Trust Talks & Digital Dives

DIACC

Trust Talks & Digital Dives (T2D2) features invited experts who explore tools and processes for verifying information authenticity while putting privacy, security, and control at the centre of the design. T2D2 threads Canadian perspectives through a global digital economy value lens and raises awareness of individuals and organizations on the society-changing benefits and challenges of digital trust. We connect the value of verifying information authenticity with A.I., cybersecurity, open-banking, ethical research, fight fraud, protection the vulnerable, and much more.  When it comes to digital trust - we've got you covered!  T2D2 is produced by DIACC. DIACC is Canada's largest and most diverse voice on digital trust and identity. We're a not-for-profit association of public and private sector members championing digital trust and identity capabilities with privacy and security built in by design. To learn more about DIACC, visit DIACC.CA.  Message podcast@diacc.ca to recommend a future guest or topic. If you enjoy our content, please subscribe and share our podcast with a friend. 

  1. 19 Oct

    #41 Beyond the Login: Why Policy-Based Access Control Is the Missing Layer of Digital Trust

    Digital identity often focuses on verifying who someone is at login. However, authentication does not determine what that person, service, or AI agent should be allowed to access or do next. As organizations connect more applications, APIs, and third-party services, authorization decisions must reflect real-time context, relationships, consent, purpose, and risk. In this episode of Trust Talks & Digital Dives, IDENTOS CEO Mike Cook and CTO Alec Laws discuss how policy-based access control (PBAC) closes the gap between identity verification and authorization. They explain how PBAC differs from traditional role-based models, supports a zero trust approach, and helps organizations govern human and non-human access. The conversation also examines the consequences of weak authorization in healthcare and the public sector and offers practical guidance for strengthening digital trust beyond the login. Featured Guests Mike Cook, CEO at IDENTOS As CEO of IDENTOS, Mike demonstrates the skills required to build and lead a thriving enterprise. Fueled by Mike’s unwavering dedication to delivering exceptional experiences for customers and partners, IDENTOS has earned recognition from the Globe & Mail as one of Canada's fastest-growing companies, driven by consistent expansion and strong profitability.Recognized for his strategic vision regarding the future of identity, authorization, and consent, Mike is the trusted authority in the government and healthcare sectors. He has shaped pivotal industry standards, including Kantara’s UMA 2.0, the Digital Governance Council's health access standards, and DIACC’s Pan-Canadian Trust Framework. Industry peers regularly rely on Mike’s expertise to strengthen trust through partnerships that empower individuals to gain greater control over their data.LinkedIn: https://ca.linkedin.com/in/cookm Alec Laws, CTO at IDENTOS Alec Laws is the Chief Technology Officer at IDENTOS and a principal architect of the company's core authorization platform. With a background in mobile development and solutions architecture, Alec leads a team of engineers focused on building secure, scalable identity and access solutions. He is the driving technical force behind the ongoing evolution of the product suite.LinkedIn: https://www.linkedin.com/in/aleclaws/ Moderator: Joni Brennan, President at DIACCLinkedIn: https://www.linkedin.com/in/jonibrennan/ Key Discussion Topics & Questions What is policy-based access control, and how does it differ from the role-based access control models most organizations already use?Why is PBAC more important today than it was five years ago as organizations connect more applications, APIs, third-party services, and AI agents?Where does PBAC fit within a zero trust strategy, and how does it complement existing identity tools such as SSO and MFA?What is different about authorizing an AI agent compared with authorizing a human user or a traditional service account?What is a real-world consequence of not having this authorization layer in place, particularly in healthcare or public sector environments?How does IDENTOS’ involvement with DIACC, Kantara Initiative, and the Digital Governance Council translate into practical benefits for customers?If an organization already uses SSO and MFA, what is the first practical step toward adding PBAC, and what should security and privacy leaders ask their vendors?What final advice would you give organizations preparing for more dynamic, delegated, and agent-driven access?References & Resources IDENTOS: identos.com PolicyArc, powered by IDENTOS: https://policyarc.com/ Architecture of Trust series blog posts (with Eve Maler) - Article 1 of 3: https://www.identos.com/blog/beyond-the-handshake-bridging-the-identity-execution-gap

  2. 1 Oct

    #40 Credentials That Move With You: Learner Wallets, Skills, and Labour Mobility

    What if proving your education, certifications, or professional qualifications was as easy as sharing a trusted digital credential? Whether you're entering the workforce, changing careers, moving between provinces, or immigrating to Canada, verifying your qualifications often involves paperwork, manual checks, and long delays even when you've already earned the necessary credentials. In this episode of Trust Talks & Digital Dives, we explore how learner wallets and verifiable digital credentials are transforming the way Canadians carry trusted proof of their education, skills, certifications, and professional experience. Joining us are Marie Wallace, Global Digital Identity Innovation Lead at Accenture, and Tim Toomey, Americas Lead at Accenture LearnVantage, to discuss how privacy-preserving, interoperable digital trust infrastructure can improve labour mobility, reduce fraud, and create a more connected workforce. Together, we unpack why trust frameworks, open standards, and shared digital infrastructure are just as important as the credentials themselves and how these technologies support DIACC's vision for a trusted digital economy where individuals remain in control of their information while organizations can verify credentials with confidence. Featured Guests: Marie Wallace, Global Digital Identity Innovation Lead at AccentureLinkedIn: https://www.linkedin.com/in/mariewallace/Tim Toomey, Americas Lead at Accenture LearnVantageLinkedIn: https://www.linkedin.com/in/timothy-toomey/Moderator: Joni Brennan, President at DIACCLinkedIn: https://www.linkedin.com/in/jonibrennan/Key Discussion Topics & Questions Why is it still difficult for people to prove their skills and qualifications when changing jobs, moving provinces, or coming to Canada?What do learner wallets and trusted digital credentials offer that traditional transcripts, certificates, or online profiles don't?What do employers and regulators need to confidently trust and accept digital credentials from different issuers?How can people prove what they're qualified to do while keeping control of their personal information?What infrastructure is needed to make trusted credentials work across organizations, sectors, and jurisdictions?How can approaches like UWI, open standards, and trust frameworks help make that interoperability possible at scale?What could trusted digital credentials mean in practice for skills-based hiring and labour mobility in Canada?What needs to happen next to advance Canada's digital credential ecosystem, and what do you hope Canadians will be able to do differently five years from now?References & Resources Empowering Trust and Experiences With UWI: https://www.accenture.com/en/case-studies/metaverse/your-data-your-rules-new-era-trust-connectivityLearnVantage: Learning Services & Solutions: https://www.accenture.com/en/services/learning

  3. 26 Aug

    #39 Facial Age Estimation: An Inclusive Way to Assess Age

    Age assurance is becoming an essential component of creating safer digital experiences—but misconceptions about facial age estimation continue to shape public perception. Many people mistakenly associate it with facial recognition, raising concerns about privacy, surveillance, and data collection. In this episode of Trust Talks & Digital Dives, we sit down with Yoti’s Julie Dawson, Chief Regulatory & Policy Officer, and Jason Martyres, Product Engineer, to separate fact from fiction surrounding facial age estimation. Together, they explain how the technology works, why it does not identify individuals or store personal data, and how it enables organizations to verify age while protecting user privacy. From accuracy and fairness to regulation and the future of reusable age assurance, this conversation explores how facial age estimation is helping organizations build trusted, privacy-preserving digital experiences. Featured Guests Julie Dawson, Chief Regulatory & Policy Officer at YotiLinkedIn: https://www.linkedin.com/in/juliedawson/Jason Martyres, Product Engineer at YotiLinkedIn: https://www.linkedin.com/in/jasonmartyres/Moderator Joni Brennan, President at DIACCLinkedIn: https://www.linkedin.com/in/jonibrennan/Key Discussion Topics & Questions What is facial age estimation, and how does it differ from facial recognition?Why is facial age estimation often misunderstood, and what are some of the biggest myths surrounding the technology?How is facial age estimation built, and how does it protect user privacy without storing personal information or relying on a central database?How accurate is facial age estimation, and what do independent benchmarks, such as those conducted by NIST, tell us about its performance?How has Yoti worked to ensure facial age estimation is inclusive, fair, and trusted by consumers?How have regulators in jurisdictions such as the UK, Germany, and Australia evaluated facial age estimation?What are age buffers, and how can organizations determine the right approach for their age assurance needs?How could reusable age assurance through digital wallets, tokens, and passkeys shape the future of digital identity?References & Resources Practical Guide to Implementing Age Assurance Effectively: https://www.yoti.com/blog/practical-guide-implementing-age-assurance-effectively/Yoti MyFace Liveness white paper: https://www.yoti.com/blog/yoti-myface-liveness-white-paper/Facial Age Estimation white paper: https://www.yoti.com/blog/yoti-age-estimation-white-paper/Discussion Paper: Where in the Tech Stack Should Age Assurance Sit and How Should It Be Done?: https://www.yoti.com/blog/discussion-paper-where-in-the-tech-stack-should-age-assurance-sit-and-how-should-it-be-done/

  4. 18 Aug

    #38 Digital Travel, Secure Identity, and Cross-Border Trust: Lessons from Veridos and G+D

    In this episode of Trust Talks & Digital Dives, we explore how European innovation in digital identity and secure credentials is shaping the future of trusted digital travel and public–private collaboration. This discussion features Franziska Muschik, Senior Product Manager Innovations + Business Development at Veridos, and Andrew Johnston, Business Development Executive at Giesecke+Devrient (G+D). Drawing on the deep expertise of Veridos and G+D in secure government identity, digital travel credentials, authentication technologies, and wallet ecosystems, this conversation examines how physical and digital credentials are converging to enable secure, seamless, and trusted cross-border experiences. Together, we unpack key developments in the European Digital Identity (EUDI) framework, insights from large-scale pilots such as Aptitude and WeBuild, and what these advancements mean for Canada. We discuss interoperability opportunities between Europe and Canada, the evolution of digital travel credentials, and how secure identity solutions are strengthening trust across government and private sector ecosystems. Guests: Franziska Muschik, Senior Product Manager Innovations + Business Development at VeridosAndrew Johnston, Business Development Executive at Giesecke+DevrientModerator: Joni Brennan, President at DIACC Key Discussion Topics & Questions What key developments in European digital trust and identity should Canadians understand?EUDI and Aptitude and WeBuild PilotsYour areas of focusWhere do you see the most critical opportunities for interoperability with Canada?How are Veridos and G+D advancing secure, trusted identity across private sector and government ecosystems?What lessons from European pilots would benefit Canadian policymakers and implementers?Additional Questions How are digital travel credentials evolving, and what relevance do they have for Canada?What insights have emerged from G+D and Veridos’ participation in EU digital identity pilots?How do secure credentials (physical + digital) intersect with emerging wallet ecosystems?What opportunities exist for cooperation between Canada and Europe on border modernization?References & Resources G+D Secure Customer Authentication Solutions: https://www.gi-de.com/en/financial-platforms/trusted-software/authenticationNetcetera mySSI: https://www.netcetera.com/netcetera-identity/mySSI.htmlVeridos Mobile ID: https://www.veridos.com/en/solutions/mobile-id/Get to Know Franziska Muschik: https://www.linkedin.com/in/franziska-muschik-8685181a9 Andrew Johnston: https://www.linkedin.com/in/atjohnston/ Joni Brennan: https://www.linkedin.com/in/jonibrennan/

  5. 17 Jun

    #37 From KYC to KYA: The New Frontier of Agentic Identity, Payments, and Travel

    The rise of Agentic AI is shifting the economy from human-initiated to agent-initiated transactions. As AI agents begin booking travel, authorizing payments, and acting on our behalf, a new trust challenge emerges: How do we verify an agent’s authority, accountability, and legitimacy? In this episode of Trust Talks & Digital Dives, we explore the Agent Payment Protocol (AP2) and the emergence of Know Your Agent (KYA). We’ll dive into how Verifiable Credentials (VCs) act as the tamper-proof ‘connective tissue’ for digital contracts, ensuring non-repudiable accountability. By bridging these protocols with the travel industry’s fragmented regulatory landscape, we are building a ‘Minimum Viable Future’—where identity, consent, eligibility, and payment flow in a single, seamless motion. Guests: José Israel Castro, Identity Solutions Senior Manager, North America & Central America at FacephiMike Luparelli Mathieu, Product Innovation Director at FacephiModerator: Joni Brennan, President at DIACC Key Discussion Topics & Questions We’ve spent decades perfecting 'Know Your Customer' (KYC). Why are you arguing that in the next three years, 'Know Your Agent' (KYA) will actually be the more critical security framework for the travel and payment industries?Travel is notoriously fragmented—between airlines, hotels, and border control, the 'last mile' of a seamless journey always seems out of reach. How do Verifiable Credentials (VCs) solve the consent problem without requiring a single, global database?If an AI agent books a non-refundable hotel room by mistake, who is on the hook? How do cryptographically signed digital contracts ensure that agentic transactions are actually non-repudiable?You’ve coined the term 'Minimum Viable Future.' What does a travel experience actually look like when identity, eligibility, and payment move together in 'one motion'?Are there any last remarks or recommendations you would like to share with the audience?References & Resources Facephi: https://facephi.com/en/Facephi & IATA Partnership: https://facephi.com/en/news/we-partnered-with-iata-to-drive-100-digital-air-travel/Get to Know José Israel Castro: https://www.linkedin.com/in/jose-israel-castro-m-10330952/ Mike Luparelli Mathieu: https://www.linkedin.com/in/msluparellimathieu/ Joni Brennan: https://www.linkedin.com/in/jonibrennan/

  6. 27 May

    #36 Canada on the Global Stage: AML/ATF Challenges & Opportunities

    In this episode of Trust Talks & Digital Dives, we explore Canada’s evolving role in combating anti-money laundering (AML) and anti-terrorist financing (ATF) risks on the global stage. Featuring Laurie Clark, Co-founder, Principal, and Director at Canchek Corporation, the conversation examines why Canada continues to face scrutiny despite having strong regulatory frameworks, and how enforcement, coordination, and technology modernization are shaping the future of compliance. The discussion dives into the realities facing Canadian firms — from escalating regulatory expectations and reputational risks to the growing need for real-time monitoring and automation. We also explore the role of AI-driven compliance tools, the importance of transparency and auditability, and why Canada has the potential to become a global leader in compliance innovation through stronger execution and smarter technology adoption. Guest: Laurie Clark, Co-founder, Principal, and Director at Canchek Corporation Moderator: Joni Brennan, President at DIACC Key Discussion Topics & Questions Why is Canada under scrutiny when it comes to money laundering and terrorist financing?How does Canada’s trusted financial ecosystem create both strength and vulnerability?How has Canada’s AML/ATF regulatory landscape evolved over the last decade?What did recent FATF evaluations reveal about Canada’s AML performance and implementation gaps?What are the biggest compliance challenges facing Canadian companies today, especially smaller firms and fintechs?What are the real-world financial and reputational risks when AML compliance fails?How can automation and real-time monitoring technologies help firms manage compliance obligations more effectively?Are regulators becoming more open to AI-driven compliance and monitoring solutions?What does the next five years of AML/ATF regulation and enforcement in Canada look like?How can Canadian companies position themselves to lead globally in compliance innovation?References & Resources Canchek Corporation: https://www.canchek.comFINTRAC AML Guidance: https://fintrac-canafe.canada.caFATF Evaluation Reports: https://www.fatf-gafi.org Get to Know Laurie Clark, Co-founder, Principal, and Director at Canchek Corporation: https://www.linkedin.com/in/smartenupinstitute/Joni Brennan, President at DIACC: https://www.linkedin.com/in/jonibrennan/

  7. 10/09/2025 ·  Bonus

    #34 Talking Trust in Auto Finance

    In this mini-episode of Trust Talks & Digital Dives, we explore the pressures shaping today’s auto finance sector and how trusted digital identity verification can ease those challenges. With rising fraud risks and shifting consumer expectations, lenders and dealers face mounting costs and operational hurdles. Our discussion with Anne-Marie Kelly, Pulkit Arora, and Leigh Day looks at how digital identity tools help reduce fraud, streamline financing flows, and save organizations money while protecting customers. Together, we highlight practical ways in which identity verification strengthens trust in auto finance and preview themes that will be expanded upon during the September 23 webinar. Register Here for DIACC’s Information Sharing Session: Tackling Fraud and Identity Risks in Auto Retail and Finance: https://www.universe.com/events/diacc-s-information-sharing-session-tackling-fraud-and-identity-risks-in-a-tickets-6CWJFY DIACC Automotive Retail Sector Resources: https://diacc.ca/auto-dealers/Get to Know Our Guests:  Anne-Marie Kelly, Head of Fraud at PaaysPulkit Arora, Founder & CEO at DabaduLeigh Day, Business Development at Yoti CanadaModerator: Joni Brennan, President at DIACC:Key Discussion Topics & Questions: What market pressures and fraud challenges are auto lenders and dealers facing today, and how are these impacting both businesses and customers?How can digital identity verification help reduce fraud and save money in the auto finance process, while still keeping the customer experience smooth?References PaaysDabaduYotiDIACC

About

Trust Talks & Digital Dives (T2D2) features invited experts who explore tools and processes for verifying information authenticity while putting privacy, security, and control at the centre of the design. T2D2 threads Canadian perspectives through a global digital economy value lens and raises awareness of individuals and organizations on the society-changing benefits and challenges of digital trust. We connect the value of verifying information authenticity with A.I., cybersecurity, open-banking, ethical research, fight fraud, protection the vulnerable, and much more.  When it comes to digital trust - we've got you covered!  T2D2 is produced by DIACC. DIACC is Canada's largest and most diverse voice on digital trust and identity. We're a not-for-profit association of public and private sector members championing digital trust and identity capabilities with privacy and security built in by design. To learn more about DIACC, visit DIACC.CA.  Message podcast@diacc.ca to recommend a future guest or topic. If you enjoy our content, please subscribe and share our podcast with a friend.