OCR Labs breaks another industry benchmark as the first private organisation to achieve Strong level (IP3); the highest level of any entity accredited under the Trusted Digital Identity Framework
Australia, 9 March 2022: Following the announcement by the Australian Government of OCR Labs being the first private Australian identity provider to be accredited under the Australian Government’s Trusted Digital Identity Framework (TDIF) and Identity Proofing Level 2 (IP2), the company has already elevated to the next accreditation level.
The bolstering of accreditation means OCR Labs has scaled to Identity Proofing Level 3 (IP3) or Strong level; the highest accreditation level applicable to OCR Labs without requiring in-person checks. IP3 is used for higher risk transactions that require a user to prove they are who they say they are, through remote face verification.
This level of accreditation equals the current standard reached by the Australian Government’s identity provider myGovID and makes OCR Labs the only private entity to be accredited at IP3.
The TDIF is the Australian Government's accreditation framework for Digital Identity services. It sets the standards, rules and guidelines for digital identity providers based on international best practice and industry standards.
The move from IP2 to IP3 includes OCR Labs ongoing independent testing for its Near Field Communication (NFC) capabilities plus additional checks to ensure the individual being verified is active in society, a so-called 'death check'. NFC technology is becoming more and more prevalent due to advancements in mobiles equipped with NFC readers, meaning you can now scan your passport chip directly from your mobile phone.
Speaking about the IP3, Paul Warren-Tape, Head of Risk and Compliance at OCR Labs says,
"Our elevation from IP2 to IP3 in just a few months is an exceptional milestone in putting us at the heart of solving digital identity solutions in Australia.
“Regulation that addresses identity document verification and biometric technologies is aligning. The TDIF accreditation in Australia is a positive step forward to ensure there are standards to protect Australians when using identity verification solutions.
“Companies have an ethical responsibility to be transparent in how their solutions help people in everyday life, whilst preserving their privacy at all times. So the boost to IP3 gives our customers the trust and confidence that we maintain the very highest level of security and compliance.
“We hope that other industry regulators consider the TDIF as best practice and make the move to its use of technology for remote identity and age verification,” said Paul.
With the pandemic continuing to shape contactless interactions, OCR Labs is at the forefront of compliant frameworks for digital identities, making it safe, secure and accessible to all Australians and Australian businesses.
- OCR Labs is approved to have our TDIF accreditation step up from Identity Proofing Level 2 to Identity Proofing Level 3
- An Identity Proofing Level refers to the extent of proof someone needs to provide to prove they are who they say they are. Identity providers can seek accreditation under TDIF for a specific Identity Proofing Level ranging from 1+ to 4. This Identity Proofing Level provides assurance to their customers that they meet the privacy and security standards for that level and the associated verification activities.
- The level of assurance required for identity proofing is important for managing the associated risk for a particular service or transaction. Services that have a higher level of identity risk will require a higher identity proofing level. Higher levels of proofing processes will often require collection of greater amounts of personal information.
- This will include having our NFC capability independently tested, plus the additional checks to ensure the individual being verified is alive and well in society, i.e. death check.
- This will mean that we are the same level identity proofing level as myGovlD and the first and only private entity to be accredited at IP3. IP3 is the highest accreditation available to OCR Labs as IP4 requires providers to have a shopfront to conduct in-person physical interviews.
- Once accredited, providers need to continually demonstrate they meet their TDIF obligations by undergoing annual assessments.
- We are well positioned for when NFC starts to become more prevalent in Australia as currently this is restricted to only a small subset of passports produced post 2016.
- OCR Labs have also been providing regular feedback on the TDIF enhancements as well as feedback on the Trusted Digital Identity Bill
Media contact: Anna MacIntosh / firstname.lastname@example.org / 0411 527 756
About OCR Labs and TDIF Accreditation
The TDIF sets standards, rules, and guidelines based on international best practice for Digital Identity services. Organisations and government agencies can apply for TDIF accreditation and undergo a series of strict assurance evaluations. OCR Labs is an Australian-based Identity Provider that offers digital identity services to the private sector. OCR Labs has satisfied 262 Trusted Digital Identity Framework requirements across a broad range of areas, including protective security, privacy assurance, risk management, usability, and accessibility. OCR Labs have been accredited under the Trusted Digital Identity Framework but are not currently operating within the Australian Government's Digital Identity System (the System). The only identity provider currently operating within the System is the Australian Government provider, myGovlD.
OCR Labs is focused on making user verification effortless through technology. We build intelligent tools that protect users from identity fraud while enabling a seamless user experience. We’re focused on removing the burden of identity verification for our customers so they can focus on scaling their business without the compliance & operational overheads.
OCR Labs uses advanced image analysis and deep learning technology to accelerate good users and stay ahead of fraudsters. We securely verify your users in seconds with just their ID and a smartphone - from anywhere in the world. We verify 16,000+ documents in over 230 countries and principalities - more than any other identity verification provider.
Our verification solution is used by start-ups through global enterprises including Westpac, the Australian Government, Vodafone, ZIP, BMW and ANZ. Founded in Australia in 2018, OCR Labs is headquartered in London, UK with offices in Australia, Turkey and North American operations opening soon.
OCR Labs Certifications
OCR Labs meets the most stringent privacy, data protection, security, resilience standards and global digital identity trust frameworks - including Australian TDIF accreditation as an Identity Service Provider, SOC Type 1 & 2 and ISO 27001, 27017, 27018, 27701, 29100, 22301, 30107-3 (covering both PAD level 1 and 2), 19795 and 9001. OCR Labs is ranked #1 globally for detection of real and fraudulent individuals.