Frequently Asked Questions

New to digital trust? Start here

 

Understanding Digital Trust & Identity Verification

What is digital trust?

Digital trust is confidence that online interactions are secure, private, and reliable—whether you’re an individual, business, or government. It ensures that people can safely exchange information, conduct transactions, and access services without fear of fraud, data breaches, or misuse of their personal information.

A strong digital trust framework includes:

    • Identity verification – Processes that confirm a person’s or organization’s identity using trusted credentials, reducing fraud and unauthorized access.
    • Digital credentials – Secure, verified information (like a digital driver’s license or health card) that people can use to prove who they are online.
    • Digital wallets – Secure apps that store and manage digital credentials, allowing users to control what information they share.
    • Information-sharing networks – Secure systems that allow businesses, governments, and individuals to exchange verified information without storing or tracking personal data.

These tools enhance privacy, security, and convenience, making online interactions safer while giving users control over their information.

What is digital identity (digital ID)?

Digital ID is not a single ID card or number—it’s a way to prove who you are online using verified information typically stored in digital credentials.

Think of it like a digital version of a driver’s license, passport, or credit card. Instead of carrying a physical card, you can use secure tools (like a digital wallet app) to share only the information needed for a transaction—nothing more.

For example, when age verification is needed, you can prove you’re over 19 without sharing your birthdate, address, or photo.

Using digital credentials is always a choice. They make online transactions faster, safer, and more private, without replacing traditional ID.

What are the key design principles of digital trust and identity verification in Canada?

Digital trust and identity must ensure people feel safe using it. A good digital trust and identity service must follow these principles:

    • Privacy – People must have control over their data, with protections to prevent tracking.
    • Security – Digital trust must prevent fraud, identity theft, and data breaches.
    • Choice – Using digital credentials must be optional, depending on a person’s preference.

DIACC works to help ensure Canadians have access to secure and privacy-enhancing digital trust and identity verification tools while maintaining control over their data.

What makes Canada’s approach to digital trust and identity unique?

Canada’s approach is decentralized, unlike some countries with a single national digital identity system. Service and technology providers develop digital credentials and other tools through collaboration between governments and private sector organizations. Decentralization ensures:

    • More privacy and security – No single organization (government or private sector) has control.
    • Interoperability – Digital trust and identity solutions work across different sectors and provinces.
    • User empowerment – People control how they use their credentials and other tools.

This approach puts security, privacy, inclusion, and choice at the core of digital trust and identity developments.

About DIACC & the PCTF

What is the DIACC?

The Digital ID and Authentication Council of Canada (DIACC) is a non-profit organization that brings together governments, businesses, and experts to develop secure and reliable digital trust and identity verification services.

Think of DIACC as a convener and standards-setter—we bring stakeholders together and develop frameworks, but we don’t issue credentials or operate identity services ourselves.

DIACC’s goal is to support the creation of trusted digital identity tools that help Canadians safely access online services while protecting their privacy and security.

What is the Pan-Canadian Trust Framework (PCTF)?

The Pan-Canadian Trust Framework (PCTF) is a set of guidelines developed by DIACC to ensure digital trust and identity verification services are secure, private, and reliable. DIACC uses a thorough process that includes subject matter experts and open public review periods to inform the PCTF development.

Service designers use the PCTF to create secure and trustworthy digital services, while auditors use it to evaluate and certify a service’s trustworthiness.

The PCTF helps:

    • Make online interactions safer for individuals and businesses
    • Ensure organizations follow best practices for digital trust and identity security and privacy
    • Support national and international adoption of trustworthy digital trust and identity solutions

The PCTF is open to the public, meaning anyone—businesses, governments, or individuals—can use it to build and evaluate secure digital trust and identity services. It is free to access, and DIACC does not charge fees or collect personal information.

Why did DIACC trademark the PCTF?

The intent behind trademarking the PCTF is not to restrict access or serve private interests, but to ensure its quality, consistency, and integrity. By trademarking the framework, DIACC protects the substantial contributions of all collaborators and guarantees that the PCTF remains a trusted public resource—free for everyone to access and use. This quality seal helps prevent misuse and ensures that the framework continues to serve as a standard for digital trust that benefits all, including government departments.

Why does DIACC register its activities with the Office of the Lobbying Commissioner, and should Canadians be concerned about this practice?

DIACC promotes an inclusive, privacy-enhancing digital trust strategy that works for Canadians. In keeping with DIACC’s commitment to transparency and accountability, DIACC registers all applicable activities with the Office of the Lobbying Commissioner. This practice demonstrates our responsible and ethical collaboration and helps build trust with public officials and citizens by clearly disclosing our engagement on policy and regulatory issues.

Membership & Certification

Understanding DIACC’s Three Lists

DIACC maintains three distinct lists that serve different purposes. Understanding the difference helps you identify the right organizations for your needs.

What is DIACC’s all Members page?

The All Members page lists every organization that has joined DIACC as a member of our strategic alliance. These organizations collaborate on developing digital trust and identity standards in Canada.

What membership means:

    • Access to working groups and expert committees
    • Networking opportunities with industry leaders
    • Ability to influence PCTF development
    • Commitment to advancing digital trust in Canada

Who are members: Governments, technology companies, financial institutions, telecommunications providers, and other organizations invested in Canada’s digital trust ecosystem.

What membership does NOT mean:

    • Their services are not automatically certified
    • They may or may not offer digital trust services
    • Listing does not indicate service quality or compliance

What is the Trusted List of Certified Providers?

The Trusted List of Certified Providers showcases organizations whose specific services have been independently certified as meeting PCTF standards.

What certification means:

    • The service has been rigorously assessed by a third-party conformity assessment body qualified by DIACC
    • It meets Canada’s standards for security, privacy, and reliability
    • Independent verification confirms PCTF compliance
    • Regular audits ensure ongoing compliance

Important: This list features certified services, not organizations. An organization may appear here even if they’re not a DIACC member, and a DIACC member may not appear here if their services aren’t certified.

When to use this list: When you need assurance that a digital trust service meets PCTF requirements.

What is the Member Service Directory?

The Member Service Directory is a catalog of services that DIACC members offer in the digital trust and identity space.

What this directory shows:

    • Services available from member organizations
    • The types of digital trust solutions in Canada’s marketplace
    • Contact information for service providers

What this directory does NOT indicate:

    • Services listed are not automatically certified under PCTF
    • Listing does not verify service quality or compliance
    • These are member-offered services, which may or may not be certified

When to use this directory: When exploring the range of digital trust services available from organizations committed to DIACC’s collaborative mission.

How do I know if a service is trustworthy?

Look for services that have achieved PCTF certification. These appear on DIACC’s Trusted Certified Provider List and have been independently verified to meet Canada’s standards for digital trust and identity security and privacy.

You can also check whether an organization is a DIACC member, which indicates they’re committed to best practices in digital trust, though membership alone doesn’t certify specific services.

Privacy & Security

How does digital trust and identity protect against fraud and identity theft?

Digital trust and identity verification uses advanced security features like encryption and authentication to ensure that only the right individuals can access information. Advanced security helps:

    • Prevent identity theft
    • Reduce online fraud
    • Ensure personal information is shared only with consent

If you suspect your identity has been stolen, here are some options to consider:

    • Report it immediately to your bank, credit card provider, and any affected service providers
    • Place a fraud alert with major credit bureaus (Equifax and TransUnion in Canada)
    • Request a credit report and review it for unfamiliar activity or accounts
    • Report the incident to the Canadian Anti-Fraud Centre and local law enforcement
    • Secure your accounts by changing passwords, enabling multi-factor authentication, and reviewing recovery options
    • Consider identity theft protection services to monitor your information going forward
    • Keep records of all communications and reports for future reference or legal support

What are the benefits of digital trust and identity for Canadians?

Digital trust and identity is about making life easier and safer online. It provides:

    • More Convenience – Secure, quick access to banking, healthcare, and government programs.
    • Better Privacy & Security – Personal data is protected, and users control when and how they share their information.
    • Fraud Prevention – Reduces identity theft and online fraud.
    • Cost Savings – Digital trust and identity could save Canadian governments $482 million and private businesses $4.5 billion by reducing manual processes and fraud. That’s roughly $150 per Canadian in government savings and $1,400 per business annually.

Digital trust and identity are optional—these tools enhance convenience and security. They do not replace existing forms of identification.

Using Digital Credentials

What information does a digital wallet store?

No, digital wallets do not store your identity—they store credentials that let you prove specific facts about yourself.

For example, you might share a proof of age credential when buying alcohol without revealing your name or address.

Digital wallets give you control over what information you share, unlike traditional ID cards where you have to show everything.

Where can I use a digital credential?

Individuals and organizations can use digital credentials for:

    • Accessing government services (e.g., tax filings, permits)
    • Online banking and financial transactions
    • Verifying identity for health services
    • Secure business transactions
    • Confirming a professional qualification

Today, some Canadians can already use digital credentials to access certain provincial services, with more applications being added regularly. As digital trust and identity adoption grows, more services will become available.

How do I get a digital credential?

Trusted organizations, including governments, banks, and other accredited providers issue digital credentials. Depending on your province or territory, you can apply through a government website or a participating financial institution.

You might already have one. If you use a digital version of your credit card on your phone, you already use a digital payment credential.

Is digital identity mandatory in Canada?

No, using digital credentials and other digital tools is entirely optional. It is an additional tool to make online interactions more convenient and secure, but Canadians can still use traditional forms of identification.

Still have questions?

Can’t find what you’re looking for? Contact us or explore our learning centre.