Thread

Continuing the #nationalId debate, hereโ€™s the key part of the #digitalId experience in #Poland core mobile application called mObywatel. When I want to log in to any government website, they display a QR code which I scan with the app. What then happens you see on the screenshot below (in Polish, sorry) and itโ€™s the critical part. The app tells me what personal details the website is requesting from me, and I am explicitly approving this share. In this case, I was logging in to Polish social insurance insurance. The only details they need from me is name, surname and unique id number (think NINo) which binds to my insurance account. Thatโ€™s it. Why this is important? Because this explicit share approval provides you with full transparency on what data youโ€™re sharing and with whom. Of course, the social insurance already has all of my details since Iโ€™ve started university, but then mObywatel also integrates with commercial institutions, like banks. Then it becomes useful, because you can literally open a bank account online using mObywatel, in which case you will have to authorise much more details - which youโ€™d normally be required to fill in a paper form in the bank branch. But it will be always you to see and approve what you share with whom. image

Replies (4)

In the Finnish system, there are a lot of identity providers as every bank plus a couple of other institutions are trusted to perform strong ID. There is no transparency as to what data they provide to the authenticating party. The process is the same by which one logs on to the banking services, which does create habit, but also exposes the bank process to cases which have nothing to do with banking. @kravietz ๐Ÿฆ‡