e-jamaica · e-jamaica “the role of nids” warren vernon, programme director november 1, 2018
TRANSCRIPT
e-Jamaica
“The Role of NIDS”
Warren Vernon, Programme Director
November 1, 2018
2
What is the NIC?
The Government of Jamaica primary document for: verifying a person’s identity; authentication for digital and some
non digital services; and digital signature.
Objectives of NIDS To create a modern, secure and sustainable civil
register on which public services can be delivered with confidence;
To create a modernize identity document to combat document fraud and increase trust in the public and private sectors;
To create a future-proof platform for data sharing and
the delivery of public services by all MDAs;
Objectives of NIDS Cont’d To create a hub or foundation for a modern, digital
economy;
To provide a unified low risk tool for managing identity;
To provide citizens with a guarantee that their data is protected and can be exchanged in confidence and with the data owner consent.
Shift from “What a person
has or knows” to
“Who a person is”
Authentication Policy
Authentication Policy: 3FA for All Jamaicans
7
Image Source/Credit: GSM Association
Governance of NIDS - NIRA
NIRA – National Identification and Registration Authority
Positioned under the OPM and comprising of: The RGD (keeper of the records responsible for the civil registry and vital statistics,
etc.)
National Identity Management
Proposed -19 member board of directors
CEO for NIRA (responsible for RGD and NIDS)
Deputy CEOs for RGD and NIDS
Security clearance for all board members and staff of NIRA to ensure compliance with GOJ employment stipulations
Key Governance Principles
Separation of interest – total separation of policy creation and monitoring from implementation.
Consent – access to personal data must be by personal or delegated consent except in the case of court order granting data access permission (e.g. for an investigation).
Transparency & inclusiveness - all requests for identity verification will be logged and upon request by the data subject, provided via the authorised instrument.
Accountability - Fine or up to 25 years imprisonment for unauthorized verification or unauthorized internal access to individuals’ personal data.
Adoption of Industry Standards - COBIT 5 used as the framework for the governance and management of the NIDS enterprise IT processes.
Role #1: Introduction of One e-ID with 3 Functions
Function #1: Identification Visual, face-to-face identification; Information on the face of card + a single finger print stored on the NIC; Match on Card fingerprint automatic identification.
Function #2: Authentication NIC contains a digital certificate to prove the identity of the card holder; Use of the card holder PIN + Biometric to authenticate;
Function #3: Digital Signature Chip contains a second certificate – allows for an authentic electronic signature; Signature can be applied to electronic documents.
Opportunities: Onboarding Online; Sign Contracts Online; ABM and in
Bank Biometric Authentication
Role #2: Foundation for the First Local Virtual Bank
Opportunities for Regulators and Stakeholders Fast-track public consultation to establish guidelines for applicants; Take swift actions from consultation to application; Issue/take up the first local Virtual Bank License.
Opportunities for the 1st Virtual Bank and Customers Promote financial inclusion; No physical branches; Eliminate minimum and low account balance fees; Target small and medium-sized enterprises(SMEs) and Low income individuals; Establish digital banking services for Jamaicans living overseas.
Opportunities: Financial Inclusions for all; Fintech Innovations; Banking as a Service.
Role #3: Shift from high to low risk Digital IDs
High Risk IDs: Authentication is done based on what a person has or
knows; Some confidence; High risk of fraud. Low Risk IDs:
Authentication is done based on who a person is(Iris, Fingerprint, Face);
Very high confidence; Low risk of fraud. Opportunities: PPP e-Prescription, Feeless Real Estate Transactions – eliminate legal fees, retire company IDs and
replace with MOC Biometric IDs, 2FA for All etc.
Role #4: Introduction of a National Accredited CA
Introduction of Third Parties Audits: Policies for Internal Data Security Compliance and Awareness; Proper procedures for personal data protection; Compliance with legal requirements for requesting customers personal data.
National Cyber Security Awareness Campaign: Building the security awareness of all Jamaicans; Making Cyber Security Education a requirement in public schools.
Introduction of a National Certification Authority: Certificates to be issued by a national accredited Certification Authority; Allow signatures with same legal value as handwritten signatures; Legally Tenable, recognized under the Electronic Transaction Act.
Opportunities: Improve end to end security.
Role #5: Lifecycle Data Exchange
Enterprise data sharing - Data Subject Consent Required Identity data entered once at NIRA; Contact info, Identity and Name Change Sharing; Current and Historical Addresses Sharing; Lifecycle change data sharing – marriages, deaths, divorce etc.
Conditions for data sharing: State as an enterprise to be secured; Lifecycle accreditation to maintain sharing relationships; Data subject consent required.
Opportunities: Low risks, improved efficiency, lower transaction cost
Role #6: Transform Government procurement
15
Reduce fraud and corruption: Create fully digital procurement Portal; Hide seller information before a match is established; Automate the matching of business needs or
specifications with vendor products; Expand the local e-commerce industry. Opportunities: Significantly reduce corruption; increase innovations; Increase Transparency; PPP to build Gov. e-Commerce Portal.
Role #7: Addresses as a Service
16
Introduction of a National Standardized Addresses Database;
Public and Private Sector will have access to use standardized addresses for consistency;
No personal information in addresses database.
Role #8: Improve access for Persons with Special Needs
17
Proof if government benefits and welfare are reaching disabled persons;
Create opportunities for the disabled to participate in digital jobs.
