Overview of Case Studies

Comparative Digital ID Systems

• Maldives (eFaas)
• Fiji (NDI Project)
• Estonia (e-ID)
• Mauritius (Smart ID & Mobile ID)
• Singapore (Singpass)
• Australia (Digital ID)
   

Focus: Legal, Biometrics, Privacy, Inclusion, Governance

Maldives – eFaas

• Status: Active system, legal framework expanding
• Biometric Use: Face (selfie) auth; fingerprints for physical verification
• Privacy: Planned consent model + user data logs
• Inclusion: Registrars on all islands, migrant integration
• Governance: NCIT, DNR, NCSA, ministry oversight

Fiji – NDI Project

• Status: Design phase, strong political support
• Biometric Use: Likely face/fingerprint (leveraging voter DB)
• Privacy: No DP law yet; developing in line with best practice
• Inclusion: ~30% without ID; focus on rural outreach
• Governance: Multi-sectoral steering committee

Estonia – e-ID

• Status: Fully mature, globally renowned
• Biometric Use: Fingerprints on card; PIN for auth
• Privacy: GDPR + Data Tracker (user-visible logs)
• Inclusion: Universal ID, proxy access, e-literacy support
• Governance: PPA, RIA, independent data authority

Mauritius – Smart ID & Mobile ID

• Status: Active; upgraded legal/privacy compliance
• Biometric Use: Fingerprints on card; face scan onboarding
• Privacy: Post-court reform; DPA in force
• Inclusion: High coverage; app + card coexist
• Governance: IT Ministry + independent privacy regulator

Singapore – Singpass

• Status: ~97% population usage
• Biometric Use: Face verification onboarding; biometrics for app login
• Privacy: Consent-based, PDPA applies to private sector
• Inclusion: Tokens for non-digital users, outreach programs
• Governance: GovTech, PDPC, Smart Nation oversight

Australia – Digital ID

• Status: Federated, voluntary, law passed in 2024
• Biometric Use: Selfie match for setup; strict legal limits
• Privacy: Enhanced protections, no single ID across systems
• Inclusion: Alternative access guaranteed by law
• Governance: ACCC (regulator), OAIC (privacy), federated providers

Summary: Lessons & Insights

• Legal Maturity: Estonia, Australia lead
• Privacy Protections: GDPR-aligned (Estonia, Mauritius)
• Inclusion: Fiji, Maldives prioritize remote access
• Biometrics: Used with safeguards, no central storage
• Governance: Multistakeholder models gaining ground