Why building “good” identification systems is essential to mitigating risks Despite the opportunities that come with improving identification, identification systems that are poorly implemented or inappropriately used can create a number of risks; these risks disproportionately affect already disadvantaged groups and can be amplified by digital technology. Key risks include those related to exclusion or discrimination, data protection and privacy, and poorly designed and implemented identification systems that waste resources while offering few benefits. Vulnerable and marginalized groups are often the least likely to have proof of their identity, but also the most in need of the protection and services linked to identification.10 People who are unable to obtain or easily use identification are therefore at greater risk of being left behind when strict identification requirements must be met to access services. Without proactive mitigation measures, new or upgraded identification systems may reinforce or perpetuate existing inequalities, discriminatory practices, and structural biases. Like other systems that process personal data, identification systems may also undermine individual data protection and privacy rights in the absence of appropriate laws and regulations, oversight, and technical controls and safeguards. Data breaches, unauthorized use or surveillance, identity fraud, and function creep can put people—especially vulnerable groups—at serious risk of harm. Furthermore, identification systems are often built with a “topdown” approach and little transparency. Together with poor procurement practices and design choices that inflate costs and lead to vendor or technology lock-in, this can result in systems that are operationally or financially unsustainable and that do not serve people’s needs or development goals. While these risks are present in any identification system, they may be amplified by digitization. With digital technologies, the potential scale and harm of the mismanagement or misuse of personal data are much greater than with paper-based systems. Similarly, the adoption of technologies that depend on internet connectivity and expensive devices has the potential to widen the digital divide and create new obstacles for already marginalized groups to reliably obtain or use identification. The speed of innovation can also create incentives to focus on obtaining the latest technology rather than building systems that are fit for current purposes and flexible for future needs. Furthermore, even if identification systems are successfully digitized, they are unlikely to reach their potential without full digitalization—transforming and rethinking processes for the digital medium—and complementary investments in internet connectivity, online services, payment platforms, and other digital systems. 10 The particular groups most at risk of being excluded by identification systems vary by context, but often include people living in poverty, women and children, migrant populations, refugees and asylum seekers, remote and rural residents, ethnic, linguistic, or religious minorities, sexual and gender minorities, persons with disabilities, the internally displaced, stateless persons, conflict-affected persons, informal sector workers, and other marginalized or minority groups. See, for example, World Bank. 2019. Global ID Coverage, Barriers, and Use by the Numbers: An In-Depth Look at the 2017 ID4D-Findex Survey, Washington, DC: World Bank Group. Principles on Identification for Sustainable Development 7

Select target paragraph3