The role of the private sector in digital technology and legal identity

May 14, 2021

metamorworks/Shutterstock

Article 6 of the Universal Declaration on Human Rights says everybody has the right to a legal identity.

Yet hundreds of millions of people live without valid proof of who they are, including up to 166 million children who do not have a birth certificate. Almost half the world’s countries don’t have universal birth and death registration.

By 2025, the United Nations Legal Identity Agenda Task Force, co-chaired by UNDESA, UNDP and UNICEF, aims to assist Member States to empower more than 300 million people to acquire a legal identity.

There are many questions about how governments will manage identity in a digital, post-pandemic world.

  • Will some UN Member States have moved to exclusive use of biometric systems such as facial recognition to identify foreign travelers?
  • Will linking health data to identity—not just for travel, via ‘digital vaccine certificates’, but also being allowed to, for example, attend concerts, sports events or even enter government buildingsbe the norm rather than the exception?
  • Will more UN Member States empower their citizens and permanent residents with greater control over their identity data, such as the ability to change identity variables such as gender on identity documents, on the basis of self-declaration only?
  • Will legal identity remain the exclusive preserve of governments to grant and manage through civil registration and ID management systems, such as population registers and national ID card schemes, or will new models of institutional governance of identity give an increased role to civil society and digital rights advocates, such as via the creation of independent identity authorities?

 

To address these issues, on May 18-19, UNDP is hosting a two-day online roundtable dialogue with experts from the private sector, to map out both broad technological developments in identity management.

What has happened so far to improve identity management?

In the last three decades more than 130 Member States have rolled out national ID schemes with increased capture of biometric data as a primary identifier.

There is increased digital ‘interoperability’, or communication, between different government databases for social security, taxation, and driver licensing, along with third-party private sector participants such as banks, to verify physical identity credentials and issue digital credentials under license or authority from the state.

There have been fewer changes, however, in the institutional governance of identity. The broad trend appears to be that traditional civil registration of births, deaths, marriages, and divorces has remained under the control of local governments, where management of national population registers or national ID schemes has been placed under the authority of either a central ministry or under a national body created specifically for that purpose.

Challenges

Centralizing national identity registers under one ministry, but maintaining decentralized civil registration, tends to result in less than universal coverage. But merging civil registration with national registers, while cheaper and more efficient, creates an opportunity for hackers and allows for easier surveillance by autocratic governments.

Digital rights advocates have raised profound questions about where the boundaries should lie between the state’s right to impose an identity—such sex as recorded at birth, or, in some countries religion—and the right of a person to choose their identify.

The COVID-19 pandemic has dramatically increased international remote working. More digital nomad visas, coupled with mass migration from the global south to the north, will result in more people with legal identities issued by a foreign state. This will lead to discussion about how foreign governments can or should access each other’s identity management systems to verify a person’s identity, and document economic activity so remote workers can be taxed.

Way forward

The UN needs to be informed about developments in the private tech sector that will affect public management of identity. The policy perspectives of the private companies supplying the technology for identity systems, and what the private sector considers to be ‘appropriate’ levels of state control over identity, are largely unknown. Ultimately, this needs to focus on ways that the private sector, as well as digital rights advocates can contribute to advancing national civil registration and identity management, with the view to solving the global identity gap in a way that protects personal data and privacy.