230 likes | 309 Vues
Explore the complexities of changing names and the implications for privacy and security. From legal definitions to fraud prevention, delving into the multifaceted aspects of personal identity. Gain insights into privacy laws and best practices for handling personal names in various contexts.
E N D
Changing names and identity fraud Technology and Privacy Forum 22 September 2014
What’s in a name? That which we call a rose, by any other name would smell as sweet.
William Shakespeare • Guliemus Filius Johannes Shakspere (born?) • Bill (by friends?) • The Bard (in infamy) • Francis Bacon or Christopher Marlow(alias of?) • Mrs Shakespeare (Anne Hathaway)
Why are changing names a problem? • When they create additional records for the same customer. Well…. No, not exactly
Why are changing names a problem? • When they are used to create false identities to commit fraud • avoid secondary tax • claim more than one benefit • hide assets • dodge police vetting checks
Quasimodo… …that name rings a bell.
What is a legal name? Any name providing it is not for the purposes of deceit.
Official names • Names recorded in authoritative registers • Birth name • Passport name (NZ or Overseas) • Citizenship name • Registered change of name
Assumed names • Alias • Also known as (AKA) • Commonly known as (CKA) • Nickname • Pseudonym • and….
Married names • Assumed unrecorded until proven official • No more maiden names please
Privacy Act • Principle 1 • If you collect it use it • Principle 3 • State why collection is mandatory • Principle 7 • Correct on request
Privacy Act cont. • Principle 8 • Accuracy vs misleading • Principle 10 • Collection for Id proofing vs correspondence
Recommended practice • Good practice guidance for the recording and use of personal names
Principle 1 Customers are entitled to be referred to in correspondence and verbally by the name of their choice. Principle 2 Organisations, where required, can establish the uniqueness of a customer, regardless of the name used.
Principle 3 Organisations, when permitted, are able to actively match customers, where a unique identifier is not shared. Principle 4 Organisations, where required, use the correct name.
What can you do? • Allow for two categories of name Official & Assumed
What else should you do? • Have some additional flags • Validated name (official name checked against source) • Preferred name (any name, one instance at a time) • Anchor name (one instance of an official name)
Principle 1 My name is Mr Potato Head – but call me Darth
Hi, I’m Darth Hi, I’m Yoda Principle 2
Principles 3 & 4 BigOrg’s Mr Potato Head ACME’s Mr Potato Head