ID Tech Digest – January 6, 2025

Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

Portugal Cancels €2.15M Biometric Software Tender Without Selecting Winner

The Portuguese government’s Agência para a Modernização Administrativa (AMA) has closed a €2.15 million public tender for biometric software without selecting a winning bid. The tender, intended to enhance Portugal’s digital identity systems for 2024-2026, was partially funded by the European Union under the European Digital Identity Wallet initiative. Despite receiving three bids, including one from a consortium of Biometrid S.A. and NOS-Comunicações S.A., none met the technical and functional criteria established by AMA. The outcome could delay Portugal’s efforts to modernize its digital identity infrastructure in line with EU standards.

Old Dominion Freight Line Settles Illinois Biometric Privacy Lawsuit Over Fingerprint Scanning

Old Dominion Freight Line has reached a settlement in a lawsuit alleging violations of the Illinois Biometric Information Privacy Act (BIPA). The case involved the company’s use of fingerprint-scanning time clocks without obtaining written consent or providing required disclosures on data storage and retention. These practices violated BIPA’s strict requirements for biometric data handling. The settlement terms remain undisclosed, with a preliminary approval motion expected to outline conditions and compensation. This case reflects ongoing enforcement of BIPA in industries using biometric timekeeping systems, with other companies like BNSF Railway and Union Pacific Railroad also facing legal challenges. Recent amendments to BIPA have clarified recovery limits, but non-compliance continues to carry significant financial risks for businesses.

Guyana Electoral Commission Urged to Implement Biometric Voter Authentication Before Elections

The Guyana Elections Commission (GECOM) is under pressure to adopt fingerprint biometric technology for voter registration and authentication ahead of upcoming elections. The opposition People’s National Congress Reform (PNC Reform) advocates for immediate action, citing a feasibility study estimating a $20 million cost for biometric equipment. The study highlights biometrics as a safeguard against voter impersonation, multiple voting, and electoral manipulation. Opposition Leader Aubrey Norton pointed to Ghana’s rapid deployment of biometrics for 17 million voters as proof of feasibility but acknowledged challenges, such as stolen verification devices. With a population of 750,000, Norton argues Guyana can implement the system with sufficient resources and GECOM’s independence.

India Post Launches Aadhaar-Based Digital KYC for Savings Accounts

India Post has introduced Aadhaar-based authentication for Post Office Savings Accounts (POSA), enabling a paperless eKYC process effective January 6, 2025. This system leverages Aadhaar authentication at Departmental Post Office counters to facilitate single-type account openings, such as Basic Savings Accounts, marking a step forward in India’s digital financial inclusion efforts. The process accesses customer data from UIDAI’s Central Identities Data Repository (CIDR) to create Customer Information Files (CIF) with verified personal details. Transactions up to ₹5,000 can be completed with Aadhaar authentication alone, while larger transactions require traditional documentation. Aadhaar numbers are masked on documents to comply with privacy guidelines. The phased rollout begins with new customer onboarding and transitions existing customers to eKYC, with plans to expand transaction options later. Despite digital advancements, customers must still provide physical consent forms to adhere to UIDAI regulations.

Dark Web Operation Discovered Farming Biometric Data to Bypass KYC Systems

iProov researchers have uncovered a dark web operation targeting biometric data and identity documents to bypass Know Your Customer (KYC) systems, highlighting evolving identity theft tactics. This global operation collects biometric data alongside traditional identity documents, emphasizing cybercriminals’ adaptation to security measures like biometric eKYC solutions. The findings call for enhanced security protocols, including multi-layered verification and biometric authentication, aligning with industry trends such as Microsoft Entra ID’s biometric integration.

Maxis Launches Mobile Identity Authentication Solution for Secure Verification in Malaysia

Maxis, Malaysia’s leading telecom provider, has launched a Mobile Identity solution offering secure authentication via telco verification APIs. The solution authenticates mobile numbers in real time, replacing traditional SMS-based one-time passwords to combat fraud tied to SMS verification. It operates within the GSMA Open Gateway framework, ensuring standardized API deployment across networks. Maxis’ partnership with Singtel under the Bridge Alliance API Exchange initiative extends the service regionally, supporting a unified digital identity system in Southeast Asia. The solution targets financial services and e-commerce, aligning with Malaysia’s digital transformation and cybersecurity goals.

–

January 6, 2025 – by Tony Bitzionis and Alex Perala