📋 Tender Overview
At the Ministry of Digital Transformation and the Bank of Slovenia, we detected the inadequate practice of one of the credit institutions in concluding a contract with a remote provider. Namely, the credit institution expects users to share their application information for the mobile identity of SMSPASS (username, password and one -time password).At the Ministry of Digital Transformation, we point out that such behavior is illegal and extremely risky for users. Namely, the service provider allows the electronic identity of the individual in relation to third parties, thus accessing different confidential information about the individual, for example, when concluding business on behalf of an individual and the like.
At the Bank of Slovenia, we advise all users of electronic identification and emphasize that they must protect their application data from unjustified disclosure.
The SMSPASS mobile identity can be used only personally and directly through SI-PASS, since its holder has only such control and an overview of where he / she is applying and what his information is provided in doing so.
We further explain that the Electronic Identification Act imposes electronic identification assets that they must use the asset of electronic identification in person and with the care of a good master, and a fine of $ 1,000 to $ 4,000 is foreseen for different use.
