Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
Innovatrics Earns High-Level Injection Attack Detection Certification Under CEN/TS 18099
Biometric software developer Innovatrics announced that its Enterprise Identity Verification platform has achieved high-level injection attack detection certification under CEN/TS 18099, confirming top-tier resistance against advanced digital spoofing. Evaluated by CLR Labs against sophisticated manipulation methods designed to bypass device camera hardware via virtual feeds and tampered applications, the system registered a low bona fide presentation classification error rate of 1.3 percent while effectively blocking unauthorized video injection streams. The certification aligns directly with ETSI TS 119 461 requirements for remote identity proofing at the Extended level, reinforcing trust service providers and banking clients against deepfake vectors that evade conventional liveness filters.
Deel Launches Deel Security to Check Worker Identities From Application Through Employment
Global payroll and HR infrastructure provider Deel has introduced Deel Security, a comprehensive workforce identity platform designed to check worker identities from application through employment across more than 150 countries. Integrating Clarity AI security technology acquired in July, the platform evaluates behavioral risk signals, digital footprints, and resume artifacts to intercept deepfakes and proxy candidates during remote interviews, while deploying continuous liveness-verified document checks at high-risk operational junctures such as password resets and device provisioning. The system consolidates enterprise security alerts within standard applicant tracking systems and HR platforms to combat sophisticated state-sponsored remote IT worker syndicates.
WA Police Face Recognition Trial Ends After 1.38 Million Scans and 122 Arrests
The Western Australia Police Force has concluded a five-month live facial recognition field deployment that scanned 1,380,882 faces and resulted in 122 arrests across 100 operational deployments in 43 regional and metropolitan locations. Operating vehicle-mounted cameras that cross-referenced real-time crowds against static police watchlist databases, the pilot generated nine incorrect alerts—representing an operational error rate of 0.00065 percent—while facilitating welfare checks and registered sex offender engagements. While police commissioner Col Blanch defended the trial’s responsible technological oversight, civil liberties organizations such as the Human Rights Law Centre and Civil Liberties Australia criticized the deployment model and demanded independent judicial validation of its accuracy.
Merseyside Police Assessment Flags About 300,000 People With Custody Images Overdue for Deletion
An internal Merseyside Police data protection impact assessment has revealed that the force may hold custody images of approximately 300,000 individuals overdue for deletion, warning of severe compliance risks regarding planned officer-initiated facial recognition tools. The confidential review highlights that querying Niche police record repositories could lead officers to run biometric searches against unlawfully retained mugshots, compounding broader systemic retention failures across England and Wales forces that persist despite High Court rulings restricting the storage of uncharged or acquitted citizens’ data. Civil liberties campaigners from Big Brother Watch condemned the retention practices, contrasting English enforcement shortcomings with Scottish data hygiene protocols that automatically purge custody images unconnected to active prosecutions.
Utah Starts Enforcing Adult-Site Age Verification Law Despite Partial Court Block
The Utah Department of Commerce announced that the state will begin enforcing adult-site age verification mandates under SB73, proceeding with regulatory oversight despite an ongoing legal challenge from Pornhub parent company Aylo. While a preliminary injunction temporarily blocked statutory provisions holding platforms accountable for virtual private network circumvention, the Division of Consumer Protection confirmed that specialized computing infrastructure enables it to investigate commercial compliance, levy administrative fines up to $2,500 per violation, and enforce a two percent excise tax dedicated to youth mental health initiatives. State officials emphasized that the compliance mechanism verifies user age brackets rather than storing personal identities, mandating the immediate destruction of verification data.
Facephi Cuts 2026 Revenue Forecast to €32.5 Million as Contracts Shift to Usage-Based Billing
Spanish identity verification provider Facephi has adjusted its full-year financial guidance, lowering its 2026 revenue forecast to €32.5 million from €46.2 million due to an accelerating enterprise migration toward consumption-based software-as-a-service billing. The strategic shift toward usage-driven contracts—which now comprise over 90 percent of operations—spreads customer billings more gradually over time compared to legacy multi-year prepaid license agreements, resulting in a first-half net loss of €6.1 million despite a 16.4 percent increase in total contract value. Bolstered by commercial paper issuances on Spain’s MARF market, Facephi management projects a return to double-digit growth by 2027, propelled by behavioral biometrics and the newly launched Facephi Intelligence Platform.
Moldova Pulls EVO Digital ID From Polling Stations After Government Cyberattack
Moldova’s Central Electoral Commission suspended the planned deployment of EVO app digital identity verification at polling stations during the November 1 municipal elections and local referendum, mandating physical identity documentation instead. The emergency precaution followed a sophisticated October cyberattack that compromised state infrastructure and exposed personal records linked to approximately 750,000 state identification numbers, forcing the Electronic Governance Agency to temporarily disconnect 82 public digital services. While criminal investigations continue into potential foreign state-sponsored data exfiltration, electoral authorities emphasized that physical ballots remain secure while digital authentication channels undergo rigorous forensic security audits.
–
By the ID Tech Editorial Team