QUESTION PERIOD — Treasury Board
Digital Credentials
December 5, 2024
Senator Gold, this week’s Auditor General’s Report 9—Digital Validation of Identity to Access Services highlights that “Canada is missing a national approach to establish interoperable systems to validate identity online.”
Now, in plain English, this means our citizens do not have control over their privacy and security when engaging with government online. The report identified that France, Germany and Italy have implemented both legislation and single sign-in systems. Canada has neither. This lack of leadership and policy framework undermines digital governance and the privacy and security of Canadians.
Senator Gold, why has the government failed to establish the legislative and policy framework needed for citizens to be able to control the use of their identity and credentials online? What immediate actions can be taken to ensure that Canada catches up on this crucial area of digital governance?
Thank you for your question and for highlighting and underlining an important finding of the Auditor General, upon which I was briefed as well.
I’m not conversant with all the complexities that may apply in this case. This is not a rationale for the fact that, according to the Auditor General, we certainly have some ground to catch up with.
A federal country is more complicated than a unitary state — that goes without saying — but I certainly will raise this with the minister. I know that the government is seriously examining the recommendations of the Auditor General and looking at ways for Canada to make progress in this important area.
Thank you, Senator Gold. This is solely a federal responsibility that I’m looking at, just federal departments. Budget 2024 proposed $25 million over five years to take 90 separate departmental sign-ins and turn them into a single sign-in. The Auditor General identified that Shared Services Canada issued a request for proposal earlier this year without first identifying the transition costs.
How do we start to streamline this system so that we actually get to a solution that protects Canadians from cyber-risks?
There’s no question that protecting Canadians from the increasing range and sophistication of cyber-risks is a critical issue addressed in legislation — we have legislation that I hope we will pass soon — and by other measures, such as the one that you highlight.
I will certainly make inquiries to see whether things can move more quickly and efficiently in this area.
