Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
ICAO Launches Digital Travel Pass to Replace Boarding Cards and Check-ins
ICAO has unveiled a Digital Travel Credential (DTC) system to replace traditional boarding passes and manual check-in with biometric and smartphone-based identity verification, aiming for a global rollout by 2028. The DTC enables travelers to store passport data on mobile devices and pass through checkpoints using facial recognition. Early pilots, including one in Finland, showed strong user support but highlighted infrastructure challenges. ICAO promises privacy-by-design safeguards, including rapid biometric data deletion. The initiative introduces three DTC types and may extend beyond travel into hospitality and public services. Concerns remain over interoperability, exclusion risks, and biometric surveillance.
UK One Login Digital ID System Faces Major Security Breach Allegations
The UK’s One Login digital identity system is under scrutiny following whistleblower claims of serious cybersecurity flaws and poor data protection practices. Allegations include unmanaged privileged access, critical vulnerabilities, unauthorized biometric data processing, and outsourcing to Romania without proper oversight. An internal investigation confirmed some claims, yet findings were reportedly withheld from Parliament. The system, now used by three million users across 50 services, faces criticism for inadequate governance and transparency. Despite DSIT’s insistence on compliance with UK data laws, the controversy raises concerns about centralized identity systems, especially as the government pushes for broader digital ID adoption.
Nigeria Expands Digital Passport System to US and Latin American Nations
The Nigeria Immigration Service has extended its contactless biometric passport renewal system to the U.S., Mexico, Jamaica, and Brazil, allowing Nigerians in these countries to complete renewals entirely online using the NIS Mobile app. The system captures facial scans and fingerprints via mobile devices and includes secure payment features, eliminating the need for in-person embassy visits. Already active in Canada and parts of Europe, the rollout reflects a broader digital transformation in global ID services. The app uses liveness detection and AFIS for fraud prevention and is part of NIS’s strategy to improve accessibility for Nigerians abroad.
Indonesia Mandates Biometric e-SIM Registration in National Security Push
Indonesia has launched a phased initiative to promote e-SIM adoption, mandating biometric registration tied to users’ National Identity Numbers (NIK) to improve digital security and telecom identity verification. The system uses facial recognition and liveness detection linked to the national civil registry, with support from major mobile operators like Telkomsel and XL Axiata. A new regulation enforces a three-number-per-user cap across all operators, closing previous registration loopholes. While privacy concerns remain, the government asserts compliance with national data laws. The transition supports broader goals in IoT development, smart infrastructure, and long-term digital identity resilience.
NYC Council Seeks to Tighten Oversight of NYPD Surveillance Technologies
The New York City Council has introduced three bills to strengthen oversight of NYPD surveillance technologies, including facial recognition and drones. The legislation requires public policies detailing usage, officer access, and data retention; expanded reporting under the POST Act; and a full inventory of surveillance tools with biannual updates. The bills aim to address ongoing concerns over transparency, data sharing, and bias, particularly in marginalized communities. Prompted by compliance gaps in prior audits, the measures reflect growing national efforts to regulate law enforcement surveillance amid advancing technologies and public demands for accountability.
Australia Tests Blockchain Age Verification for Social Media Access
ShareRing has joined Australia’s $6.5 million government-led trial to test age verification technologies for social media platforms ahead of a December 2025 law requiring users to be at least 16. The company is contributing its blockchain-based, self-sovereign identity platform using biometric video selfies, offering trustless, privacy-preserving verification without centralized data storage. The trial, managed by the Age Check Certification Scheme and evaluated by KJR, includes other participants like Yoti and Incode. Initial testing is underway in Darwin, with early results due mid-2025.
Inverid Joins FIDO Alliance to Advance NFC Document Authentication Standards
Inverid has joined the FIDO Alliance, bringing its NFC-based identity verification expertise to the development of DocAuth standards for secure, passwordless authentication. Known for its ReadID solution, Inverid recently earned ETSI TS 119 461 certification, aligning with eIDAS 2.0 and AML/CTF compliance requirements. The company’s technology uses NFC to verify ePassports and ID cards via cryptographic checks, offering tamper-proof, privacy-preserving identity proofing. Its participation in FIDO supports broader efforts to combat document fraud and promote interoperable digital identity systems. Inverid’s dual-mode approach also enhances accessibility by enabling optical fallback when NFC is unavailable.
LAFC Launches Facial Recognition for Stadium Entry and Payments
LAFC has partnered with Wicket to introduce BMO Stadium Express, a facial authentication system allowing fans to use their face as both a ticket and payment method. Available at dedicated entry points and select concession stands, the system is optional and aims to reduce wait times while enhancing convenience. Fans can enroll online or at the stadium, with a full awareness campaign supporting adoption. The initiative builds on Wicket’s success in NFL venues and aligns with broader trends in contactless stadium technology. Biometric data is encrypted, not stored by Wicket, and remains under team control, with privacy safeguards modeled on GDPR.
–
April 14, 2024 – by Tony Bitzionis and Alex Perala
