Monthly Archives: juin 2024

The Crucial Link Between Accessibility and Digital Identity

Author: Marie Jordan from VISA. Additional contributions made by members of DIACC’s Adoption Expert Committee.

In the rapidly evolving landscape of the digital age, the concept of identity has transcended the physical realm and taken root in the digital world. This shift towards digital identities brings about numerous conveniences and efficiencies, but it also presents challenges: ensuring accessibility and equity for all. From online banking to social media profiles, our digital identity is an intricate tapestry that weaves together various facets of our lives. It’s crucial to note that when discussing inclusion, equity, and accessibility in this context, the focus is primarily on individuals who experience physical or cognitive disabilities that may impair their use of technology from the outset.

The importance of accessibility in creating digital identity solutions cannot be overstated. To achieve true inclusivity for this specific group, both the public and private sectors must prioritize accessibility and consider specific principles to safeguard the rights and privacy of individuals with disabilities. In this article, we’ll delve into the significance of accessibility for digital identity and the protection of marginalized communities, outlining key principles for both public and private sectors to consider.

Part 1: The Significance of Accessibility in Developing Digital Identity

Digital identity solutions are central to our modern lives, facilitating everything from accessing healthcare records to participating in online communities. However, these advantages are only fully realized when these systems are accessible to everyone, regardless of their physical or cognitive abilities, including accounting for aging populations. An initial product release that lacks accessibility and proves difficult to use, even if it functions as intended, can erode trust and create negative perceptions.

  • Universal design: A foundational principle for digital identity solutions is creating systems usable by all individuals, regardless of disability. A universally designed digital identity solution should accommodate a wide range of abilities, modalities of interaction, and preferences, ensuring that everyone can participate in the digital world on equal terms.
  • Inclusivity in development: Involving individuals with disabilities in the design and testing phases ensures that the final product is genuinely accessible. By including diverse perspectives, developers can identify and rectify accessibility issues early in the development cycle.
  • Adherence to standards: To ensure accessibility, digital identity solutions must adhere to globally recognized accessibility standards, such as W3C’s Web Content Accessibility Guidelines. These provide a clear set of guidelines for making digital content and applications accessible. Compliance with these standards is crucial for ensuring that digital identities are available and usable for all.
  • User-centric approach: Developers must seek to understand how individuals with disabilities interact with their application or technology, offering customization options that empower users to adapt the system to their unique needs and requirements. This might include adjustable font sizes, alternative input methods, and compatibility with assistive technologies. They should also be adaptive in their design.
  • Privacy and security: Paramount in digital identity solutions, individuals with disabilities may be particularly vulnerable to privacy breaches and identity theft. Implementing robust security measures while maintaining respect for user privacy is essential. This can be achieved through encryption, robust authentication methods, and clear privacy policies. Regular audits and assessments can address the security and privacy practices of digital identity solutions as technology shifts, including vulnerability testing and compliance checks to ensure the highest standards of privacy and security are maintained.

Part 2: Safeguarding the Privacy and Trust of Individuals with Disabilities

To ensure that the privacy and trust of all citizens are safeguarded appropriately, accessible solutions must be designed and delivered with intent. To ensure that accessibility is realized, a high level of understanding and education is necessary for individuals to utilize their identity in digital channels without the apprehension of misuse or fear of being exploited.

  • Informed consent: Individuals with disabilities should have access to clear and understandable information about how their digital identity data will be used. Obtaining informed consent ensures that users are aware of the risks and benefits of participating in digital identity systems.
  • Minimal data collection: Users should understand that only the data that is absolutely necessary for the functioning of the digital identity system is being collected. Minimizing data collection reduces the risk of privacy breaches and limits the potential for misuse of personal information.
  • Transparency in data practices: Transparency should be maintained in data practices. All users must have access to their data and understand how it is being used and processed. Transparency, particularly to historically marginalized communities, builds trust and empowers individuals to make informed decisions about the use of their digital identities.
  • Accessible privacy settings and controls: Accessible privacy settings and controls that are easy for individuals with disabilities to use must be available. These controls must allow users to manage their data and privacy preferences effectively.

In conclusion, it’s important to recognize that accessibility, inclusion, and equity are multifaceted challenges. While this article focuses on individuals experiencing physical or cognitive disabilities, it’s crucial to acknowledge that there are various barriers to equitable access, including socio-economic factors, digital literacy, and language barriers. By addressing these challenges collectively, we can work towards creating a more inclusive digital world for everyone.

First DIACC PCTF-Certified Service Provider Trustmark Granted

Confirming ATB Ventures’s Oliu service PCTF Privacy Component conformance 

Feb. 27, 2024 – Vancouver – We are thrilled to announce that  ATB Ventures’s  Oliu has been certified against the Pan-Canadian Trust Framework (PCTF) Privacy Component. Established in 2012, DIACC is Canada’s largest and most diverse multistakeholder organization, fostering confidence and consistency in the digital trust and identity services market through its internationally recognized PCTF and standardized third-party conformity assessment program. 

Being the first DIACC PCTF-certified service provider is a significant milestone and a unique leadership opportunity.  DIACC PCTF certification provides an assurance signal to the market, indicating that a service fulfills specified requirements. 

The PCTF comprises a set of rules that offers a versatile code of practice and risk assessment approach that organizations agree to follow, which includes best practices, policies, technical specifications, guidance, regulations, and standards, prioritizing interoperability, privacy, security, and trustworthy use of digital identity and personal data. 

ATB’s Oliu, an Identity verification and authentication platform, has been subject to certification for the PCTF, including a point-in-time audit conducted by DIACC Accredited Auditor KUMA and an independent committee review for quality assurance. Oliu demonstrated conformity to the PCTF Privacy conformance criteria, meeting the applicable requirements. Based on the conformity assessment process results, DIACC has issued a three-year cycle Trustmark subject to annual surveillance audits and added ATB Oliu to the DIACC Trusted List – an authoritative trust registry of DIACC PCTF-certified service providers. 

“This certification begins an exciting journey in providing certainty to the market through trusted services subject to DIACC’s certification program, designed around ISO/IEC 17065,” said DIACC President Joni Brennan.  « For Oliu, achieving the certification demonstrates its commitment to providing trustworthy and reliable digital identity verification services and advancing secure and interoperable digital trust and identity services in Canada.« 

About DIACC

Established in 2012, DIACC is a non-profit organization of public and private sector members committed to advancing full and beneficial participation in the global digital economy by promoting PCTF adoption and conformity assessment. DIACC prioritizes personal data control, privacy, security, accountability, and inclusive people-centered design.

To learn more about DIACC, please visit https://diacc.ca/ 

ABOUT OLIU™

Oliu is a blockchain-identity management solution that makes it easy for businesses to issue, manage, and verify digital credentials. Built on open (W3C) standards, Oliu leverages identity frameworks such as the Pan-Canadian Trust Framework (PCTF) and National Trust and Identity Fundamentals to make mobility and interoperability between identity systems possible.

To learn more about Oliu, please visit https://oliu.id/ 

About ATB Ventures™

ATB Ventures is the research and innovation arm of ATB Financial, a leading Alberta-based financial institution. Driving growth at the edges and exploring opportunities beyond financial services, ATB Ventures focuses on helping companies bridge the gap between consumers’ increasing concerns about privacy and security, and their desire for more advanced personalized experiences. 

To learn more about ATB Ventures, please visit https://atbventures.com/ 

DIACC Women in Identity: Marli Lichtman

DIACC women in identity spotlights showcase outstanding DIACC member women in identity. If you are a DIACC member woman in identity and would like us to feature you in the spotlight, contact us!

Marli Lichtman is Managing Director and Head, Digital Strategy and Controls at BMO Financial Group, BMO.

Follow Marli on LinkedIn

What has your career journey looked like?

Let me work backwards, starting with my current role as Head of Digital Strategy and Controls at BMO. In this role, I lead two teams accountable for: (1) Strategy: defining and executing BMO’s “Digital First” agenda and (2) Controls: working in partnership with the Financial Crimes Unit to build and enhance digital controls to protect our customers against fraud.

I initially joined BMO’s Corporate Strategy Team in 2013 and since then have worked in progressively senior roles across Finance, Risk, Transformation and Business Operations.

Before joining BMO, I was a consultant in Oliver Wyman’s Finance and Risk Practice and prior to that, I worked in wealth management and earned my CFA (Chartered Financial Analyst) designation. My first job out of school was at a boutique investment advisory firm. I graduated from Ivey at Western University with an Honours Business Administration (HBA) degree.

When you were 20 years old, did you visualize a dream job and if so, why?

I didn’t really know what I wanted to do when I was 20! I focused the early days of my career on finding opportunities where I could be challenged, learn as much as possible, maintain optionality to transition to other industries or career paths, and work with great people who would champion my career.

Have you encountered significant barriers in your career as a woman in leadership, and if so, what were they?

I have experienced many of the usual challenges you hear about concerning women in the workplace. However, my biggest barrier has been getting into my own head and thinking that I don’t deserve the positions I’ve been given (I mean, earned 😊). Through executive coaching, mentors, sponsors, and simply the experience of failing and rebounding, I’ve been able to overcome this (although I would be lying if I said I don’t experience imposter syndrome from time to time!).

How do you balance work and life responsibilities?

It’s a constant juggling act, but I try to focus on 5 things:

  1. Regular calendar reviews to “optimize” my time (e.g., which calls can I take from the car on my way to / from the office?)
  2. Learning to say “no” and setting clear boundaries (applies to both work and personal life).
  3. Finding time for self-care.
  4. Working as a team with my partner who is also balancing a demanding schedule.
  5. Living my values and knowing what’s important in life.

How can more women be encouraged to pursue digital trust and identity careers?

We need to start with education – What is Digital ID? What skillsets do you need to enter the space? Why is diversity so important? Who are female trailblazers in the space, and what has their career path looked like? Early exposure, encouragement, and mentorship are key to increasing female representation in this space.

What are some strategies you have learned to help women achieve a more prominent role in their organizations?

Build meaningful relationships. Earn the trust of your colleagues. Network within and outside of your industry. Ensure you have a mentor and a sponsor at your organization. Most importantly, stay true to yourself.

What will be the biggest challenge for the generation of women behind you?

While women have made considerable progress over the past decade, there is still more work to do. The next generation will continue to face the same challenges (e.g., gender bias, pay inequality, balancing personal life) but will benefit from increased female representation and sponsorship at Senior levels.

What advice would you give to young women entering the field?

Be confident – you are in the field for a reason! Trust your instincts, and don’t be too hard on yourself.

Chicago Title Insurance Company’s VerifID™ first PCTF Verified Person certified service

Confirming Chicago Title Insurance Company’s VerifID™ service PCTF Verified Person Component conformance

May 14, 2024 – Toronto –  We proudly announce that Chicago Title Insurance Company’s ID verification platform, VerifID™, obtained the DIACC Pan-Canadian Trust Framework (PCTF) Verified Person certification, a massive milestone in becoming a trusted and reliable service in the Canadian ecosystem. DIACC welcomes Chicago Title’s VerifID to the growing cohort of certified providers in digital identity, particularly in the critical area of real estate. 

In Canada, mortgage and title fraud is a pressing concern, presenting an opportunity for fraudsters. In response, Chicago Title has developed VerifID, an innovative identity verification and fraud solution. VerifID combats fraudulent real estate transactions, demonstrating its proactive approach to addressing industry challenges. 

“We’re passionate about stopping fraud; it’s why we developed VerifID,” said John Rider, Senior Vice President of Retail and Commercial Title at Chicago Title Insurance Company. “We wanted to take that passion to the next level by completing our PCTF certification, demonstrating our commitment to being the best in the business. VerifID doesn’t allow users to modify the verification process, which, in our experience, reduces the intake of valuable information; ours is the only solution that will meet DIACC standards 100% of the time.”

VerifID’s journey to DIACC PCTF certification was rigorous, marked by a thorough third-party evaluation that left no room for shortcuts. This evaluation ensured that the service met the stringent requirements of the Verified Person Component at LOA2, which shows Chicago Title’s commitment to leading the fraud and identity industry through continuous innovation and best practices.

The DIACC certification is a standardized process that includes a point-in-time audit conducted by DIACC Accredited Auditor KUMA and an independent committee review for quality assurance. As a result, DIACC has issued a three-year cycle Trustmark, subject to annual surveillance audits, and added Chicago Title’s VerifID to its Trusted List of certified providers. 

« Chicago Title’s VerifID achieved a significant industry milestone and competitive advantage by becoming the first Canadian vendor to earn certification against the PCTF identity proofing requirements, » said Joni Brennan, DIACC President.   

The PCTF is a comprehensive risk management and assurance framework for validating the design of private-sector digital trust services. Its criteria address aspects of digital trust and verification, including privacy, security, and interoperability, mitigating risks associated with fraud and breaches. This framework supports robust digital verification and enhances user confidence by providing a reliable means to authenticate digital verification across services, fostering a safer and more integrated digital environment. The PCTF helps people and organizations across the public and private sectors to recognize verified trusted services. 

To explore the benefits of certification, contact voila@diacc.ca 

About DIACC

Established in 2012, DIACC is a non-profit organization of public and private sector members committed to advancing full and beneficial participation in the global digital economy by promoting design principles, PCTF adoption and conformity assessment. DIACC prioritizes personal data control, privacy, security, accountability, and inclusive people-centered design.

For more information about DIACC, please visit https://diacc.ca / 

About Chicago Title Insurance Company

Chicago Title Insurance Company is a wholly owned division of Fidelity National Financial, Inc. (FNF). FNF, operating through its subsidiary Fidelity National Title Group, Inc., is one of North America’s largest title companies, providing core title insurance products, escrow and other real estate related products. FNF, a Fortune 500 company, has offered security for real estate transactions for over 170 years. Chicago Title Insurance Company, a subsidiary of FNF, has been licensed in Canada for over 70 years.

For more information about Chicago Title Insurance Company, please visit https://chicagotitle.ca