC will prepare a Disposition of Comments to provide transparency with regard to how each comment was handled.

Demande d’examen et de commentaires : Documents de travail sur l’aperçu de la composante « Respect de la vie privée » V0.05 et le profil de conformité au respect de la vie privée V0.12 du cadre de confiance pancanadien

Déclaration d’intention: Le DIACC collabore à l’élaboration et à la publication d’une norme de l’industrie sur le respect de la vie privée en tant que composante du cadre de confiance pancanadien afin d’établir une base de normes et pratiques visant à guider l’interopérabilité des services et solutions en matière d’identité dans les secteurs public et privé.

Résumé:

La composante « Respect de la vie privée » du cadre de confiance pancanadien s’intéresse au traitement des données personnelles aux fins de l’identité numérique. Elle a pour objectif d’assurer l’intégrité permanente des processus, politiques et contrôles des organisations en matière de respect de la vie privée dans un écosystème de l’identité numérique en utilisant pour cela des critères de conformité uniformisés pour faire des évaluations et certifications d’après le cadre de confiance pancanadien. Les critères de conformité de la composante « Respect de la vie privée » spécifient comment les principes relatifs à l’équité dans le traitement de l’information de la LPRPDE, définis par le Commissariat à la protection de la vie privée du Canada, sont pertinents ou s’appliquent au traitement des données sur l’identité numérique (remarque : ils ne visent pas à remplacer des règlements existants; on s’attend à ce que les organismes se conforment aux règlements sur le respect de la vie privée qui sont en vigueur dans leur territoire de compétence).

Le respect de la vie privée est une exigence fondamentale des interactions sur l’identité numérique. Par conséquent, toutes les composantes du cadre de confiance pancanadien ont la responsabilité de suivre des pratiques qui respectent la vie privée. De telles pratiques sont basées sur le principe selon lequel les personnes sont informées des détails et des éventuels avantages et conséquences associés à la gestion de leurs renseignements personnels.

Invitation

  • Toutes les parties intéressées – notamment les émetteurs et les consommateurs d’identité, les développeurs et les utilisateurs potentiels – sont invitées à faire des commentaires.
  • Les documents de travail ont été élaborés par le Comité d’experts du cadre de confiance du DIACC (TFEC) qui est assujetti aux politiques de contrôle du DIACC.

Documents

Période:

Début : 5 août 2019 à 23 h 59 HP | Fin : 5 septembre 2019 à 23 h 59 HP

Processus:

  • Tous les commentaires sont assujettis à l’entente de contributeur du DIACC;
  • Veuillez utiliser le fichier Excel pour soumettre vos commentaires au DIACC;
  • Assurez-vous d’indiquer le numéro de version et de ligne correspondant à chaque commentaire soumis;
  • Le fichier Excel contenant vos commentaires destinés au DIACC doit être envoyé à review@diacc.ca;
  • Questions : review@diacc.ca.

Valeur pour les Canadiens

La composante « Respect de la vie privée » procurera de la valeur à l’ensemble des Canadiens, entreprises et gouvernements en établissant une norme de base pour guider l’interopératibilité des solutions et services en matière d’identité dans les secteurs public et privé. Le DIACC a pour mandat de concevoir et de fournir des solutions en collaborant avec d’autres afin d’aider les Canadiens à effectuer des transactions numériques de façon sécuritaire et commode qui respecte la vie privée. Le cadre de confiance pancanadien est une de ces ressources. Il représente un ensemble de normes de l’industrie, de pratiques exemplaires et d’autres ressources qui permettent d’établir l’interopérabilité d’un écosystème de services et solutions en matière d’identité. Le DIACC est une coalition sans but lucratif de membres des secteurs public et privé qui investissent beaucoup et de manière soutenue dans les efforts déployés pour accélérer la mise sur pied de l’écosystème de l’identité du Canada.

Contexte

L’examen des documents de travail a pour but d’assurer la transparence du développement et la diversité d’un apport véritablement pancanadien et international. Conformément à nos principes pour un écosystème de l’identité, la priorité est accordée aux processus visant à respecter et à renforcer la vie privée à chaque étape du processus de développement du cadre de confiance pancanadien. Le DIACC s’attend à modifier et à améliorer ces documents de discussion en fonction des commentaires du public. Les commentaires faits pendant l’examen seront pris en compte pour être intégrés dans les prochaines ébauches et le DIACC va préparer un document expliquant d’une façon transparente comment chaque commentaire a été traité.

2020 Pre-Budget Submission

DIACC’s Written Submission for the Pre-Budget Consultations in Advance of the 2020 Budget

Ahead of the 2020 federal budget, the House of Commons Standing Committee on Finance is asking Canadians to share their input. 

DIACC is pleased to have submitted a brief, calling on the Federal Government to implement the following recommendations: 

1. Commit to co-developing and co-investing in the Pan-Canadian Trust Framework in collaboration with private sector partners, taking the following points into consideration. 

2. Champion the importance and uses of digital identity for businesses, health care centres, academic institutions, civil society, and all Canadians. 

3. Move with speed, focus and partnership to enable a made-in-Canada Digital ID and Authentication ecosystem of solutions and services, made for Canadians, by Canadians. 

Read DIACC’s full Pre-Budget Consultation Submission.

DIACC-Pre-Budget-Consultation-Submission-July-2019

Letters from the President: The Importance of Transparency in DIACC’s Pan-Canadian Trust Framework (PCTF) Development

Transparency, accountability, and inclusion, these are critical not only to the PCTF, but also to the process by which it is developed.

Inclusive, open, and meets broad stakeholder needs

Just as an identity ecosystem must be open and broad in stakeholder engagement, so too must be the self-governing body that delivers the interoperability framework and supporting materials. The body must include varying orders of government and diverse industry stakeholders across Canada and the international stage. DIACC members and the public must have transparency regarding not only the deliverables, but also in clear rules around how engagement is fostered and ultimately to how votes are taken and how decisions are made. 

Transparent in governance and operation

Building on the above principle, an identity ecosystem must also be transparent in its operations, and governance. DIACC takes pride in a transparent approach in developing and delivering materials, with all parties having full clarity throughout every step of the process.

Although transparency and openness are often closely associated, they are not one and the same. Openness means that any individual or organization can participate, and DIACC achieves this through reviews of each draft of the PCTF. This is also evident by our collaborative document reviews that have progressed at an accelerated pace over the past six months. 

Transparency, on the other hand, relates to:

  • How clearly members can see how DIACC’s work is developing
  • What is the governance for the development of the work 
  • How submitted comments are tracked and handled 
  • Who our members are, and what benefits are offered to them 
  • What is our “why” for existing

To ensure fair practice, organizations that seek to connect the interests of diverse participants who have similar priorities with differing areas of focus need to have clear and transparent rules for operation. 

The transparency in our collaborative governance helps to ensure that our work is not just another rubber stamping exercise, but rather our deliverables are strongly vetted by diverse Pan-Canadian and international stakeholders to deliver the best possible framework that delivers value to our public and private sectors.

This buy-in is necessary to truly transform Canada, with solutions built on standards that are force multipliers toward realizing a digital-first country. It is crucial to have perspectives from various parties, including service providers and service consumers. 

We continually review and revise our operational policies to ensure that they meet the needs of all stakeholders and provide the basis of good governance and fair practices across our organization. 

The PCTF Model 3 Draft Recommendation V1.0 recently closed, and based on the input received, DIACC plans to modify and make improvements to this draft, as well as expand on, clarify, and refine its content. 

The PCTF Community Editing team will work with DIACC’s Trust Framework Expert Committee (TFEC) to review and resolve comments received, and will then work towards the next iteration of this draft. The open review period for the Privacy Conformance Profile and Component Overview Discussion Drafts is set to begin on August 6.

To be a part of the change you want to see, stay informed about happenings in the digital identity space, learn more about how you can contribute to discussion drafts or become a member, contact us! 

« Older Entries

Newer Entries »