Workshop report for DISIPRAC: Digital identity security information practices of citizens

I am pleased to share with you the final report from the DISIPRAC workshop held in Edinburgh on 27 February 2020. The workshop was held at Edinburgh Napier University as part of a research project called “DISIPRAC: Workshop report for DISIPRAC: Digital identity security information practices of citizens”. This work was undertaken by myself and my Centre for Social Informatics colleague, Peter Cruickshank.

In the report, we provide a summary of the workshop and provide some evidence of a number of issues around the management of digital identities based on a series of scenarios. We are not making recommendations in the report, although we do hope that the content might inspire others to start thinking about solutions to some of the issues that were raised at the workshop. The report covers:

  • The service user, including issues and risks associated with helping them
  • The role of the helper or “proxy”, including associated challenges and points of conflict, and the role of guidelines and training
  • An overview of the terminology, including identity, issues with the word “proxy”, and the role that trust plays
  • Some implications for systems design

The next steps that Peter and I will take on this project includes academic dissemination in the form of conference papers and posters and the creation of a roadmap for future, related research. We want to use the findings from this to support a larger-scale project on information proxies and real-world online identity management.

We are keen to continue engaging with practitioners and community volunteers, so we would appreciate it if you could help by sharing with us your thoughts and feedback related to the contents of the report and (importantly) the next steps or related future work that you think we should consider.

Download the workshop report:

The full report (.pdf file) can be accessed from the Edinburgh Napier University Repository here or download the file here.

Also available is a template (.docx file) for the scenario worksheets. This can be accessed from the Repository here or you can download the file here.

These documents are provided with a Creative Commons Attribution-ShareAlike (CC BY-SA 4.0) license. Please share changes and examples with the original authors, Peter Cruickshank (p.cruickshank@napier.ac.uk) and Frances Ryan (frances@francesryanphd.com).

Please do not hesitate to get in touch with Peter or me if you have any questions or feedback.

Registrations now open for a workshop on the digital identity security information practices of citizens (DISIPRAC)

Registrations are now open closed for a workshop related to how information workers help people to manage their digital identities. The event (27 February 2020) is part of a project called DISIPRAC: Digital identity security information practices of citizens and is being undertaken at the Centre for Social Informatics at Edinburgh Napier University by myself and my colleague, Peter Cruickshank.

Through this work, we are investigating the security information practices associated with digital identity, in particular, the sharing of log-in details and to develop the concept of “social proxies” for managing digital identities.

This workshop (27 February 2020) is best suited for professionals, citizen support and advocacy groups, and other similar stakeholders who work with adults in the community.

Registrations are now closed. View the event page here.

In the hands-on workshop, we will work to understand the issues information workers face when supporting (potentially vulnerable) citizens to better cope with increased levels of security for government systems that are increasingly integral to their every-day lives. We will do this using a set of pre-defined scenarios over the course of the day, based around access to services provided by UK, Scottish and local governments.

When: Thursday, 27 February 2020 (9:30am registration, 4:00pm finish)
Where: Edinburgh Napier University’s Merchiston Campus
Who: Professionals, citizen support and advocacy groups, and other similar stakeholders who work with adults in the community (for example, librarians, digital literacy workers, and computer club volunteers)

Travel bursaries:
We have a small budget for travel assistance for attendees travelling from outside of Edinburgh. If you would like to be considered for a travel bursary, please let us know on your registration form.

Background information:
Over the last decade, most levels of government have been implementing a policy often called “digital by default” or “digital-first” in the name of efficiency and cost savings to prioritise online services such as Universal Credit and myaccount. At the same time, the security of online systems has been increasing, making it more challenging for everyone to actually accessing the services they need. This is bound to impact the information practices of many users. One result might be the temptation to avoid the use of some online systems altogether, but this is often not a practical option. Another could be individuals using risky behaviours with their digital identity, such as sharing passwords, with obvious implications for data protection and privacy. More information can be found here.

Please contact me if you have further questions about the event or the project as a whole.

A workshop: Helping people to manage their digital identities

I have recently started work on a new research project, titled DISIPRAC: Digital identity security information practices of citizens. The project scope is to investigate the security information practices associated with digital identity, in particular, the sharing of log-in details and to develop the concept of “social proxies” for managing digital identities.

Over the last decade, most levels of government have been implementing a policy often called “digital by default” or “digital-first” in the name of efficiency and cost savings to prioritise online services such as Universal Credit and myaccount. At the same time, the security of online systems has been increasing, making it more challenging for everyone to actually accessing the services they need. This is bound to impact the information practices of many users. One result might be the temptation to avoid the use of some online systems altogether, but this is often not a practical option.  Another could be individuals using risky behaviours with their digital identity, such as sharing passwords, with obvious implications for data protection and privacy.

Some system designers and system owners/managers are aware of the potential impact of this change and are starting to accommodate some users through “assisted digital” services, “alternative journeys” and models of guardianship or delegated identity. However, it is unclear if these capture the range of informal support that happens around social proxy practices and behaviours.

This is where DISIPRAC comes in. This work will be undertaken with Peter Cruickshank, my colleague in the Centre for Social Informatics, and has been funded by a research development grant at Edinburgh Napier University. Peter is the PI on the project (and my former PhD supervisor). He brings more than 10 years’ experience in researching how citizens adopt and learn how to use internet technologies for participation in democratic processes and to engage with government services online. This is complemented by my own research in information behaviour and practices related to online information sharing and use, including my PhD work and my involvement in another Napier project, Social media by proxy: Strategies for managing the online profiles of adults with dementia, and my work at the University of Dundee, TAPESTRY: Trust, Authentication and Privacy over a DeCentralised Social Registry.

At this time, we are conducting a literature review and beginning to plan for a workshop in February that will be used as our primary source of research data. The workshop will be for professionals, citizen support and advocacy groups, and other similar stakeholders. Its aim will be to understand the issues they face when supporting (potentially vulnerable) citizens to better cope with increased levels of security for government systems that are increasingly integral to their every-day lives. We will do this by working through a set of pre-defined scenarios over the course of the day, based around access to services provided by UK, Scottish and local governments.

How can you help? Send us your (anonymised) stories now!
We are compiling a selection of stories and examples for how people support others in relation to their online identities. If you have a story to share, please send them my way. All stories will be anonymised.

Ultimately, this project will address the gaps in current research related to users’ real-world information practices around their digital identity, particularly by citizens and customers in a non-discretionary context.

We are very excited to have a chance to find out more about this highly topical area. We will learn more about the relationship between identity (who we are) and digital identity (how IT systems recognise us), and we recognise that information practitioners in libraries and voluntary organisations are at the front line of the change in public services. This project is a great opportunity to make contacts and hear stories – and hopefully provide the basis for a larger future project.

Stay tuned for more information about the workshop, including how you can get involved. And, as always, please contact me if you have any questions!

[Note: Image by Michael Morrow, sourced on Flickr and used under Creative Commons License.]