Blog

To foster trust in any digital ecosystem, regulation and digital technology must equally co-exist. Technology must be built and designed upon ethical practices of ensuring organisations and governments protect the rights of people as well as deliver a robust digital service.

Digital Identity is a technology that transcends all economic sectors that rely on its use. Thus, Digital Identity adheres to a complex web of regulations and policies designed to primarily safeguard user privacy, data security and ethical practices mostly in the Tertiary/Service sector of the economy. While moving towards a more digital economy, a country’s Service Sector relies heavily on digital platforms to facilitate transactions, interactions and exchange of information between individuals and organisations.  Digital Identity plays a critical role in ensuring that these transactions, interactions and exchange of information is happening in a trusted environment.

This month, we look at important laws and policies that regulate and guide the use of digital identity in international economies. Whilst technical standards set the rules, protocols and specifications that dictate how digital identity systems and technologies should operate and interoperate, governing laws and policies are important in ensuring participants abide by those technical standards.

Here are some important international governing laws for the safe use of digital identity:

      1.Data Protection and Privacy

• Examples include the General Data Protection Regulation (GDPR) in the European Union.

     2. Cybersecurity

• For example Cybersecurity Information Sharing Act (CISA) or the Cybersecurity Act of 2015 for the United States,

     3. Data sharing

• For example Data Availability and Transparency Act 2022 of Australia. The Act establishes the DATA Scheme under which Commonwealth bodies are authorised to share their public sector data with Accredited Users. Accredited Users are authorised to collect and use the data, where the requirements of the Act are met.

     4. Sector -Specific Regulations

• For example, Health Insurance Portability and Accountability Act 1996 (HIPAA) by the United states

Depending on the model of governance and architecture a country adopts for digital identity, the corresponding legislation and policies are implemented with other country specific regulations to support the implementation of Digital Identity.

Based on this the YuTru digital ID and trust framework was designed to ensure and support compliance by AFIs and businesses to existing laws to grow the PNG economy, and open transparent international trade within the pacific region and other larger economies. Contact us at info@yutru.org.pg if you require more information about YuTru Digital Identity and Trust Framework.