National Strategies and Policies for Digital Identity Management in OECD Countries”, OECD Digital Economy Papers, No
Total Page:16
File Type:pdf, Size:1020Kb
Please cite this paper as: OECD (2011-03-31), “National Strategies and Policies for Digital Identity Management in OECD Countries”, OECD Digital Economy Papers, No. 177, OECD Publishing, Paris. http://dx.doi.org/10.1787/5kgdzvn5rfs2-en OECD Digital Economy Papers No. 177 National Strategies and Policies for Digital Identity Management in OECD Countries OECD Unclassified DSTI/ICCP/REG(2010)3/FINAL Organisation de Coopération et de Développement Économiques Organisation for Economic Co-operation and Development 31-Mar-2011 ___________________________________________________________________________________________ _____________ English - Or. English DIRECTORATE FOR SCIENCE, TECHNOLOGY AND INDUSTRY COMMITTEE FOR INFORMATION, COMPUTER AND COMMUNICATIONS POLICY Unclassified DSTI/ICCP/REG(2010)3/FINAL Working Party on Information Security and Privacy NATIONAL STRATEGIES AND POLICIES FOR DIGITAL IDENTITY MANAGEMENT IN OECD COUNTRIES English - Or. English JT03299393 Document complet disponible sur OLIS dans son format d'origine Complete document available on OLIS in its original format DSTI/ICCP/REG(2010)3/FINAL FOREWORD This report is based on responses to the Questionnaire on National Strategies and Policies for Digital Identity Management (IdM) in OECD Countries circulated to the delegations of the OECD Working Party on Information Security and Privacy (WPISP) and to the OECD Senior Network of e-government Officials between December 2009 and June 2010 (Annex III). The report includes a detailed analysis, a list of references, country summaries (Annex I) and a contribution by the Internet Technical Advisory Committee (ITAC) (Annex II). It has been developed by the Secretariat (Laurent Bernat of the Directorate for Science, Technology and Industry) with expert input from Nick Mansfield, consultant to the OECD. The Committee for Information, Computer and Communications Policy (ICCP) declassified this report at its 61st session on 16-17 March 2011. © OECD 2011 2 DSTI/ICCP/REG(2010)3/FINAL TABLE OF CONTENTS KEY FINDINGS ............................................................................................................................................. 4 INTRODUCTION ........................................................................................................................................... 8 ANALYSIS ..................................................................................................................................................... 9 National Strategies for IdM ......................................................................................................................... 9 Policy: what policies support the strategy? ................................................................................................ 20 REFERENCES .............................................................................................................................................. 28 ANNEX I - COUNTRY SUMMARIES ....................................................................................................... 36 Australia ..................................................................................................................................................... 36 Austria ........................................................................................................................................................ 39 Canada ....................................................................................................................................................... 42 Chile ........................................................................................................................................................... 44 Denmark ..................................................................................................................................................... 46 Germany ..................................................................................................................................................... 48 Italy ............................................................................................................................................................ 50 Korea .......................................................................................................................................................... 52 Japan .......................................................................................................................................................... 54 Luxembourg ............................................................................................................................................... 55 Netherlands ................................................................................................................................................ 56 New Zealand .............................................................................................................................................. 58 Portugal ...................................................................................................................................................... 61 Slovenia ..................................................................................................................................................... 64 Spain .......................................................................................................................................................... 65 Sweden ....................................................................................................................................................... 69 Turkey ........................................................................................................................................................ 71 United States .............................................................................................................................................. 74 ANNEX II – CONTRIBUTION FROM THE INTERNET TECHNICAL ADVISORY COMMITTEE (ITAC) ........................................................................................................................................................... 78 ANNEX III – QUESTIONNAIRE ON NATIONAL STRATEGIES AND POLICIES FOR IDM IN OECD COUNTRIES ................................................................................................................................................. 79 3 DSTI/ICCP/REG(2010)3/FINAL KEY FINDINGS The following eighteen countries responded to the 2010 OECD questionnaire on National Strategies and Policies for Digital Identity Management: Australia, Austria, Canada, Chile, Denmark, Germany, Italy, Japan, Korea, Luxembourg, the Netherlands, New Zealand, Portugal, Slovenia, Spain, Sweden, Turkey and the United States. All of them have or plan to develop a national strategy for Identity Management (IdM) or a set of policies which, taken together, represent such a strategy. They are at various stages of development and implementation. The analysis of the responses focuses on governments‘: Vision and strategy for digital identity management. The vision describes the overarching objective of the government for developing their strategy, the intended future state that it wants to reach through the strategy. The strategy describes the main elements of the plan to realise the vision. Policies for digital identity management. The policies describe the set of tools (laws, plans, actions, etc.) developed to implement the strategy. Vision and strategy Vision: the main objectives for national IdM strategies are to realise e-government, to foster innovation in public and private e-services and strengthen cybersecurity. For most countries, the overarching objective or vision for the development of a national IdM strategy is the realisation of electronic government. In addition to e-government, most countries also aim to foster innovation in the broader Internet economy, either explicitly or implicitly, either immediately or in the longer term. Two countries consider cybersecurity as the fundamental objective for their strategy rather than e-government and/or the development of the broader Internet economy. Although their vision has a different focus, the strategy of these two countries does not fundamentally differ from that of the other countries. Generally, however, innovation, e-government and cybersecurity can be identified in all countries‘ approaches. Variations are essentially related to the level where these dimensions are addressed (vision, strategy or policy). Fostering innovation in the broader Internet economy is a shared objective by a majority of responding countries but is not always explicitly mentioned as such. It can, however, be deduced from key aspects of their strategy and policies. National IdM strategies aim to benefit businesses, citizens and the government. They are considered a key enabler for innovation in the public and private sectors: as they facilitate the generalisation of stronger electronic authentication, they enable higher value services that require a high level of security assurance to be offered. They are also expected to have economic benefits in terms of reducing costs and increasing productivity in the public sector and to foster usability of online services. Increased trust or assurance about identities online – or even bi-directional trust between parties transacting or communicating online – is also highlighted as a key benefit for all participants. 4 DSTI/ICCP/REG(2010)3/FINAL Strategy: