Overview of Case Studies

Comparative Digital ID Systems

  • Maldives (eFaas)
  • Fiji (NDI Project)
  • Estonia (e-ID)
  • Mauritius (Smart ID & Mobile ID)
  • Singapore (Singpass)
  • Australia (Digital ID)
     

Focus: Legal, Biometrics, Privacy, Inclusion, Governance

Maldives – eFaas

  • Status: Active system, legal framework expanding
  • Biometric Use: Face (selfie) auth; fingerprints for physical verification
  • Privacy: Planned consent model + user data logs
  • Inclusion: Registrars on all islands, migrant integration
  • Governance: NCIT, DNR, NCSA, ministry oversight

Fiji – NDI Project

  • Status: Design phase, strong political support
  • Biometric Use: Likely face/fingerprint (leveraging voter DB)
  • Privacy: No DP law yet; developing in line with best practice
  • Inclusion: ~30% without ID; focus on rural outreach
  • Governance: Multi-sectoral steering committee

Estonia – e-ID

  • Status: Fully mature, globally renowned
  • Biometric Use: Fingerprints on card; PIN for auth
  • Privacy: GDPR + Data Tracker (user-visible logs)
  • Inclusion: Universal ID, proxy access, e-literacy support
  • Governance: PPA, RIA, independent data authority

Mauritius – Smart ID & Mobile ID

  • Status: Active; upgraded legal/privacy compliance
  • Biometric Use: Fingerprints on card; face scan onboarding
  • Privacy: Post-court reform; DPA in force
  • Inclusion: High coverage; app + card coexist
  • Governance: IT Ministry + independent privacy regulator

Singapore – Singpass

  • Status: ~97% population usage
  • Biometric Use: Face verification onboarding; biometrics for app login
  • Privacy: Consent-based, PDPA applies to private sector
  • Inclusion: Tokens for non-digital users, outreach programs
  • Governance: GovTech, PDPC, Smart Nation oversight

Australia – Digital ID

  • Status: Federated, voluntary, law passed in 2024
  • Biometric Use: Selfie match for setup; strict legal limits
  • Privacy: Enhanced protections, no single ID across systems
  • Inclusion: Alternative access guaranteed by law
  • Governance: ACCC (regulator), OAIC (privacy), federated providers

Summary: Lessons & Insights

  • Legal Maturity: Estonia, Australia lead
  • Privacy Protections: GDPR-aligned (Estonia, Mauritius)
  • Inclusion: Fiji, Maldives prioritize remote access
  • Biometrics: Used with safeguards, no central storage
  • Governance: Multistakeholder models gaining ground