During the tabling of the 2024 budget in October, Prime Minister Anwar Ibrahim announced that the government would expedite the development of digital IDs, in part to accelerate digital transformation in the public sector.
But what exactly is a digital ID and how does it differ from conventional IDs? According to SL Rajesh, a senior fellow at the International Association for Counterterrorism and Security Professionals, a digital ID stores personal details such as your name and address, but unlike traditional IDs, it is housed digitally in computers or smartphones. A digital ID is like a virtual ID card you use online. It shows who you are on the internet, just like your ID card shows who you are in the real world, Rajesh explained.
Amirudin Abdul Wahab, CEO of Cybersecurity Malaysia, further elaborated on the differences, stating that digital IDs rely on digital certificates instead of physical cards. Digital IDs only need a digital certificate that links a public key and an identity via a digital signature that can be widely used for various reasons instead of a physical document, he said. The primary purpose of a digital ID is to provide a secure and quick way to prove a person’s identity, even if they cannot provide paper documents to support their claim.
Looking at successful examples of digital ID implementation, Amirudin pointed to countries like Singapore, Indonesia, India, and Estonia. Indonesia, for instance, boasts a 95% possession rate of e-KTP (Kartu Tanda Penduduk Elektronik) cards, while India has achieved a remarkable 96% registration rate for its biometric ID system. Amirudin emphasized that tailored approaches are necessary based on a country’s unique challenges and needs.
When it comes to safeguarding digital identities, Rajesh and Amirudin both stressed the importance of robust security measures. Implementing biometric authentication and multi-factor authentication can significantly enhance security. These measures include using fingerprints, facial recognition, passwords, and SMS codes to prevent unauthorized access and data breaches.
Privacy concerns are also crucial when dealing with digital IDs, as they are vulnerable to cyberattacks. Amirudin advised the public to be vigilant, recommending strong passwords and cautious information sharing. He emphasized the need for individuals to share their digital IDs only with trusted organizations, carefully consider the information they share online, use strong passwords and security settings, and review the privacy policies of companies and organizations that issue digital IDs.
Rajesh further highlighted the need for user consent management in digital ID systems, ensuring that individuals have control over their own data. Governments should be transparent about data usage, allowing users to opt in or out of data sharing and to withdraw consent if desired, he added.
In conclusion, the development of digital IDs is part of the government’s efforts to accelerate digital transformation in the public sector. Digital IDs store personal details digitally and rely on digital certificates for authentication. Successful examples of digital ID implementation can be found in countries like Singapore, Indonesia, India, and Estonia. To protect digital identities, strong security measures including biometric authentication and multi-factor authentication are crucial. Privacy concerns must also be addressed by being vigilant, using strong passwords, and practicing cautious information sharing. User consent management is essential to ensure individuals have control over their own data.
