The proposed legislation would not change the number of specified bodies that can request the PSC. Essentially, it is a mechanism used to enable sharing of the PSI dataset with specified bodies.
However, the contact chip on the Public Services Card and a card reader communicate with each other by cryptographic means. Only card readers specifically programmed to accept the Public Services Card contact chip can do this. To date, no specified body has implemented that technology. The application is designed to only interact with a ticketing system reader deployed by the National Transport Authority.
No personal information on a customer is made available to any transport operator either inside or outside of the jurisdiction when the Public Services Card is used to interact with the ticketing system.
Neither does the contactless chip interact with the contact chip. SAFE 2 registration is provided for in legislation. Any such increase would have to be provided for in legislation that would have to be debated in, and passed by, the Oireachtas. In addition, in the course of using MyGovID to access a public service, the customer may be permitted to view and change personal data held by that public body for the purposes of that transaction and their public function.
We do this by employing two-factor authentication each time the person uses the account. This means that, in addition to requesting a username and password things you know , we send a one-time verification code to your verified mobile phone something you have which you must also provide when logging in.
Accordingly we will check a number of things with you — some of the details of your PSC may be included in that check. Full details on MyGovID are available on the dedicated website www. Yes, all recipients of welfare services and payments in Ireland have or will be asked to complete the SAFE registration process some exceptions may be made for example in respect of people with profound disabilities.
Failure to complete a SAFE registration process when requested can result in refusal of a new welfare claim or withdrawal of an existing payment or benefit. Each card has a validity period of up to 7 years. Validity can be dependent on the circumstances of the individual e. A new card will issue provided one is required by the individual. PSC holders will be written to three months in advance of their card expiring advising them to renew their PSC.
You do not have to go through the SAFE process again to renew your card but a new photograph is required. However, in combination, and with the other data and processes detailed above, passports and driving licences that do not meet the SAFE 2 standard can be used in the methods to verify an identity to SAFE Level 2.
However it is necessary, and has always been necessary, that people using high value public services are required to provide some proof of identity. Now, in order to ensure services are provided to the right person and to support efficient service delivery a growing number of public service providers are requiring that proof of identity is underpinned by the SAFE 2 identity verification standard.
Why are my other forms of identity such as my Passport or driving licence no longer an acceptable form of ID? Until recent times, many public services were provided to people who had their identity verified only to the SAFE Level 1 standard. Since the introduction of SAFE Level 2 registration in , more services are now moving to identity verification at this level to ensure a substantial level of assurance of identity.
The Department of Public Expenditure and Reform recently published the eGovernment Strategy — which lists a number of public services for which SAFE 2 registration will be required.
These are set out in the table below with relevant timelines. Others are likely to be listed in the future. During a SAFE registration, some security questions are also asked and the answers to these are recorded — these are required as subsequent security checks when a person contacts the Department about their PSI data or their PSC.
People are asked to answer only 2 of the following 10 security questions and leave the remainder blank. SAFE Level 2 SAFE 2 registration, used by the Department of Employment Affairs and Social Protection, allows a person to verify their identity once not just for access to services provided by the Department but also for an increasing number of public services provided by other State agencies — for example the Passport Office. As more public service providers move to using SAFE 2, people who are already registered to SAFE 2 will not need to repeatedly register their identity information when accessing public services.
This card is an easy to use means of verifying identity when collecting welfare payments and using services funded by the Department of Employment Affairs and Social Protection such as the free travel scheme.
SAFE 2 registration also protects the public interest by helping to minimise identity fraud and detect fraudulent claims in our welfare system. The PSI dataset does not contain relationship information and hence no relationship information is linked within the PSI dataset nor can it be shared with specified bodies for the purpose of identity verification. The Government is not seeking to create a complete population register through requiring SAFE registration.
Rather, SAFE Level 2 registration allows a person to verify their identity once for public service purposes to a substantial level of assurance. Consequently, it eliminates the need for a person to repeatedly register their identity information when accessing public services. Accordingly, verifying identity to a substantial level of assurance ultimately reduces the administrative burden both on public service providers and on individuals accessing their services.
It also facilitates those providers in making their services, particularly those of a high-value or personal nature, available through online channels which would not be possible otherwise.
It is a matter for each specified body to determine, subject to obtaining permission from the Department of Employment Affairs and Social Protection, if it wishes to access the PSI data stored on the PSC. However in most cases examination of the photographic image on the PSC and comparison of signature can validate that the card belongs to the holder.
The presentation of the card also enables the service provider to rely on the data held in the Single Customer View and compare that data with data presented at the point of transaction by the customer. Nor is the biometric or arithmetic template of the photo stored in the PSI dataset or shared with other public bodies.
The PSI data displayed will be that obtained by each contributor during their most recent transaction with the customer. This allows all specified bodies the opportunity to check the currency of their PSI data and a means of keeping it up to date. If your Public Services Card is lost, stolen or damaged, you should immediately contact the Public Services Card Helpdesk at What does the Passport Office do with the photocopy?
How does it assist the Passport office in authenticating identity? The Passport Service currently requests a photocopy of the PSC for first time adult applicants resident in the State and those resident in the State replacing lost, stolen or damaged passports that were issued prior to A photocopy of the PSC serves as evidence that the applicant is SAFE 2 registered, but the Passport Service does not require nor does it utilise the security features of the card itself.
Alternatively, it will be necessary for you to attend the Passport Office for interview in either Dublin or Cork. This ensures that your application can be processed quickly. The photocopy of the card is scanned onto the Passport Service system. The Department of Employment Affairs and Social Protection is committed to ensuring that data relating to customers is securely held and used only for relevant business purposes.
They impose obligations in relation to the confidentiality of official data and the protection of records against unauthorised access, unnecessary use, alteration, destruction or disclosure. For these reasons —. There are numerous means by which PSI data can be shared with specified bodies which include secure file transfers and application programming interfaces between systems, access to the contact chip on the PSC see the responses to What PSI data is either stored on the card or appears on the front of the card?
For how long is the contract to be in place between the controller and the provider? The current contract is due to expire at the end of That contract includes a number of conditions designed to safeguard the data. For example it is a condition of contract that all data and related services provision and operation be provided on-site in Ireland and subject to the terms of the Data Protection Acts and the jurisdiction of the Irish courts.
All data to be personalised onto PSCs i. Before any data is transferred, the Department and BCS systems mutually authenticate each other. The data is encrypted so that no third party can access the data, and electronically signed so that BCS can be certain that the data originates from the Department and has not been modified en route. All of these processes are implemented using strong cryptography according to international and industry standards.
Once PSCs are personalised the data used to so personalise them is not retained by BCS but is destroyed as an automatic part of the personalisation process in accordance with advice provided by the Office of the Data Protection Commissioner.
In addition the systems used in the card production have been subjected to audit by external experts. This in turn facilitates the re-use of the PSI dataset and the avoidance of customers having to resubmit the same identity information on multiple occasions.
Access to and use of data held in the Single Customer View database by other specified bodies is managed and controlled by the Department in accordance with the arrangements described at What governance arrangements are in place for the Single Customer View?
The Public Services Card itself has multiple protection mechanisms, all of the highest current international standards, to prevent and detect tampering with the physical card and its contents. As well as some hidden security features, there are visual measures such as the overall graphical design, branding, microprinting, the use of optical variable ink and a kinegram. In addition, a PSC and a card reader communicate with each other by cryptographic means.
Only card readers specifically programmed to accept PSCs can undertake this functionality. Separately, those bodies that actually received Public Service Identity data in that was collected by the Department of Employment Affairs and Social Protection along with the relevant legislative basis under which they could access and use this data are listed here. Use of PSI data for specific purposes is also provided for in other legislation and these instances are outlined in this link.
Section of the Act sets out how the sharing and use of the PSI data is restricted to public service bodies specified in law or their agents i. Designation as a specified body requires primary legislation and as such can only be done by an Act of the Oireachtas.
Such specified bodies are in all cases required to process and store data in accordance with the Data Protection Acts. The following sets out where each data item appears or is stored on the PSC —.
The normal digital photograph in JPEG format captured during the SAFE registration process is input into and stored in this facial image matching software. Up to the end of September the Department had detected some cases of suspected identity fraud as a result of this matching process.
It is important to note that the arithmetic models behind the photographs do not get stored on the PSC or in the Public Service Identity dataset. Consequently, this data is not shared with any other public body. It is also important to note that the Department does not ask for or collect other biometric data from our customers e.
For example, how do you ensure that entities providing information to the single customer view do not provide more information that is required under law. What mechanisms ensure that State entities do not have access to irrelevant or excessive personal data?
The Single Customer View system supports four data services that can be accessed by Specified Bodies, viz. However, the Department of Employment Affairs and Social Protection must formally approve access to the other three services. That approval is conditional on a business need being established and on the agreement to and implementation of rigorous data security and protection both technical and business protocols and standards.
This includes the nomination of a Compliance Officer in the specified body who liaises with the Client Identity Services Division of the Department of Employment Affairs and Social Protection with respect to each element of the agreement. All accesses to the Single Customer View application are logged. Information is logged about what information was accessed, by whom, and when.
The usual method involves a combination of all of the following —. In some cases, where a customer authenticates their identity in another face-to-face engagement, the Department may collect elements of the PSI data by post and, with the consent of the customer, utilise existing photographs to complete the SAFE 2 process. The Department can also provide a mobile registration service to cater for people who have difficulty attending an Intreo centre or a SAFE registration centre.
The process takes about 15 minutes to complete, once all required documents are presented. Once complete it takes working days for your PSC to arrive by post to your address. When you attend you will have an in-depth interview and additional information gathered during this interview will be verified in order to confirm your identity. For Irish citizens born in the Republic of Ireland, birth details can be verified online in most cases with the General Register Office.
You need to show evidence of your address. You can use any of the following documents to do this it must show your name and address :. This note can be written on the bill itself. If you have any of the items listed below, you should bring them along with you as they may also help to confirm your identity.
You should also bring your mobile phone with you, if you have one. During the SAFE registration process we can validate your mobile phone number which will make it easier for you to register for a MyGovID verified account.
You will need this account if you wish to access public services online. At present the Departments databases do not include details on the nature and degree of disability, hence the need to write to customers to establish if they have particular requirements to enable them to register for the PSC.
Where customers are unable to attend in person, other methods for registration are available. A mobile registration facility is available to register customers who face substantial challenges in presenting at a Department location but still want to continue to avail of their free travel entitlement. Group registration at community venues is the preferred mode of utilising these mobile registration facilities but in very exceptional circumstances, single individuals may be registered at their place of residence.
Where a customer is incapacitated to the extent that they may not be able to understand what is entailed in SAFE registration the Department would reasonably expect that their agent if an agent is appointed or carer would assist them in making contact with the Department.
Department of Employment Affairs and Social Protection,. The identity of the person making the request must be verified before data will be provided. The data may be provided either electronically or in paper format as preferred by the requestor. Data on Single Customer View reflects the PSI data held on an individual by each contributor at the time of contact with the individual. Due to social distancing there is limited availability so it is important that you attend at the appointed time.
If you are unable to attend you should notify the office as soon as possible so that the appointment can be offered to another person. This will take working days. Due to the ongoing pandemic, the department is not currently inviting customers to renew their Public Services Card PSC.
An out of date card can still be used to;. If you have a question on this process, you can send an enquiry to the department or contact the Public Services Card helpdesk. Do not include any personal details in the box below. The information you submit will be analysed to improve the site and will not be responded to individually. Toggle main navigation. Make an appointment 2. Attending your appointment 3. After your appointment 4. Make an appointment.
You will need to. Attending your appointment. It will take around 15 minutes.
0コメント