Karsten Wenzlaff, Advisor
August 26th, 2025
The Law Society Gazette | | Sep 2020
The need to produce original official documents in order to prove identity could finally become obsolete under ambitions for electronic identity verification announced by the government today. The Department for Digital, Culture, Media & Sport revealed that the government plans to update existing laws 'to enable digital identity to be used as widely as possible'.
It will consult on developing legislation for consumer protection relating to digital identity, specific rights for individuals, an ability to seek redress if something goes wrong, and set out where the responsibility for oversight should lie. It will also consult on the appropriate privacy and technical standards for administering and processing secure digital identities.
The announcement formed part of the government’s response to a call for evidence on digital identity conducted last year. A summary of responses claims that: 'You told us you wanted the government to take a lead role in developing the UK’s digital identity economy.'
Identity checks during home buying and selling were highlighted in the consultation, which suggested that 'Effective use of digital identities (and digital signatures) would help simplify a lengthy process and enable more - if not all - of what is acknowledged to be one of life’s most stressful experiences to be moved online.'
In a statement, the Cabinet Office minister Julia Lopez said:
'It is clear that there is a need and an expectation for the government to make it easier for people to use digital identities quickly, safely and securely and we are committed to enabling this. We want to ensure there is transparency for people when they create and use digital identities so that they are always in control of who has access to their data and for what purpose.’
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
NCFA | Samuel He | Aug 17, 2020
FFCON Week 5 Wrap-up: Digital Identity & Convergence MarketplacesDigital identity has become particularly relevant in our modern age with the rise in technology, and the trend isn’t slowing down. This means it is crucial to deliver new frameworks and infrastructure to support digital commerce, online interactions and social identification in more secure and robust ways. This poses some important questions – What exactly is digital identity and why does it matter? How important is consumer ownership of their own data and how can businesses and government adapt to this?

Liquid Avatar Demo
The session kicked off with a presentation by David Lucatch of KABN about the importance of protecting one’s digital identity. David is a strong advocate, and the main point that he wants to emphasize is that our everyday actions online generate lots of data that have tremendous value. In his words, we as users are data generating machines. Different businesses and corporations have generated a lot of profit with the usage of this data. Lucatch believes that ownership of data should be a basic human right that the government should protect. He believes that data needs to be treated as currency for transactions for organizations that want to deal with them.
“You are a data generating machine,” David Lucatch, Co-founder, Director and President, KABN Systems North America
KABN followed up with a demo of their app called Liquid Avatar that functions as the digital identity of the customer. Utilizing biometrics and blockchain, Liquid Avatar provides the tools to set permissions and control for the customer’s private data, potentially reducing any opportunity for digital identity fraud. You can learn more about their app here: https://liquidavatar.com/
Later in the session featured a panel that offered different insights from four distinct perspectives on digital identity from the point of view of government, investor, technology, and the user. Each exhibited support for the idea of decentralized identity and moving ownership of data from the corporation to the user. In addition, it was discussed that data protection is crucial to protect new entrants into the market. This is because incumbents have lots of power if consumers are not in authority to control data streams.
“The key to the adoption of any technology is you have to develop value,” Senator Colin Deacon, Senate of Canada

4 important roles in digital ecosystems to create value
As was the case with all emerging technologies in the past, the idea of building trust with the consumer was promoted as a crucial step in delivering value and making digital identity usable for the average user.

Neoflow Screenshot:
Before the panel, Patrick Mandic of Mavennet gave a demo on his product NeoFlow. The aim of the product is to offer efficient solutions and bridge digital islands in the oil and gas industry. Patrick believes that the building blocks of transparency in the industry are identity, trust, and finance, all relevant factors to the topic of the panel. Neoflow is used by border control agencies and relevant government entities and provides tracking of key value chain events as well as digitization of relevant documents. You can learn more about Neoflow here: https://www.mavennet.com/solutions/neoflow/
This next panel featured different perspectives on what the future may look like with markets. One idea discussed was to encourage different competitors to collaborate, with the end result being a better market for everyone. This involves finding the right individuals and government organizations that align with a shared vision/initiative. The panelists believe blockchain will have a lot of significance and will play a big role in transactions in the future. They believe that government and the central bank will play a vital role in innovation and cooperation that can speed up the adoption of blockchain.
An important takeaway from the panels is the importance of having transparency and having consumer ownership of their data. Moving ownership of data from the corporation to the user is an important step in being able to deliver value. The idea of transparency is also relevant with regards to the future of markets. Building a good rapport between government and competitors will play a key role.
Be sure to join us for the next session about Currency Wars, Digital Assets, and the Rise of Decentralized Finance! Learn more here: https://fintechandfunding.com/ffcon20-whats-on-this-week/
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Guest Post | July 21, 2020
Fintech companies have dramatically improved financial services worldwide. The sum of innovative technologies is offering groundbreaking banking and financial services to both consumers and B2B clients. In terms of funding, payments, investments, and other processes, the financial sector has never been more streamlined.
But in line with increased performance, there is increased risk. The fintech industry is on a quest to ensure optimal cybersecurity and safeguard customers’ financial and personal data; as well it should because it seems every month we hear about another major data breach.
While we may pat ourselves on the bank and point to the positive aspects of fintech and open banking, we shouldn’t lose sight of the fact that critical technical dependencies on third parties in the integrated fintech ecosystem have made it uniquely vulnerable to several cybersecurity risks.
Here we shed light on some of those risks and go over a few actionable solutions to improve the landscape.
If you want to categorize cybersecurity risks in the fintech industry, malware attacks and hacking are among the most prominent. In one key example of the latter, bad actors are launching sophisticated cyberattacks on SWIFT infrastructure, a financial telecommunication system used worldwide by banks and other financial institutions to transfer transaction-related information.
The “insane” (as Wired termed it) $81 million bank heist incident in Bangladesh incident took place because of exploitable vulnerabilities that are prevalent in many banks. A similar attack is probably a matter of time as the risk here is directly related to financial operations such as domestic and international funds transfers.
The rapid rise of fintech companies is associated with an overall transformation in information technology and related fields. Legacy banking regulations don’t cover technological risks in a comprehensive manner, which means the fintech industry is largely unregulated.
Regulatory bodies are catching up but there is a lot left to cover to minimize the risk. In the meantime, a lack of regtech means organizations at risk of breaches include both those handling financial and personal data and peer to peer loan data.
In the fintech ecosystem, most applications and financial services are web-based with iOS or Android mobile devices at the front end. Fintech technology uses one-time passwords (OTPs) as security codes to verify customer authenticity during online marketplace transactions. Unfortunately, these OTPs are easily accessible by cyber attackers and critical information is easily traceable by bad actors. Faulty fintech software solutions are mostly liable in these cases.
The risk of digital identity theft is directly related to online marketplaces. When a customer shares sensitive financial and personal information on online platforms or in e-banking solutions, this information is far too easy to garner.
The fintech industry is largely dependent on various third-party service providers, from malware and cyberattack protection, cloud computing, to digital data services, to name just a few. Many IT risks arise due to weak software management by third-party service providers. Always go for reputable providers for fintech solutions as it ensures greater safety and security across the board.
Regulatory compliance for the fintech industry is still scant, particularly when compared to the size of the landscape. However, applying what compliance is available should save fintech companies from cross-border legal issues, potential loss of reputation, and the often hefty regulatory fines imposed by jurisdictional authorities. At the same time, regulators should review regulation perimeters routinely. Some key regulations to follow include:
In order to maintain customers’ privacy on web applications, online marketplaces, and when using e-banking solutions, banks and financial institutions should periodically update their security framework and architecture. This will mitigate some of the risk factors and pave the way for effective fintech implementation.
In addition, the industry as a whole needs to do a bit more to protect application users on-site. Companies can’t always rely on users to download a secure and effective VPN so apps should have VPN protection in place to secure connections and prevent unauthorized access. System firewalls, antivirus, and other steps are fundamental to stopping breaches.
The bottom line is that fintech will never be free from security vulnerabilities. However, by fostering appropriate security measures the industry can stay strong.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
PYMTS | July 10, 2020
Open banking
comes in several flavors, yet its rise requires robust Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures, Zac Cohen, chief operating officer at identity verification firm Trulioo told Karen Webster in a recent interview.
As financial institutions (FIs) work with FinTechs, they need to know that these tech-nimble startups are not only enabling access to customers’ account data but also in a manner that embraces KYC and AML. The end goal: to speed innovation toward new products and services while keeping fraudsters out.
The need for both innovation and security comes at a time when open banking is gaining a foothold in the United States due in part to the pandemic. It’s also growing across the pond in the European Union, albeit with some important distinctions.
“In recent years, we’ve seen the heavily regulated version of open banking in the E.U.,” Cohen said. “It’s been a coordinated effort — regulatory-driven, highly standardized and thrust upon the banking community. In the U.S., it’s been an organic-but-inevitable exercise, driven primarily by innovation and consumer demand.”
That’s due in part to the fact that America has a more fragmented banking and regulatory landscape, he said. But despite the differences, Cohen said he believes open banking is here to stay in the U.S.
Just consider all the recent acquisitions from major payments players. For instance, Mastercard last month bought Finicity, while Visa earlier this year acquired Plaid. Through those acquisitions, the networks have shown their interest in serving as intermediaries between banks, their customers and FinTechs that want access to important account-related data.
After all, the financial services ecosystem is striving to give consumers access to their financial records and leverage tech-driven innovations to improve their lives.
Cohen said that if banks don’t jump on board with those goals, they risk losing significant numbers of customers. Consumers want to share and access data to make such things as applying for a mortgage or tracking spending across various accounts easier.
But with an ever-greater exchange of data must come an increased FI focus on data privacy, data ownership and how information gets used, he said. At a high-level view, banks must have robust ID verification procedures in place, making sure that the right people are showing up at the right time to do the right thing.
Webster noted that KYC and AML procedures aren’t governed by global standards. However, Cohen said that in the U.S., various forms of privacy legislation have been making headway. For instance, he pointed to statewide initiatives in California and Illinois that have focused on biometrics.
“It’s a good move for organizations that are involved in open banking and driving that innovation to have similar high privacy standards in that regard,” said Cohen.
He recommended that organizations have checks and balances to make sure consumers are protected and data is secured via coordinated efforts between banks and FinTechs.
Along those lines, financial services players — banks and FinTechs among them — are entering into data exchange agreements that operationalize tenets around what can be done with data, what information is needed and how long it can be stored.
“You’re confirming pieces of information on demand, but you’re not maintaining an open channel, nor are you retaining information nor sharing it or using it for any other purpose other than strictly what has been stated,” he said.
Generally speaking, firms shouldn’t retain data in searchable format, but should keep it in anonymized formats and quickly expunge it, Cohen said.
“When you feed that information back or you provide that connectivity and access, there’s no reason to retain it,” he said. “As long as you’re following strong data retention principles and as long as you’re securing those networks and channels, that’s the basic foundation that you want when operationalizing open banking.”
Dialogue and close coordination between financial services players have spurred the equivalent of three years of innovation during the pandemic’s past three months, Cohen said.
“There’s been a huge amount of volume and demand for these types of digital journeys, as opposed to being able to walk into a branch and do things in person,” he said.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |