{"id":9482,"date":"2026-08-06T14:34:29","date_gmt":"2026-08-06T12:34:29","guid":{"rendered":"https:\/\/datanamixdev.wpengine.com\/media\/?p=9482"},"modified":"2026-08-06T14:34:31","modified_gmt":"2026-08-06T12:34:31","slug":"should-every-digital-action-require-the-same-identity-check","status":"publish","type":"post","link":"https:\/\/www.datanamix.com\/media\/2026\/08\/06\/should-every-digital-action-require-the-same-identity-check\/","title":{"rendered":"Should every digital action require the same identity check?"},"content":{"rendered":"\n

Should every digital action require the same identity check? <\/strong><\/h2>\n\n\n\n

No.<\/strong> The level of identity assurance should reflect what the user is doing, the potential consequence and the other risk signals available to the organisation.<\/p>\n\n\n\n

The answer to \u201cShould every digital action require the same identity check?\u201d becomes clearer when routine activity is compared with an action that moves money or changes control of an account. Requiring the same additional check for both can create unnecessary friction in one case and insufficient assurance in the other.<\/p>\n\n\n\n

Which actions generally carry less risk?<\/h2>\n\n\n\n

The exact classification depends on the organisation, the application and the customer journey. However, actions that only display information will often carry a different consequence from actions that alter access, value or ownership.<\/p>\n\n\n\n

Examples may include viewing an account balance, reading a statement or checking the status of a request. These actions still need appropriate access controls, but they may not justify the same response as a payment or account change.<\/p>\n\n\n\n

Which actions may require greater identity assurance?<\/h2>\n\n\n\n

An organisation may choose to apply stronger controls when a user attempts to:<\/p>\n\n\n\n