Identity Theft Data Privacy Day 2012 Dalhousie University Halifax, NS

Transcription

1 Identity Theft Data Privacy Day 2012 Dalhousie University Halifax, NS

2 AGENDA Identity Theft & Identity Fraud Definitions Bill S4 - Offences Identity Documents Uses of Identity Information Identity Fraud Steps consumers and organizations can take to minimize the effects of Identity Theft

3 Identity Theft - refers to the unauthorized collection/possession of the information Identity Fraud - refers to the fraudulent/deceptive use of personal information in connection with crimes such as personation, fraud, credit card offences, etc.

4 BILL S-4 enacted Jan 8 th, CC IDENTITY INFORMATION - DEFINITION 402.2(1)CC IDENTITY THEFT OBTAIN/POSSESS 402.2(2)CC IDENTITY THEFT- TRAFFICKING 402.2(3)CC 402.2(4)CC IDENTITY THEFT- INDICTABLE IDENTITY THEFT- PENALTY

5 New Offences cont d 403(1)CC IDENTITY FRAUD- OFFENCES 403(2)CC IDENTITY FRAUD- DEFINED 403(3)CC IDENTITY FRAUD-PENALTY 738CC IDENTITY FRAUD-RESTITUTION

6 Laws in Canada Privacy Act Govern Federal Agencies PIPEDA (Personal Information Protection and Electronic Documents Act) est. January 1 st, Some provinces have provincial laws similar to PIPEDA if so those laws should be abided by.

7 Identity Documents *SIN Card *DL *Health Insurance Card *Birth Certificate *Death Certificate *Passport

8 ID Documents cont d *Certificate of Citizenship *Immigration Status *Indian Status *Employee Identity Card that has photograph & signature *or any similar document issued by the Federal/Provincial/Foreign Government

9 Uses of Identity Information access and open bank accounts transfer bank balances apply for loans, credit cards and other goods and services make purchases hide criminal activities obtain passports or receive government benefits

10 Identity Fraud

11 What is Identity Fraud? Identity fraud is the unauthorized acquisition, possession or trafficking of personal information. It is also the unauthorized use of information to create a fictitious identity or to assume an existing identity. This is done to obtain financial gain, goods or services, or to conceal criminal activities.

12 Identity Fraud Identity fraud presents a serious threat to public safety. The impact of identity fraud is felt by government, business, and the public.

13 Fraud Situation

14 Fraud Impact by Sector U.K.

15 Fraud Losses Canada 1 million victims annually and, $10 Billion in losses just to MMF and ID Crime.

16 Fraud Impact In 2008 nearly 1.7 million victims of ID Fraud spent 21 million hours and $150 million to resolve problems associated to ID Fraud. Measuring Identity Theft in Canada: 2008 Consumer Survey

17 Why don t victims report? Embarrassment / Shame Feel law enforcement won t do anything Feel the courts won t punish Report to bank or credit agency instead Don t know they ve been victimized Feel they may have committed a crime themselves

18 Consumer Steps to Minimize Fraud

19 Be vigilant. Protect yourself! Theft of your identity can occur by internet, telephone, fax, or through the mail. Everyone must be vigilant in protecting themselves against loss. Retailers become the ultimate target of identity fraud, since fraudulent business transactions are completed by unsuspecting individuals.

20 Be proactive in fighting identity fraud Learn and use safety measures to minimize the chance of becoming a victim. Be wary of unsolicited s, telephone calls or mail attempting to extract personal and financial information. Ask yourself if you need all of the identity documents in your wallet. Remove any cards you don t need and store them in a safe place.

21 Be careful about sharing personal information Provide personal information on the phone, mail or internet only when you have initiated the contact or know who you are dealing with. Someone with your SIN or birth certificate can pretend they are you and make fraudulent financial transactions.

22 Payment Cards (credit and debit) Periodically check your credit report, bank and credit card statements. Report irregularities promptly. Don t lose sight of your credit and debit cards during transactions.

23 Mail Shred personal and financial information before putting it in the garbage. Protect your mail. Deposit outgoing mail in post office boxes and remove mail from your mailbox promptly. If you are unable to pick up your mail, have someone pick it up for you.

24 If you think you might be a victim of identity fraud Act immediately. Report the incident to the appropriate organization. Notify creditors and/or financial institutions immediately. File a report with local police. Cancel credit and/or debit cards. Check your credit file with the credit bureau.

25 Organizational Risk Assessment Define Information Privacy Principles; Establish the Specific Objectives; Identify and Assess risks of not meeting the objectives; Identify and Implement control measures; Assess the effectiveness of control measures.

26 Safeguarding of Information Physical Measures (alarms, locking cabinets, restricting access. Technological Measures (password, encryption, firewalls.) Organizational controls (security clearances, limiting access to need to know, staff training, confidentiality agreements.

27 Safeguarding Factors Sensitivity of information Amount of information Extent of Distribution Format of the Information (Paper, electr.) Type of Storage

28 Summary: Private companies, public organizations and end users all have a stake in minimizing the effects of Identity Theft. By practicing risk management techniques and having a clear mandate with respect to the use, storage and dissemination of information Identity Theft can be minimized.

29 Additional Information RECOL [Report Economic Crime On Line]: Royal Canadian Mounted Police: Phonebusters (The Canadian Anti-Fraud Centre): Equifax Trans Union Canada

30 Industry Canada Privacy Act - Office of the Privacy Commissioner of Canada -