ID Tech Digest – September 15, 2026

Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

China’s New Exit-Entry Rules Expand Identity Verification Powers

China’s State Council has enacted updated border administration regulations that give immigration authorities and visa offices express powers to demand electronic data for exit-entry verification alongside conventional travel documents. Under Article 3 of the framework, officials can examine applicants’ digital records to verify identity or travel intent, hold sponsoring organizations accountable for supporting documentation, and enforce travel bans or exit restrictions against individuals who submit fraudulent credentials. The statutory decree also introduces mandatory licensing for immigration consulting and document intermediaries—requiring newly formed entities to register within 15 days and existing providers within 90 days—while compelling state bodies to safeguard business data, state secrets, and personal information during administrative border inspections.

Jumio Expands Selfie-Based Reusable Identity Service to Asia-Pacific

Jumio has introduced its selfie.DONE reusable identity service across the Asia-Pacific region, expanding a selfie-based reusable identity verification model previously launched across Latin America and North America. The system matches a live user selfie against Jumio’s Global Identity Graph of more than 75 million records to complete follow-up onboarding checks without rescanning physical documents, falling back to a full KYC document verification flow only when risk indicators arise or match confidence drops. Early deployments have shown a 20 percent lift in onboarding completion rates—with up to 60 percent of returning users verified via selfie alone—positioning the service for regional adoption across mobile-first banking, fintech, and digital lending platforms such as Malaysia-based Nimbura.

GOV.UK One Login Expands Passkeys to More Than 23 Million Users

The UK government has widened access to phishing-resistant passkeys across GOV.UK One Login, expanding the passwordless credential to more than 23 million account holders following a successful 300,000-user trial. Account holders can now authenticate into centralized public services—such as HM Revenue and Customs tax workflows, childcare support, and State Pension management—by unlocking local device biometric scans or PINs, keeping biometric data entirely on-device and eliminating text-message security codes to save nearly £600 daily. Aligned with technical guidance from the National Cyber Security Centre, the rollout establishes an optional, phishing-resistant public-key authentication route that executes up to eight times faster than standard two-step verification while preventing credential interception on spoofed websites.

LexisNexis Identity Proofing for MyChart Enters Epic Toolbox

LexisNexis Risk Solutions has completed its integration with Epic Systems, launching Identity Proofing for MyChart through the Epic Toolbox Program to provide U.S. healthcare systems with standardized patient verification directly within the Epic Connection Hub. The modular software framework evaluates digital identity attributes, phone and email intelligence, and behavioral biometrics to support NIST Identity Assurance Level 2 compliance without requiring custom integration engineering from clinical IT departments. By embedding automated risk scoring into patient portal workflows, the platform protects sensitive medical records, billing operations, and scheduling tools against fraudulent account creation and compromised credential-recovery exploits while allowing hospitals to dial verification intensity up or down based on specific interaction risks.

Proof Launches Portable Digital Identity Credential for Banks

Identity network Proof has released a reusable, user-held verifiable digital identity credential designed to provide commercial banks and financial institutions with cryptographic customer verification across web and mobile APIs. Certified through the Kantara Initiative at NIST Identity Assurance Level 2, the system binds X.509 certificates from a WebTrust-audited certificate authority to on-device secure hardware and leverages SD-JWT standards alongside OID4VCI and OID4VP protocols to enable selective attribute disclosure. The general release arrives on the heels of updated joint Customer Identification Program guidance from FinCEN, the Federal Reserve, the FDIC, the NCUA, and the OCC, offering an interoperable digital credential architecture capable of securing wire transfers, account recovery, and autonomous AI-agent transactions via Proof’s x401 protocol.

Precise Biometrics Powers Fingerprint Authentication in Second-Generation D’CENT Wallet

South Korean blockchain security firm IOTRUST has renewed its biometric integration with Precise Biometrics, incorporating BioMatch embedded software for on-device fingerprint verification into the newly launched second-generation D’CENT biometric hardware wallet. Operating locally within the cold-storage unit, the biometric algorithm compares live scans against enrolled templates to authorize transactions across more than 10,000 tokens and 100 blockchain networks without transmitting biometric data to external networks or depending solely on manual PINs. The release extends a technical partnership established in 2018, reinforcing on-device hardware matching alongside secure-element innovations like Fingerprint Cards’ AllKey Ultra platform as institutional and retail demand for self-custody digital asset protection grows.

Google Brings Account-Level Age Assurance to Canada

Google has commenced a phased deployment of account-level age assurance across Canada, applying machine-learning algorithms to existing account signals—including YouTube consumption patterns and search behavior—to estimate whether a user is under 18. Users identified as minors will automatically receive enhanced privacy defaults and stricter content recommendation guardrails, while misclassified adult users can restore standard permissions by submitting a government identity document or completing a facial selfie verification check. The rollout coincides with federal parliamentary deliberations over Bill C-34, which proposes mandatory online access curbs for users under 16, presenting a signal-based model that avoids collecting new user data upfront while aligning with proportionate age-assurance principles advocated by Canada’s privacy commissioner.

Nine Schengen Countries Retain Flexibility to Pause EES Biometrics at Some Borders

Nine European nations—France, Germany, Italy, Belgium, the Netherlands, Greece, Malta, Portugal, and Switzerland—are maintaining targeted suspensions of Entry/Exit System biometric collection across selected checkpoints despite the formal expiration of European Union implementation flexibility on September 6. Although high-volume transit points like Frankfurt Airport, Brussels Eurostar, and Amsterdam Schiphol have operationalized facial and fingerprint capture, roughly 12 regional border crossings and the Port of Dover face severe infrastructure constraints, with some regional terminals handling 3,000 hourly arrivals across just four biometric kiosks. EU authorities have indicated they will not pursue enforcement against the nine member states during localized delays, as the broader IT network surpasses 200 million registrations and blocks over 70,000 unauthorized travelers while advance passenger apps like Travel to Europe roll out across Portugal and Sweden.

UK Allows Certified Digital Proof of Age for Alcohol Sales

Licensed retail and hospitality venues across England and Wales can now legally accept certified digital proof of age for alcohol purchases following updated statutory guidance under Section 182 of the Licensing Act 2003 that took effect on September 15. The voluntary regulations permit pubs, bars, restaurants, and entertainment venues to verify patrons via smartphones using services certified under the UK Digital Identity and Attributes Trust Framework—such as deployments built by Yoti and Licensing Connect—allowing staff to scan QR codes or receive NFC signals confirming an over-18 attribute without disclosing full names or residential addresses. The regulatory shift formalizes an alternative to physical identity documents supported by 72 percent of public consultation respondents, anchoring digital age assurance within an established commercial verification market valued at more than £2 billion annually.

–

By the ID Tech Editorial Team