A Guide to Litigating Identity Systems PART THREE: DATA PROTECTION AND NATIONAL IDENTITY SYSTEMS 53. National Identity Systems naturally implicate data protection issues, given the high volume of data necessary for the systems’ functioning. Identity systems collect and store biometric and demographic data obtained at the time of enrolment in the systems,203 as well as transaction data obtained when the system is used to verify an individual’s identity.204 This wide range and high volume of data implicates issues of consent, as individuals should be aware and approve of their data’s collection, storage, and use if the system is to function lawfully.205 Despite this, identity systems often lack necessary safeguards requiring consent206 and the mandatory nature of systems ignores consent entirely.207 Additionally, identity systems have a propensity to extend in application beyond their initial conception into numerous areas of public and private life,208 spreading individuals’ data to numerous actors without their consent and consideration. Even where the 203 See Aadhaar Judgment, Justice K.S. Puttaswamy and Another v. Union of India and Others, Writ Petition (Civil) No. 494 of 2012 & connected matters ¶ 446 at 524. 204 See Aadhaar Judgment, ¶ 197 at 276 (2018). 205 See Aadhaar Judgment, ¶ 304 of dissent. 206 See Aadhaar Judgment, ¶ 304 of dissent. 207 See Opinion of Justice Batts, Julian J. Robinson v. The Attorney General of Jamaica, Claim No. 2018HCV01788, ¶ 349 (2019). 208 Opinion of Justice Sykes, Julian J. Robinson v. The Attorney General of Jamaica, Claim No. 2018HCV01788, ¶ 247(B)(56) (2019). 48

Select target paragraph3