Issues in Cross Jurisdictional Authentication

Governance for Cross-Jurisdictional IAA

The IAA Working Group was tasked in its terms of reference with developing recommendations with respect to an on-going governance structure for review by PSCIOC and PSSDC. To this end the Working Group has brought forward an initial paper entitled “Governance for Identification, Authentication and Authorization” . It is expected that any proposed cross-jurisdictional authentication governance model will need to go through several iterations due to the range of issues to be addressed and that this work will be an ongoing exercise.

Privacy

As previously stated, there is an urgent need to provide a definitive analysis that will clarify the constraints imposed on cross-jurisdictional authentication by privacy legislation, regulation and policy. The focus of this work will be on the requirements for privacy compliance. The IA&A Working Group has developed an initial discussion paper on privacy issues related to Cross-Jurisdictional Identification, Authentication and Authorization. Specifically, it aims to define the privacy issue, identify an approach to addressing the issue and proposing next steps.

While this is an overview paper, it is recognized that the issue of privacy has great breadth and complexity. Thus, it is recommended that the document be taken as a starting point for a more comprehensive and fully nuanced analysis to be conducted by an appropriate cross-jurisdictional committee with expertise on these issues.

Liability

Liability has been identified as a key issue to be addressed in order to enable interoperability. Ontario is leading the development of an issues paper that will identify the areas where liability could be incurred, the associated risks and possible models to address or limit liability. Input from the IAA Working Group will be sought as this work is undertaken. It is expected that the issues paper will be completed and presented to Lac Carling in 2005.