Identity theft threatens the growth of e-commerce and the provision of financial and government services online. The issue requires a more comprehensive approach to protecting personal information, including consumer education, new technology tools, responsible business practices, a strong legislative framework, law enforcement engagement and expanded victim assistance. The ad hoc way in which online identities are managed today cannot withstand the increasing assaults from expert criminal attackers. A new approach to securely managing online identity is essential—namely, a system that uses an interoperable, vendor-neutral framework and gives end users more direct control over their digital identity. One key component of this system is a new technology called an “Information Card,” which enables the creation of very secure digital entities.