Responsibility lies with both the service providers (to ensure security and privacy) and the consumers (to use IBV judiciously and safeguard their credentials).