Tag Archives: canada

DIACC AI Consultation Submission to the Federal Government

October 31, 2025 – Canada has the opportunity not only to develop world-class AI capabilities, but also to build an ecosystem where AI innovation and responsible deployment are enabled by a strong foundation of digital trust, identity, authentication, and interoperability. DIACC’s mission is to accelerate the adoption of digital trust by enabling privacy-respecting, secure, interoperable digital trust and identity verification services through the DIACC Pan-Canadian Trust Framework (PCTF).

In this submission, we outline how investments in trust infrastructure, standards and verification can help deliver four key outcomes: scale Canadian AI champions, attract investment, support adoption and foster responsible, efficient deployment of AI systems.

About DIACC

The Digital ID and Authentication Council of Canada (DIACC) is a non-profit public–private coalition created following the federal Task Force for the Payments System Review. DIACC’s mission is to accelerate the adoption of digital trust by enabling privacy-respecting, secure, and interoperable identity systems.

DIACC is the steward of the Pan-Canadian Trust Framework (PCTF)™ — a public and private sector, industry-developed, standards-based, technology-neutral framework designed to enable scalable, certifiable digital trust infrastructure that meets the needs of governments, businesses, and individuals.

The DIACC PCTF has been developed in collaboration with experts from federal, provincial, and territorial governments as well as industry and civil society. It supports verifiable credentials, authentication services, fraud prevention, and information integrity across the Canadian digital economy.

Scaling Canadian AI champions and attracting investment

A major barrier for Canadian AI firms is not solely algorithmic innovation, but the ability to build scalable, trusted solutions that can be easily integrated with government and industry systems — particularly in regulated sectors. To scale, Canadian AI companies must demonstrate trustworthiness, security, privacy compliance, identity/credential verification, and interoperability — all of which raise costs and complexity when the underlying infrastructure is fragmented or weak.

Further, investors increasingly look for ventures that not only have technical sophistication but also strong risk management, data provenance, identity assurance and governance frameworks;   Canada can differentiate itself by emphasizing trusted AI ecosystems.

Recommendations:

  • Recognize identity, authentication, verification and trust-framework services (e.g., the DIACC PCTF) as critical infrastructure to underpin secure and trustworthy AI ecosystem scaling — and include funding streams, procurement support and regulatory recognition accordingly.
  • Introduce targeted incentives (grants/tax credits) for Canadian AI firms that embed standards-based verifiable credentials, identity proofing and interoperability from day one — thereby lowering investor risk and improving export readiness.
  • Foster public-private collaborations where government platforms adopt standards-based digital credentials (for authentication, identity verification, data-sharing) and invite Canadian AI firms to build on those platforms — this creates domestic anchor opportunities and global reference cases.
  • Promote and fund initiatives that allow Canadian AI firms to export trust by aligning Canada’s trust-framework credentials with international equivalents (e.g. UK identity frameworks) so that Canadian-built AI solutions come with built-in identity/credential assurance for global markets.

Enabling adoption of AI across industry and government

Adoption by industry and government is facilitated when the infrastructure for authenticating, verifying identity, sharing data, and managing credentials is streamlined and standards-based. AI solutions deployed in real-world workflows often hinge on knowing who is interacting, what credentials they hold, which data sources are valid — not just the AI model itself.

Fragmentation in identity verification, digital credentials and interoperability across jurisdictions (federal/provincial/territorial) also increases friction, slows procurement and reduces the number of “ready” integration points for AI vendors.

Recommendations:

  • Deploy a reusable digital credential/single sign-on system for government services (federal, provincial, municipal) modelled on widely used private-sector login tools. This makes it easier for government agencies and vendors (including Canadian AI firms) to plug in.
  • Encourage government procurement frameworks to demand standards-based trust services (identity proofing, verifiable credentials) as part of AI solutions — thereby embedding adoption readiness from the procurement side.
  • Provide and consume standardized capability services offered by the public and private sectors (identity/credential verification, verifiable data sources, API hubs) that AI firms can access respecting privacy, leveraging a consent-based framework,  rather than each reinventing, reducing cost and time-to-market.
  • Support industry-government collaborations in regulated sectors (e.g. health and finance) where trust and identity verification matter first — by creating pilot environments that leverage trustworthy identity and credentials as the foundation for AI deployment.

Building safe, reliable and trustworthy AI systems, and strengthening public trust

Public trust in AI is undermined when the authenticity of interactions, data and verified identities cannot be reliably determined — for example, synthetic identities, manipulated documents, fraud-enabled onboarding, and unverified credentials all impact trust and impede safe AI deployment.

Identity assurance, verifiable credentials and trustworthy provenance of data and interactions are vital to enable AI in environments where safety, ethics, regulation, and accountability matter (e.g. financial decisions, cross-border labour credentials).

A standards-based trust framework such as DIACC’s PCTF can support traceability, transparency and audit capability in AI workflows, making systems safer, more explainable, and more investable.

Recommendations:

  • Fund the adoption and certification of privacy-respecting, standards-based identity, verification and credential-issuance systems (e.g. the DIACC PCTF) across sectors that will use AI.
  • Recognize identity verification, credentialing and data provenance as core components of AI governance frameworks (not just “nice to have” add-ons), and include them in AI risk-assessment, certification and procurement guidance.
  • Invest in research and development of identity and credentialing tools that are specifically tailored for AI use-cases (e.g. verifying data source authenticity).

Building enabling infrastructure, including data, connectivity and skills

While data and connectivity are widely recognized as AI-enablers, equally critical is the infrastructure of trust, including identity frameworks, verifiable credentials, authentication services, and certification of trust services — without which data sharing, inter-jurisdictional collaboration, and large-scale deployment face bottlenecks.

Digital sovereignty is also critical. Canada must ensure that infrastructure (cloud, data centres, identity/trust services) aligns with domestic values, jurisdictional control and regulatory frameworks in order to attract both domestic and foreign investment that values provenance and security.

Recommendations:

  • Invest in Canadian-based trust infrastructure, including domestic cloud and data centres, specifically for identity/credential/trust-services, to support AI readiness, digital sovereignty and economic resilience (as previously recommended by DIACC).
  • Ensure that interoperability standards for identity, credentials and trust-services are integrated into AI infrastructure planning — enabling cross-sector and cross-jurisdiction data flows, credentials reuse, and reduced duplication of onboarding/verification.
  • Support development of shared digital identity and credential hubs, which can serve as infrastructure building blocks for AI-enabled systems, enabling smaller firms or remote/Indigenous communities to access AI infrastructure.
  • Link infrastructure investment to skills and operational readiness, and include training programs for identity/trust-service management, credential issuance and verification, and interoperable system design, ensuring the human infrastructure is aligned with the technical.

Conclusion

Scaling Canada’s AI champions, attracting investment, accelerating adoption, and building safe and trusted AI systems all rest on a foundation of digital trust, verifiable identity, credentialing and interoperability. By recognizing and investing in trust infrastructure as a core enabler alongside data and connectivity, Canada can create a differentiated and competitive AI ecosystem.

DIACC welcomes further collaboration with federal partners and key stakeholders to implement standards-based trust frameworks, support interoperable credentialing and enable Canada’s AI ecosystem to flourish on the global stage.

Thank you once again for the opportunity to provide this input.

Joni Brennan
President, DIACC

Voilà Verified Trustmark Program is Live – ‘duty of care’ a top priority

The Digital ID and Authentication Council of Canada Launches Voilà Verified Program to Spotlight World-Class Vetted Digital Identity Solutions.

Toronto, October 18, 2022 – The Digital ID and Authentication Council of Canada (DIACC) has officially launched the Voilà Verified Trustmark Program – the first and only certification program to determine digital identity service compliance with the Pan-Canadian Trust FrameworkTM (PCTF).

A non-profit coalition of over 115 public and private members, the DIACC develops research and opportunities to enable Canada’s confident, safe, and full participation in a global digital economy.  

“One size does not fit all when it comes to identity solutions – but ensuring a solution delivers upon a defined duty of care is critical,” says Joni Brennan, president of the DIACC. “With the PCTF, and now with Voilà Verified, there is an opportunity to adopt a framework rooted in trust – and to earn compliance recognition. Voilà Verified identifies those who are ‘walking the walk’ –  those who are delivering safe and secure access to the global digital economy.” 

The DIACC’s PCTF is a publicly available framework for identity solutions that defines client, customer, and individual duty of care. The Voilà Verified program provides a vetting and assessment opportunity where PCTF-compliant solution vendors can earn a public-facing Trustmark. The result? Spotlight visibility of trustworthy, safe, reliable, and efficient solutions.

“The PCTF being leveraged on a global scale marks a significant opportunity across industries,” says Franklin Garrigues, VP External Ecosystems at TD Bank Group, DIACC Board Vice-Chair. “Voilà Verified is rooted in safety, protection, and reliability. This program enables safe access to the global digital economy with certainty.” 

Voilà Verified presents an opportunity to grow provincial-level investments in digital identity solutions. Provincial governments who have launched identity services can now earn a Trustmark of their own, and provinces that are on the cusp of entering the digital solution market can do so with confidence by seeking vendors with a Voilà Verified Trustmark.  

“Going digital is a big step for governments – and now, with Voilà Verified, provincial leaders are empowered to do so with confidence by engaging solution vendors that will protect end-users first and foremost,” says Colleen Boldon, Director, Digital Lab and Digital ID Programs, Public Services and Smart Government, Province of New Brunswick and DIACC Board member.  

Ruth Puente, Voilà Verified’s Trustmark Verification Program Manager, says a leading component of the program’s development was to ensure its procedures aligned with the International Organization of Standardization (ISO). 

“Voilà Verified is inclusive yet diligent in verifying PCTF-compliant solutions. The program was developed in alignment with ISO standards – and empowers informed decision making in a rapidly growing ecosystem of identity solutions.”

Puente, based in Madrid, Spain, brings international perspective and expertise to the Voilà Verified program with deep experience in internet governance policy and public affairs, trust and privacy innovation, and digital identity frameworks and certification.

“Delivering high-quality service is our priority. Customer protection is our priority. Increasing access to trustworthy solutions is our priority. We have formed teams of international experts to perform assessments and to oversee the process through an impartial lens,” says Puente. 

Entities who are responsible for assessing PCTF compliance within the Voilà Verified program are known as Accredited Assessors, Readiness Advisors, and Testing Laboratories.

The first official Accredited Assessor and Readiness Advisor is KUMA, a private sector DIACC member and global privacy, security, and identity consulting firm specializing in custom cybersecurity solutions – now the world’s first and only assessor to offer identity assessments in the US, Canada, and the UK. 

“KUMA is bringing the same expertise to the Voilà Verified program that we’ve been bringing to our clients for over a decade,” says Michael Magrath, KUMA’s Managing Director of Digital Identity. “We are dedicated, alongside the DIACC, to generate growth opportunities for identity solutions across Canada and the globe.” 

The Voilà Verified Trustmark Oversight Board (TOB) will make all final verification decisions based on reports from accredited entities. Made up of third-party volunteers with international expertise in identity management, auditing, compliance, cybersecurity, information security, and law, the TOB is the highest operating body of Voilà Verified. It is subject to impartiality, confidentiality and conflict of interest policies. 

“Voilà Verified is a unique opportunity in which I am honoured to share my experience as an advisor and auditor within information security, compliance, and identity,” says Björn Sjöholm, Cybersecurity Entrepreneur of Seadot, and TOB Chair. 

Vendors are turning to the Voilà Verified program for several reasons, but the leading value proposition is market differentiation. Trustmark holders stand out from competitors by unlocking global business opportunities through international recognition and credibility. 

“Voilà Verified puts internationally reputable identity solutions on the map,” says Dave Nikolejsin, the DIACC’s Board Chair. “This is the way forward. With lateral growth of PCTF compliance across sectors – public and private – we establish a common value of trust. Launching Voilà Verified is a monumental stride for Canada to influence a safe and secure global digital economy.” 

Voilà Verified is ready to serve your entity today. To learn more and access your application package, visit the program overview on the DIACC website or contact voila@diacc.ca. 

– 30 –

ABOUT DIACC

DIACC is a growing coalition of public and private sector organizations that are making a significant and sustained effort to ensure Canada’s full, secure, and beneficial participation in the global digital economy. By solving challenges and leveraging opportunities, Canada has the chance to secure at least three percent of unrealized GDP or $100 billion of potential growth by 2030. Seizing this opportunity is a must in a digital society as we work through the COVID pandemic challenges. Learn more about the DIACC mandate. 

ABOUT KUMA

For almost a decade, Kuma has provided privacy, security and identity expertise to various local, state, and federal government agencies, non-profits, and businesses, often in highly regulated sectors. Trust is deeply ingrained in their ethos and is illustrated in the work they deliver in all engagements. Over the years, Kuma has gained and maintained customer confidence and built a reputation for customizing its cybersecurity services to meet the needs of small and large companies alike, while always grounded in national standards. Kuma rejects a “one-size fits all” approach, building long-standing working relationships with clients as they mature their security, privacy, and identity postures. For more information visit http://www.kuma.pro. 

ABOUT SEADOT

Seadot Cybersecurity is run by entrepreneurs with a strong focus on effective and efficient security. The founders have extensive experience in information security as well as IT-security. Seadot offers cybersecurity services to organizations with a high demand for regulatory compliance and security. Seadot clients have their main business within the Nordics and Northern Europe. Seadot services include: Information Security Management, Software Security, IT security Operations, and Cybersecurity Compliance. Seadot is a Kantara Initiative Accredited Assessor. 

Privacy, Security, and Choice Drive Canadians’ Desire for Digital ID

Digital ID and Authentication Council of Canada Research Finds Canadians Want Digital ID that is user-centric and aligns with their values

Access the full 2021 Research Report
Access the Multi-page Synopsis
Access the One-page Synopsis

Toronto, April 4, 2022 – Canadians need to feel safe and in control when they engage in the digital economy. Core to that safety are privacy, security and choice in how they share personal information online. According to the third annual national survey undertaken by the Digital ID and Authentication Council of Canada (DIACC), a staggering 91 per cent of Canadian respondents are calling for control over their personal data collected by provincial and federal governments. 

Additionally, 86 per cent of respondents want control over personal data collected by private organizations, and 80 per cent want a secure and unified digital ID ecosystem.

“A trusted pan-Canadian digital identity framework is essential to digital economic prosperity,” said DIACC president Joni Brennan. “While there is some progress on recognizing the importance of digital ID, Canada is still at a stage where more work must be done on the policy side to ensure a truly digital economy.”

Unlocking an inclusive digital economy is an opportunity for the government to rebuild much-needed trust among Canadians, enhance privacy, and demonstrate that citizens’ rights are a top priority. According to the Edelman 2021 Canadian Trust Barometer, only 53 per cent of Canadians trust government organizations – a drastic decline of six points since only the previous year.

DIACC’s research reflects this lack of trust. “A trusted digital ID framework needs to be designed with people at the centre. All Canadians need to be able to choose if and how they want to use their digital ID credentials. Digital ID is not intended to replace existing physical ID methods, but as an optional supplemental tool,” Brennan said.

Establishing a trusted digital ID will allow people and organizations the choice to verify themselves online securely, while protecting personal information with no user traceability. It offers a decentralized, privacy-enhancing solution for both the private and public sectors.

The DIACC applauds the federal government for including digital identity as a priority in Treasury Board President Mona Fortier’s mandate letter. The need to invest in digital ID was also referenced twice in the House of Commons Finance Committee’s 2021 pre-budget recommendation as critical to supporting Canada’s Digital Government Strategy in secure service delivery.

“It’s encouraging to see recognition of the critical role that digital identity plays in enabling Canada’s economy; however, we need to see a real commitment to action if we are going to reap the benefits of Digital ID and Digital Trust in meaningful economic growth,” said Dave Nikolejsin, the DIACC’s Board Chair, referring to the DIACC’s Pan-Canadian Trust Framework™ (PCTF).

The PCTF is a publicly available set of tools, shared principles, and guidelines to help organizations operate in a digital ecosystem. It includes processes like Notice and Consent, Authentication, Verification, Privacy, Credentials, and Infrastructures – both technologically and operationally.

Most importantly, the PCTF is citizen-centric. It is designed to keep users safe.

“This is an opportunity for industry and government leaders to come together and build a strong partnership. We have the fundamentals, we have the expertise, and we have the framework. Now, we need mutual investment across sectors to put the PCTF into action,” said Franklin Garrigues, VP External Ecosystems at TD Bank, DIACC Board Vice-Chair.

Nearly two-thirds of survey respondents are calling for governments to collaborate with the private sector to develop a pan-Canadian digital ID. On top of this, three quarters want the government to move quickly.

Privacy. Security. Choice.

DIACC is committed to developing research and tools to enable secure, robust, and scalable Canadian digital identity (digital ID) solutions and services. With digital advancements happening at a surefire rate, DIACC prioritizes privacy, security, and, most importantly, choice of use at the forefront of all digital ID initiatives.

To achieve real growth and sustainability, Canadians need transparency in governance. They need a digital ID they can own and choose to use. A digitally and economically prosperous Canada depends on it.

Learn more about the DIACC and digital ID.

– 30 –

ABOUT DIACC

DIACC is a growing coalition of public and private sector organizations who are making a significant and sustained effort to ensure Canada’s full, secure, and beneficial participation in the global digital economy.  By solving challenges and leveraging opportunities, Canada has the chance to secure at least three per cent of unrealized GDP or $100 billion of potential growth by 2030. Seizing this opportunity is a must in a digital society as we work through the COVID pandemic challenges. Learn more about the DIACC mandate. 

DIACC was created as a result of the Minister of Finance’s Electronic Payments Task Force that recommended that Canada needs a framework for digital identity and authentication that a self-governing body of experts must create.

Want to contribute to a digital ID ecosystem? Apply to become a DIACC member today. 

ABOUT THE RESEARCH FIRM

Burak Jacobson Research Partners is a full-service market research consulting firm headquartered in Toronto, Ontario. Founded in 1981, Burak Jacobson has conducted over 4,000 research projects in 39 countries across a variety of industries.