Internet sites must act to protect consumer IDs

Internet sites must act to protect consumer IDs


Online banks and ecommerce sites should increase security, says research

Online banks and ecommerce sites should do more to safeguard their customer's personal details from identity theft, according to a report.

Some 91 per cent of people feel that internet firms should do more to protect personal information – such as bank account details and email addresses – from hackers and other internet criminals.

Fear of identity theft has also led to 72 per cent of the 2,000 UK adults questioned to change their behaviour online, says the survey by market research firm YouGov.

'Retail figures show us that people are doing business online in ever increasing numbers but the concerns by the survey suggests that they are being more discerning about who they do that business with,' said Simon Perry, EMEA vice president of security strategy at CA, the company which commissioned the research.

Eighty-six per cent of individuals say that their 'trust' in how organisations protected their data impacts on whether they shop or bank online with that company.

According to the survey online banks are the most trusted organisations on the internet, despite an increase in criminals using phishing emails and keystroke logging software to try and steal their customer's passwords and log-in details.

Some 70 per cent of people trust banks to protect their identity online, while only 23 per cent have faith in the government. Retailers and internet service providers rank the worst, with only 21 per cent and 11 per cent of people, respectively, having trust in their security measures.

The CA survey also shows that UK internet users have mixed views about the introduction of federated identity projects, planned by retailers, financial services firms and the government.

Some 46 per cent of internet users are against the idea of organisations joining together to offer a federated log-in and authentication system, in part due to concerns about companies sharing their personal data.

'The message to organisation that might be starting large technology projects to launch federated services next year is that they simultaneously need to consider how to establish trust,' said Perry.

'Banks and credit card companies appear to be in a good position here and that may be because we are used to conducting sensitive transactions with them and because many of them are already tackling concerns about identity theft.'