and workflows adapted to the individual
tasks. Among other things, this will be done
through consistently differential access to
data so that only relevant employees have
access to data on citizens and businesses.
Data protection will, as far as possible, be incorporated into the design and development
of public IT solutions from the very outset.
Investing in security comes at a price. However, in an ever-more digital world, data protection is an increasing necessity to ensure
that people and businesses have confidence
in digital public services.
The public sector will work to spread the use
of common public security standards. Moreover, the Danish public sector must have a
full realistic overview of the current security
situation and threat levels with regard to cyber and information security in order to react
and initiate preventive measures.
Secure digital identities
In a globalised world, goods, services and
people are increasingly crossing borders, not
least between the EU Member States. At the
same time, the current refugee crisis means
that authorities and administrations in Denmark will have to deal with a large number
of foreign citizens without a Danish or European ID number. Correct digital identities
are required for citizens and employees of
businesses to communicate securely with
the authorities and with each other.
Therefore, there is an increasing need for
certainty about the identity of individuals and
48
SECURITY AND CONFIDENCE MUST BE IN FOCUS AT ALL TIMES
businesses in a digital world. Among other
things, there is a need for a common method
and stricter process with regard to issuing
digital identities such as NemID to foreign
individuals and businesses in Denmark. This
will ensure that individuals can receive the
correct benefits, that businesses can report
correct data such as VAT returns, etc. Moreover, a better overview can prevent Danes
and foreigners from receiving benefits they
are not entitled to after moving away from
Denmark.
Similarly, there is a challenge with regard to
ensuring the right level of security in ID solutions targeted at children and young people
who are not old enough to have a NemID.
They should be able to navigate securely
online and log on to relevant digital solutions, for example in connection with school.
on. Individuals and businesses unable to use
digital self-service solutions must be given
the opportunity to surrender digital power
of attorney to another trusted party, and it
should also be possible to provide digital
consent.
The major common solutions, NemID, NemLog-in and Digital Post, will all be put up for
tender in the years to come. This will be a
good occasion to develop and rethink the
solutions in order to meet the future needs
for security, digital identities, rights management, communication, user-friendliness and
accessibility.
As of 2018, digital identity (such as NemID)
must be usable in all public sector digital
solutions in all EU Member States. For
example, a Danish student will be able to use
a NemID in connection with an application to
study abroad. Moreover, a foreign employee
in Denmark will be able to log on to a Danish
self-service solution (to apply for a tax card,
for example) with the digital identity solution
of his/her own country.
Ongoing development of
common solutions
The public sector has an important task in
making available central solutions to citizens and businesses that enable safe and
secure digital communication and interacti-
SECURITY AND CONFIDENCE MUST BE IN FOCUS AT ALL TIMES
49