Sri Lanka is entering the final phase of its Electronic National Identity Card (e-NIC) program, with French technology provider Thales scheduled to deliver the final 400,000 high-security polycarbonate cards by June. 
Biometric Identity and Legal Readiness
The e-NIC cards are designed to store biometric identifiers, including fingerprints, facial images, and iris scans, along with unique personal identification numbers. These will consolidate a variety of civil records, such as birth certificates and national ID numbers, into a single digital identity framework. According to M.S.P. Suriyapperuma, Director General of the Department for Registration of Persons, the legal authority for biometric use exists under the National Identity Card Act, but biometric functionality will not be activated until a presidential gazette notification is issued. “This activation is now imminent, with the necessary provisions soon to be formalized,” Suriyapperuma said.
Thales, the vendor responsible for the final batch of cards, has experience with similar deployments in countries such as Madagascar and the United States. The company has also delivered secure ID solutions in Arizona and contributed facial recognition technology to a range of international security applications.
Privacy Gaps and System Integration
While the program represents a leap forward in digital governance, it has drawn criticism from rights advocates concerned about the lack of comprehensive data protection laws in Sri Lanka. The Constitution does not explicitly guarantee a right to privacy, and the enabling legislation permits broad access to personal data for security and law enforcement without clear consent protocols or independent oversight. Some observers warn that these legal gaps leave citizens vulnerable to surveillance and data misuse.
The e-NIC initiative is also tied to the Sri Lanka Unique Digital Identity (SL-UDI) project, which is based on the open-source MOSIP platform and funded in part by Indian grants. This integration has sparked debate about foreign involvement and data sovereignty, prompting adjustments to ensure domestic control over the digital ID database. The e-NIC cards will also interface with other ongoing initiatives, such as the issuance of digital birth certificates in Colombo for citizens born after January 2021.
Security Measures and Future Phases
Authorities state that biometric data will be stored in hashed form, making it non-reversible and more secure against unauthorized access. Fingerprint and facial data are being prioritized in the initial phase, with iris biometrics to be added later, pending further legal amendments. Significant infrastructure investments have already been made, including biometric enrollment kits, secure data centers, and connectivity solutions to support the rollout nationwide.
Government agencies have conducted public education campaigns to inform citizens and stakeholders about the e-NIC program and address implementation concerns. These outreach efforts are aimed at ensuring a smoother transition and mitigating potential operational delays. The full deployment of the system is expected to streamline access to government services, reduce identity fraud, and establish a standardized national ID system in line with global best practices.
Sources: Adaderana, Lankanewsweb
—
May 27, 2025 – by the ID Tech Editorial Team
