Asked to outline new relationship between the individual and public services for Jeff's Citizen2013 conference. It focuses on emergence of the UK's new ID assurance model and what else can be done with that infrastructure.

1. www.mydex.org - All right reserved
Digital by default:
ID assurance
William Heath @williamheath
Mydex.org
Citizen2013

4. 1. User Control ID assurance activities can only take
place if I consent or approve them.
2. Transparency ID assurance can only take place in
ways I understand and when I am fully informed.
3. Multiplicity - I can use and choose as many different
identifiers or ID providers as I want to.
4. Data Minimisation - My request or transaction only
uses the minimum data necessary to meet my needs.
5. Data Quality - I choose when to update my records.
from http://digital.cabinetoffice.gov.uk/2012/04/24/identityand-privacy-principles/
GDS' DRAFT ID Assurance principles 1-5

5. GDS' DRAFT ID Assurance principles 6-9
6. Service-User Access/Portability I have to be
provided with copies of all of my data on request; I can
move/remove my data whenever I want.
7. Governance/Certification I can trust the Scheme
because all the participants have to be accredited.
8. Problem Resolution - If there is a problem I know
there is an independent arbiter who can find a solution.
9. Exceptional Circs Any exception has to be
approved by Parliament and is subject to independent
scrutiny.
from http://digital.cabinetoffice.gov.uk/2012/04/24/identityand-privacy-principles/

6. Eight cross-government ID assurance providers
working with GDS
Cassidian
Digidentity
Experian
Ingeus
Mydex
PayPal
Post Office
Verizon
Guides at https://www.gov.uk/government/publications/identity-assurance-enabling-trusted-transactions

7. Will GDS' ID Assurance work where previous
National ID Scheme did not?
The ID principles seem sound (but they're still in draft)
The Good Practice Guides seem fit for purpose
It is designed to work online - that's the whole point
Alpha test pilots provide chance to check:
● is it convenient, is it safe, is the individual really in control?
● is implementation sound from the individual's PoV?
What are the incentives on the IDPs?
...but it's not all risk: What other benefits and utility will this
infrastructure provide?

8. eg data givebacks from Twitter, FB, Google "data liberation"
● BBC TheSpace viewer data
● NHS, education records
BIS' Midata, Enterprise Reform Act, Midata Innovation Lab
The personal data store is a digital letterbox and supports self-
completing forms
● 10 years' two-way encrypted structured data for the price of
sending one single letter
● Makes user-friendly data sharing guidelines available
It's a proto-VRM platform for The Intention Economy
Beyond IDP: further implications of solving the
problem with a personal data store

9. www.mydex.org - All right reserved
Digital by default:
ID assurance
William Heath @williamheath
Mydex.org
Citizen2013