230 likes | 308 Views
Changing names and identity fraud. Technology and Privacy Forum 22 September 2014. What’s in a name? That which we call a rose, by any other name would smell as sweet. William Shakespeare. Guliemus Filius Johannes Shakspere (born?) Bill (by friends?) The Bard (in infamy)
E N D
Changing names and identity fraud Technology and Privacy Forum 22 September 2014
What’s in a name? That which we call a rose, by any other name would smell as sweet.
William Shakespeare • Guliemus Filius Johannes Shakspere (born?) • Bill (by friends?) • The Bard (in infamy) • Francis Bacon or Christopher Marlow(alias of?) • Mrs Shakespeare (Anne Hathaway)
Why are changing names a problem? • When they create additional records for the same customer. Well…. No, not exactly
Why are changing names a problem? • When they are used to create false identities to commit fraud • avoid secondary tax • claim more than one benefit • hide assets • dodge police vetting checks
Quasimodo… …that name rings a bell.
What is a legal name? Any name providing it is not for the purposes of deceit.
Official names • Names recorded in authoritative registers • Birth name • Passport name (NZ or Overseas) • Citizenship name • Registered change of name
Assumed names • Alias • Also known as (AKA) • Commonly known as (CKA) • Nickname • Pseudonym • and….
Married names • Assumed unrecorded until proven official • No more maiden names please
Privacy Act • Principle 1 • If you collect it use it • Principle 3 • State why collection is mandatory • Principle 7 • Correct on request
Privacy Act cont. • Principle 8 • Accuracy vs misleading • Principle 10 • Collection for Id proofing vs correspondence
Recommended practice • Good practice guidance for the recording and use of personal names
Principle 1 Customers are entitled to be referred to in correspondence and verbally by the name of their choice. Principle 2 Organisations, where required, can establish the uniqueness of a customer, regardless of the name used.
Principle 3 Organisations, when permitted, are able to actively match customers, where a unique identifier is not shared. Principle 4 Organisations, where required, use the correct name.
What can you do? • Allow for two categories of name Official & Assumed
What else should you do? • Have some additional flags • Validated name (official name checked against source) • Preferred name (any name, one instance at a time) • Anchor name (one instance of an official name)
Principle 1 My name is Mr Potato Head – but call me Darth
Hi, I’m Darth Hi, I’m Yoda Principle 2
Principles 3 & 4 BigOrg’s Mr Potato Head ACME’s Mr Potato Head