Maya Forstater

All good checks. But how reliable, comprehensive and up to date is matching data likely to be available on an automatic basis, esp cross border?

None of those checks require any data matching or cross border cooperation, simply checking ages, countries, companies house own records...

Perhaps. What about checking ages for EU nationals resident in another EU country? What automatic link does that? It may exist but I somehow doubt it fits EU data protection laws. Maybe a paper needed with checks and list of data sources?

I think you might overcomplicating Iain. The situation at present is *no supporting documentation at all.* just write "Name:Mickey Mouse" on the web form and that's it. [1 of 2]

We're not suggesting (yet) authentication or notarization of ID or address docs etc. Just that you need to show them *at all* I.e for CH to require as much evidence as you're generally required to provide to join a gym would be a major improvement! [2 of 2]

Sorry Mike. Not intended to overcomplicate. And v clearly some controls much better than none. I was just picking up on the idea automated checking was feasible and perhaps straightforward. These sort of things are perhaps called validations? Like DoB can't have 17xx.

Correct: there isn't any validation at the moment.

Sounds a classic case of poor process design. You design them to achieve a (business) end. You risk assess and redesign to eliminate as many risks as you can. Then build in controls to mitigate and manage the residual risks. Then audit and recheck on a regular basis.