Xiaoshu Liu’s Post

Digital ID will, in the government’s words, “provide individuals with secure, convenient, voluntary and inclusive ways to verify their identity for use in online transactions with government and businesses”. https://lnkd.in/g6VUH8df #australiangovernment

Updates on Australia’s Digital ID bill: more privacy protections and a legislated commitment to opening the system to Private players within 2 years. This is a small hypothetical win for a number of Industry players but a lot of uncertainty remains. #digitalID #Australia #TDIF

𝐑𝐞𝐜𝐞𝐧𝐭𝐥𝐲, 𝐨𝐧𝐞 𝐨𝐟 𝐨𝐮𝐫 𝐚𝐝𝐯𝐢𝐬𝐞𝐫𝐬 𝐚𝐬𝐤𝐞𝐝 𝐮𝐬 𝐡𝐨𝐰 𝐭𝐨 𝐞𝐧𝐬𝐮𝐫𝐞 𝐭𝐡𝐞𝐲’𝐫𝐞 𝐦𝐞𝐞𝐭𝐢𝐧𝐠 𝐭𝐡𝐞𝐢𝐫 𝐨𝐛𝐥𝐢𝐠𝐚𝐭𝐢𝐨𝐧𝐬 𝐮𝐧𝐝𝐞𝐫 𝐭𝐡𝐞 𝐀𝐮𝐬𝐭𝐫𝐚𝐥𝐢𝐚𝐧 𝐏𝐫𝐢𝐯𝐚𝐜𝐲 𝐏𝐫𝐢𝐧𝐜𝐢𝐩𝐥𝐞𝐬 (𝐀𝐏𝐏𝐬). 🤔 𝐅𝐨𝐫 𝐟𝐢𝐧𝐚𝐧𝐜𝐢𝐚𝐥 𝐚𝐝𝐯𝐢𝐬𝐞𝐫𝐬 𝐥𝐢𝐤𝐞 𝐮𝐬 𝐢𝐧 𝐀𝐮𝐬𝐭𝐫𝐚𝐥𝐢𝐚, 𝐡𝐚𝐯𝐢𝐧𝐠 𝐚 𝐜𝐥𝐞𝐚𝐫, 𝐚𝐜𝐜𝐞𝐬𝐬𝐢𝐛𝐥𝐞, 𝐚𝐧𝐝 𝐜𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐭 𝐩𝐫𝐢𝐯𝐚𝐜𝐲 𝐩𝐨𝐥𝐢𝐜𝐲 ����𝐬 𝐞𝐬𝐬𝐞𝐧𝐭𝐢𝐚𝐥. 𝐁𝐮𝐭 𝐥𝐞𝐭'𝐬 𝐛𝐞 𝐡𝐨𝐧𝐞𝐬𝐭—𝐬𝐭𝐚��𝐢𝐧𝐠 𝐨𝐧 𝐭𝐨𝐩 𝐨𝐟 𝐫𝐞𝐠𝐮𝐥𝐚𝐭𝐨𝐫𝐲 𝐮𝐩𝐝𝐚𝐭𝐞𝐬 𝐚𝐧𝐝 𝐝𝐫𝐚𝐟𝐭𝐢𝐧𝐠 𝐩𝐨𝐥𝐢𝐜𝐢𝐞𝐬 𝐜𝐚𝐧 𝐛𝐞 𝐭𝐢𝐦𝐞-𝐜𝐨𝐧𝐬𝐮𝐦𝐢𝐧𝐠. 𝐓𝐡𝐚𝐭'𝐬 𝐰𝐡𝐞𝐫𝐞 𝐈𝐈𝐏 𝐃𝐞𝐚𝐥𝐞𝐫 𝐆𝐫𝐨𝐮𝐩 can make a difference. By partnering with IIP, you not only get peace of mind that your privacy policies meet the standards, but also stay ahead of the game with access to the latest industry updates—all in one place. No need to scour the news or juggle compliance on your own! Check out our latest blog post, "𝑭𝒊𝒏𝒂𝒏𝒄𝒊𝒂𝒍 𝑨𝒅𝒗𝒊𝒔𝒆𝒓𝒔: 𝑬𝒔𝒔𝒆𝒏𝒕𝒊𝒂𝒍 𝑮𝒖𝒊𝒅𝒆 𝒕𝒐 𝑷𝒓𝒊𝒗𝒂𝒄𝒚 𝑷𝒐𝒍𝒊𝒄𝒊𝒆𝒔 𝒊𝒏 𝑨𝒖𝒔𝒕𝒓𝒂𝒍𝒊𝒂," where we break down your obligations under the APPs and how to create a compliant privacy policy. Learn how to: 📌Develop a strong, compliant privacy policy 📌Inform clients effectively 📌Protect your clients’ personal information Read more here: https://lnkd.in/gec-P_Ks Stay ahead—join IIP to keep up with the latest developments in financial services by scheduling a meeting: https://lnkd.in/gXH5bq5j #privacypolicy #iipdealer #financialservices

Commonwealth statutory declarations can now be witnessed digitally via @myGov, leveraging the Government's Digital ID system and eliminating the need for in-person witnessing. This innovative step, announced by Finance Minister Katy Gallagher, Government Services Minister Bill Shorten, and Attorney-General Mark Dreyfus, is another demonstration of the practical benefits of Digital ID. #DigitalTransformation #DigitalID #StatutoryDeclarations https://lnkd.in/gdrihD7q

Getting there ... #digitalID legislation is good ✅ and now terrific to see some funding for trials of #digitalwallets and #verifiablecredentials as part of the Australian Government Digital Identity System (AGDIS). Identity is great but only half the story. We need an end-to-end and secure system. It is pointless to be able to prove who you are digitally if you still have to produce/copy/send paper documents and certificates.

Today, the Data (Use and Access) Bill (https://lnkd.in/eT-ChZCg) had its first reading. This stage is a formality that signals the start of the Bill's journey through the Lords. The second reading - the general debate on all aspects of the Bill - is yet to be scheduled. At first glance, it appears a lot has survived from the previous government's Data Protection and Digital Information Bill (DPDIB). Recognised legitimate interests - Activities assumed to be "legitimate by default" (hence a full legitimate interests assessment is not required) includes: • Public interest • National security, public security, and defence • Emergencies • Crime • Safeguarding vulnerable individuals Purpose limitation - Like the DPDIB, the Data (Use and Access) Bill provides a set of conditions where a new processing purpose is automatically deemed "compatible" with the original purpose for which the data was collected, such as crime, safeguarding and archiving. Automated decision-making - The Bill appears to restrict the scope of UK GDPR Article 22 to automated decisions made via special category data. This would mean people in the UK lose their rights over automated decisions made with other types of personal data. International data transfers - The new Bill appears to carry over the DPDIB's "data protection test" which provides a set of criteria by which the government will assess third-country data protection adequacy. Controllers and processors could also refer to the test in certain circumstances, and the data protection test could be used for transfers of law enforcement data. Data subject rights - Unlike the DPDIB, replacing the words "manifestly unfounded" with "vexatious" in the test for rejecting a data subject rights request does not appear in this Bill. - The new Bill does however retain some of the other amendments to Article 15 UK GDPR, including clarifying the time limits and codifying the common law requiring that controllers must only conduct a "reasonable and proportionate search" for personal data. - the Bill also adds the right to make a complaint to the controller to the Controller's general duties, noting that a controller must facilitate the making of complaints by taking steps such as providing a complaint form which can be completed electronically and by other means. Additionally, Controllers may need to notify the ICO of the number of complaints they receive. ICO reform - The new Bill includes a provision suggesting that the Commissioner may reject or charge for complaints deemed "manifestly unfounded or excessive." Logging of Law Enforcement processing - Like the DPDI, the Bill suggests the justification for consultation and disclosure are omitted. The legislation is still at the earliest of legislative phases, and we've only taken a cursory reading so far, but let us know what stands out to you as you read the Bill!

DPDP final draft to be ready for public review in two weeks The government has finalised the draft of the rules proposed to be enacted under the Digital Personal Data Protection (DPDP) Act 2023 and hopes to release them for public consultation in the second or third week of August, sources told ET. The rules are expected to be notified after the current session of the Parliament concludes, sources added. Read more at: https://lnkd.in/dpJYXS5t By Aashish Aryan and Surabhi Agarwal

𝐏𝐔𝐁𝐋𝐈𝐂 𝐀𝐃𝐕𝐈𝐒𝐎𝐑𝐘 𝐖𝐀𝐑𝐍𝐈𝐍𝐆 𝐀𝐆𝐀𝐈𝐍𝐒𝐓 𝐌𝐈𝐒𝐑𝐄𝐏𝐑𝐄𝐒𝐄𝐍𝐓𝐀𝐓𝐈𝐎𝐍 𝐀𝐍𝐃 𝐅𝐀𝐋𝐒𝐄 𝐈𝐍𝐅𝐎𝐑𝐌𝐀𝐓𝐈𝐎𝐍 𝐈𝐍 𝐃𝐀𝐓𝐀 𝐏𝐑𝐎𝐂𝐄𝐒𝐒𝐈𝐍𝐆 𝐒𝐘𝐒𝐓𝐄𝐌 𝐑𝐄𝐆𝐈𝐒𝐓𝐑𝐀𝐓𝐈𝐎𝐍 The National Privacy Commission (NPC) sternly warns all Personal Information Controllers (“PICs”) and Personal Information Processors (“PIPs”) to not provide any false information or misrepresent material information in the Registration of their Data Processing Systems. The NPC stands firm in its commitment to place paramount importance in ensuring compliance among its regulated entities. Said violations shall result in revocation of the Certificate of Registration and the imposition of administrative fines. Under Section 35(G) of NPC Circular No. 2022-04 , it provides that the NPC may motu proprio revoke the registration of a PIC or PIP for providing false information in the registration or misrepresenting material information in the registration. Furthermore, Section 37 of the abovementioned Circular states that a PIC or PIP whose Certificate of Registration has been revoked or that is determined to have violated the registration requirements, upon notice and hearing, be subject to compliance and enforcement orders, cease and desist orders, temporary or permanent bans on the processing of personal data, or payment of administrative fines. The NPC, in upholding the principles of the Data Privacy Act of 2012, will be relentless in enforcing the law to ensure the protection of every Filipino’s data subject rights. #PrivacyPH

The next time you ask your romantic interest for their phone number, do you have to provide them a DPDP Compliant notice? 💔 😒 💡The DPDP Act does not apply to personal data collected for personal or domestic use. But if the personal data is used for a commercial purpose, then you must show notice and obtain verifiable consent. ⚖️ Crafting the applicability of the DPDP Act is a story of striking the perfect balance between protecting individual autonomy and leaving space for local businesses (and your dating life) to thrive. 🌏 The result - the DPDP Act has wide extra-territorial applicability. That means it applies to any business that uses personal data of people in India even if it does not have an office in India. At the same time it has provisions that exempt some types of call centres and start ups from some or all of its requirements. ✅ The first step in complying with the DPDP Act is to understand where it applies. The answer is here -

In the IDnow Glossary it is asserted that "By 2030, it is estimated that 80% of Europeans will be using wallet-based digital identifiers.", which will of course create a greater gap towards the people with no civil registration, no legal identity, no proof of identity. Now what it is required is lot's of advocacy work to convince the globe of the need to give everyone a birth certificate, a legal identity and a digital id. https://lnkd.in/djtmqtVy.