Belgium and UK Face Fresh Delays to EU Biometric Border Checks Ahead of April Deadline

Summary: Belgium and the UK announced further postponements to EU Entry/Exit System biometric border checks ahead of the April 10, 2026 deadline, citing infrastructure readiness failures and data exchange problems between fingerprint terminals and French servers.

Belgium announced biometric registration conditions are not in place after trial operations caused extended queues

UK's Port of Dover and Eurotunnel face a second postponement due to data exchange failures with French servers

The EES collects four fingerprints and one facial image from non-EU nationals

France has enrolled only approximately one-third of non-EU travelers, below its 50 percent March target

Belgium joins the Netherlands and France in delaying biometric registration

Belgium and the UK both announced postponements to EU Entry/Exit System biometric border checks ahead of the April 10, 2026 full implementation deadline. Belgian testing revealed that technological and infrastructural conditions for biometric registration are not in place, with trial operations causing extended queues at airports. At the UK's Port of Dover and Eurotunnel, fingerprint and facial recognition terminals cannot reliably exchange data with French servers, resulting in a second postponement. The EES, which collects four fingerprints and one facial image from non-EU nationals, has seen a gradual rollout since October 2025, but France has enrolled only about one-third of non-EU travelers against a 50 percent March target. Belgium joins the Netherlands and France among member states delaying implementation.


Dewa Developing AI Agent for eIDAS 2.0 Compliance as Danish Wallet Deployment Scales to Millions

Summary: Danish startup Dewa announced development of an AI agent for eIDAS 2.0 compliance tooling, having already reached approximately 5.3 million users and generated over 160 million verifiable credentials through its digital wallet partnership with e-Boks in Denmark.

Reached approximately 5.3 million users in Denmark

Generated over 160 million verifiable credentials

Rollout completed in roughly 42 days post-integration with e-Boks

AI agent will be embeddable in developer IDEs for working directly with EU identity standards

Use cases include privacy-preserving age verification, digital driver's licenses, and insurance credentials

Danish digital identity startup Dewa announced development of an AI agent designed to help organizations achieve eIDAS 2.0 compliance by embedding standards guidance directly into developer environments. The company has reached approximately 5.3 million users in Denmark and generated over 160 million verifiable credentials through its partnership with digital communication platform e-Boks, with the rollout completing in roughly 42 days. Use cases include privacy-preserving age verification using single-use reissued credentials, digital driver's licenses, and insurance credentials. The approach embeds compliance assistance within developer tools rather than requiring separate consulting, reflecting growing momentum toward credential-based digital identity across Europe ahead of regulatory deadlines.


European Parliament Votes to Delay EU AI Act High-Risk Deadlines to December 2027

Summary: The European Parliament voted 569-45 to extend high-risk AI system compliance deadlines under the EU AI Act from August 2026 to December 2027, directly affecting biometric remote identification, law enforcement, and border management systems.

Parliament extended the high-risk AI compliance deadline by 16 months to December 2, 2027

The delay followed the European Commission's failure to publish required technical guidance by its February 2026 deadline

Affected categories include biometric remote identification, law enforcement, border management, and critical infrastructure

DEKRA became the first accredited certification body for AI biometric systems under the act shortly before the vote

Parliament also banned nudifier AI applications that create non-consensual intimate images

The European Parliament approved a 16-month extension to compliance deadlines for high-risk AI systems under the EU AI Act, pushing the target from August 2, 2026 to December 2, 2027. The vote passed with broad support at 569 in favor and 45 against. The extension was prompted by the European Commission's failure to publish required technical guidance by its own February 2026 deadline. High-risk categories directly impacted include biometric remote identification systems, law enforcement applications, and border management infrastructure. AI-generated content watermarking requirements remain on track for November 2, 2026.


Match Group Settles FTC Lawsuit Over Sharing OkCupid Photos With Facial Recognition Firm Clarifai

Summary: Match Group settled an FTC lawsuit over sharing nearly 3 million OkCupid user photos with facial recognition firm Clarifai without user consent, resulting in a permanent prohibition on data practice misrepresentation and ten years of compliance reporting.

Nearly 3 million OkCupid user photos were shared with Clarifai in September 2014

Photos were provided along with location and demographic data without formal contractual restrictions

The incident was publicly revealed by The New York Times in 2019

Settlement includes permanent prohibition on misrepresenting data practices and ten-year compliance reporting

FTC Commission vote was 2-0 in favor of the settlement

Match Group settled an FTC lawsuit over unauthorized sharing of nearly 3 million OkCupid user photos with facial recognition company Clarifai. The data sharing occurred in September 2014, with user photos provided alongside location and demographic data without formal contractual restrictions on use. The incident was first publicly reported by The New York Times in 2019. The settlement, filed March 30, 2026, imposes a permanent prohibition on misrepresenting data practices and requires ten years of compliance reporting. The case reinforces FTC enforcement against undisclosed sharing of biometric-adjacent data with third parties.


Niger President Launches AES Biometric National Identity Card

Summary: Niger launched its biometric national identity card as the second AES member state to deploy the shared system, issuing polycarbonate cards with embedded biometric chips under a 15-year public-private concession that enables passport-free travel across the Sahel alliance.

Niger is the second AES member state to deploy the shared biometric ID card after Burkina Faso

Cards are polycarbonate with embedded biometric chips, ICAO-compliant, and valid for 10 years

Mandatory for citizens aged 15 and older

Enables passport-free travel across AES states (Mali, Burkina Faso, Niger)

Delivered under a 15-year public-private concession signed in June 2025

President Abdourahamane Tiani officially launched Niger's biometric national identity card on March 30, 2026, making Niger the second Alliance of Sahel States member to deploy the shared system after Burkina Faso. The polycarbonate cards contain embedded biometric chips, are ICAO-compliant, valid for 10 years, and mandatory for citizens aged 15 and older. The card enables passport-free travel across AES states including Mali and Burkina Faso. The project was delivered under a 15-year public-private concession signed in June 2025, with a Libyan firm contracted for production and a Nigerien company holding the lead role for local production and knowledge transfer. Digital archiving is integrated into civil registration.


Zambia Seeks International System Integrator for MOSIP-Based Digital ID Rollout

Summary: Zambia's Smart Zambia Institute is seeking an international system integrator to deploy a MOSIP-based digital identity platform, targeting 80 percent coverage of approximately 20 million citizens by end of 2026, backed by over $100 million in World Bank financing.

Over $100 million in financing from the World Bank's International Development Association

Initial rollout of 2 million digital IDs, targeting 80 percent of approximately 20 million citizens by year-end 2026

Part of the $2.48 billion Inclusive Digitalization in Eastern and Southern Africa program

Government emphasizes open standards and domestic-first development to avoid vendor lock-in

Zambia's Smart Zambia Institute issued a call for an international system integrator to deploy a MOSIP-based digital identity platform integrated with the country's civil registration infrastructure. The project is backed by over $100 million from the World Bank's International Development Association as part of the $2.48 billion Inclusive Digitalization in Eastern and Southern Africa program. The government plans to issue 2 million initial digital IDs and reach 80 percent of the population by the end of 2026. Zambian developers will lead core system development while international partners provide supplementary expertise, reflecting a domestic-first model with open standards to avoid vendor lock-in.


ICAO Launches Next-Generation PKD for E-Passports and Digital Travel Credentials

Summary: ICAO deployed its upgraded Public Key Directory into production, modernizing the trust infrastructure used by 107 member states to verify electronic passports and digital travel credentials across border, airline, and remote authentication use cases.

Deployed into production on March 27, 2026

107 of 193 ICAO member states currently participate in PKD

Stores no personal data while distributing public key certificates used by countries to sign travel documents

Enables remote smartphone authentication, advance biometrics for opt-in passengers, digital visas, and electronic IDs

Private-sector demonstration phase begins after March 2026 with larger program in September 2026

The International Civil Aviation Organization deployed its upgraded Public Key Directory into production on March 27, 2026, replacing an older trust layer for verifying electronic passports and digital travel credentials. The infrastructure distributes public key certificates that countries use to sign travel documents while storing no personal data, with 107 of 193 ICAO member states currently participating. The modernized system supports use cases beyond traditional border gates, including remote smartphone authentication, advance biometrics for opt-in passengers, digital visas, and electronic IDs. A private-sector demonstration phase will follow the launch, with a larger program planned for September 2026.


RSAC Talk Demonstrated Working Exploits Against Live Facial Recognition Systems

Summary: At RSA Conference 2026, security researcher Jake Moore demonstrated three working exploits against live facial recognition systems, including opening a bank account with a synthetic face and evading a law enforcement watchlist using real-time face-swap software.

Moore used modified smart glasses to identify people in public spaces in real time by matching faces against public data

He opened a legitimate bank account through eKYC facial recognition using AI-generated imagery

He bypassed a London train station facial recognition watchlist using live face-swap software overlaying a celebrity face

The demonstrations highlight convergence of ambient face harvesting via wearables and AI-generated imagery defeating liveness detection

Security researcher Jake Moore, a global cybersecurity advisor at ESET and former UK police digital forensics specialist, presented three live demonstrations at RSA Conference 2026 that exposed vulnerabilities in deployed facial recognition systems. He used modified commercial smart glasses to identify individuals in real time, successfully opened a bank account by passing eKYC facial verification with synthetic imagery, and evaded a police watchlist at a London train station using real-time face-swap software. The findings underscore emerging threats at the intersection of wearable face harvesting and AI-generated imagery capable of defeating presentation attack detection systems.


Apple Introduces Age Verification for UK iPhone Users With iOS 26.4

Summary: Apple deployed device-level age verification across all UK iCloud accounts via iOS 26.4, requiring users to confirm adult status through credit card or government ID, making the UK one of the first European markets with platform-enforced age gating.

Verification methods include credit card submission or government-issued ID scanning

Users under 13 cannot create accounts without guardian authorization

Users aged 13-17 have automatic content filters enabled

The approach avoids biometric age estimation, sidestepping accuracy and privacy debates

Exceeds UK Online Safety Act requirements which target user-generated content platforms rather than device manufacturers

Apple deployed age verification requirements across all UK iCloud accounts through the iOS 26.4 update, requiring users to confirm they are 18 or older via credit card or government-issued ID. Children under 13 cannot create accounts without guardian authorization, and users aged 13-17 have automatic content filters applied. Users unable to complete verification face restricted access to app downloads, web browsing, and communication features. The approach deliberately avoids biometric age estimation methods such as facial analysis. This represents a voluntary measure that exceeds UK Online Safety Act requirements, which target user-generated content platforms rather than device manufacturers.


NIST Releases 10,000-Print Dataset and Open-Source Quality Software for Fingerprint Examiners

Summary: NIST released a publicly accessible dataset of 10,000 annotated fingerprints paired with open-source quality assessment software, addressing a critical bottleneck in forensic and automated fingerprint identification research.

Dataset includes 10,000 fingerprints with detailed quality annotations

Focuses on latent fingerprint analysis including partial and smudged impressions

Open-source software automates quality evaluation and sorting by quality level

Addresses a research bottleneck caused by restricted access to law enforcement fingerprint collections

The National Institute of Standards and Technology released an annotated collection of 10,000 fingerprints alongside open-source quality assessment software designed for both human examiners and automated fingerprint identification systems. The dataset focuses on latent fingerprint analysis, including partial and smudged impressions typical of crime scene evidence. The software automates quality evaluation by rapidly sorting fingerprints by quality level. The release addresses a critical research bottleneck, as most law enforcement fingerprint collections remain restricted, enabling improved accuracy in automated matching systems, better training for human examiners, and common benchmarking standards across vendors.


IDEMIA Public Security and Proof partner on privacy-preserving verifiable credentials

Summary: IDEMIA Public Security and Proof announced a partnership to combine biometric identity verification with cryptographically secured, user-controlled verifiable digital credentials.

The companies said the framework is intended to support use cases such as KYC sharing, identity-affirmed payments, and regulated digital transactions.

The announcement emphasizes selective disclosure, zero-knowledge proofs, and user revocability as core privacy controls.

The partnership links a major biometric identity vendor with a PKI-centered digital trust platform, pointing toward reusable credentials that span physical and digital channels.

The announcement reflects a broader market shift from one-time verification events toward reusable credential models that carry stronger assurance, privacy controls, and transaction portability.


Google opens Android developer verification globally ahead of device-level enforcement

Summary: Google opened Android developer verification to all developers in March 2026 and said certified Android devices in Brazil, Indonesia, Singapore, and Thailand will require verified developers for app installation starting in September 2026.

Google's help documentation says the policy applies beyond Play distribution, covering any app installed on certified Android devices in the listed enforcement markets.

The rollout makes legal-name and account verification part of app-distribution infrastructure rather than just marketplace moderation.

Because many public-sector and wallet apps ship through Android channels, the policy has downstream implications for digital identity service operators as well as commercial developers.

This is relevant to the identity-tech stack because it extends identity proofing into software distribution itself, creating a new trust checkpoint for the mobile channels through which many digital ID services reach users.


Incode says Deepsight is first to pass iBeta Level 3 PAD on both iOS and Android

Summary: Incode said its Deepsight face-liveness platform passed iBeta's ISO/IEC 30107-3 Level 3 presentation-attack test on both iOS and Android, positioning the result as a dual-platform first.

The result was certified by iBeta on February 16, 2026 under ISO/IEC 30107-3, the main independent PAD test framework used in commercial procurement.

ID Tech reported that Incode claimed a zero-percent error rate across 900 Level 3 presentation attacks spanning both mobile platforms.

The claim reflects rising market pressure for third-party validation against sophisticated spoofing and deepfake-driven attack scenarios.

Level 3 results have become an important trust signal for face-liveness vendors because enterprise and government buyers increasingly want accredited third-party proof instead of self-reported anti-spoof claims.


Sri Lanka says biometric digital ID program has entered its final stage

Summary: Sri Lanka said its SL-UDI biometric digital identity program has reached its final stage, with officials now targeting rollout completion by the end of 2026.

Officials said the system is intended to support remote identity verification and e-KYC for services such as banking, welfare, and official documentation.

The government still had to complete Master System Integrator procurement, but public statements shifted the program from planning language to a defined end-of-2026 rollout target.

State planning documents and ministry materials tie the program to Sri Lanka's wider digital-public-infrastructure and service-modernization agenda.

The program is strategically important because Sri Lanka is trying to move digital identity from a long-running policy project into an operational service layer that can be reused across both public-sector and financial workflows.


World Bank proposes verifiable-credential model for portable payment identities

Summary: The World Bank published a technical note proposing a reusable 'Payments Identity Credential' that would carry KYC-verified identity data across fast-payment ecosystems using verifiable-credential architecture.

The model would let identity attributes travel across payment providers instead of remaining siloed inside each institution's onboarding stack.

The proposed credential is designed to support account onboarding, recipient verification, and stronger fraud controls in fast-payment systems.

The World Bank positions the concept as part of a broader trust framework linking digital ID, payment rails, and interoperability governance.

The proposal is notable because it treats digital identity as shared payment infrastructure rather than a one-time KYC checkpoint, pushing verifiable credentials toward operational roles in mainstream finance.


FTC issues COPPA policy statement to encourage privacy-bounded age verification

Summary: The U.S. FTC issued a COPPA policy statement saying it will not bring enforcement actions in certain cases where general-audience and mixed-audience services use age verification solely to determine age and follow strict data-handling conditions.

The FTC said age-verification data collected under this policy must be used only to determine age, retained only as long as necessary, and then deleted promptly.

Operators must provide clear notice, apply reasonable security safeguards, and use methods or vendors likely to provide reasonably accurate age results.

The policy statement remains in effect until the FTC finalizes related COPPA rule amendments or withdraws the statement.

The statement gives age-assurance providers and online services a clearer federal compliance path, but only where age checks are tightly scoped and separated from broader profiling or reuse.


UIDAI deploys AI-powered 'Invisible Shield' for Aadhaar biometric deduplication

Summary: India's UIDAI says it has deployed an AI-enabled biometric deduplication and document-verification platform, described as an 'Invisible Shield,' to strengthen integrity checks across the Aadhaar identity system.

UIDAI said every new Aadhaar enrollment is cross-checked against the full enrolled population to detect duplicates and anomalies at population scale.

The authority framed the system as a fraud-control layer that improves deduplication and document verification without changing the resident-facing experience.

The rollout extends AI use inside one of the world's largest biometric identity systems rather than introducing a new credential or enrollment workflow.

The update matters because Aadhaar's scale makes deduplication quality a core trust issue: even small error rates or fraud gaps can propagate across banking, welfare, and authentication flows tied to the national ID system.


Aware announces third-party testing results across PAD, bias testing, DHS RIVR, and passkey readiness

Aware released external validation results across ISO/IEC 30107-3 Level 2 presentation attack detection, ISO/IEC 19795-10 bias testing, DHS Rapid Identity Verification Rally participation, and FIDO2 passkey readiness.

Key facts:
- Aware achieved ISO/IEC 30107-3 Level 2 PAD certification, covering advanced presentation attack scenarios.
- The company also demonstrated ISO/IEC 19795-10 bias testing compliance and FIDO2 passkey readiness.
- DHS RIVR participation builds on Aware's top performance in prior DHS security testing announced in June 2025.


Microsoft Teams faces Illinois class action over alleged voiceprint collection without consent

A class action filed February 5, 2026 alleges Microsoft Teams collected and stored voiceprints through its transcription and voice-to-text features without the disclosures or written consent required by Illinois' Biometric Information Privacy Act.

Key facts:
- BIPA requires written notice and consent before collecting biometric data; statutory damages range from $1,000 per negligent violation to $5,000 per intentional or reckless violation.
- The lawsuit parallels other enterprise platform cases, including scrutiny of Verizon's Voice ID feature, extending BIPA exposure into workplace collaboration tools.
- Transcription features in video conferencing are increasingly central to enterprise workflows, making voiceprint collection a growing area of regulatory attention.


MOSIP and WSO2 partner on eSignet modernization for national digital identity systems

WSO2 announced a strategic collaboration with IIIT Bangalore and MOSIP to modernize eSignet, the open-source identity authentication and authorization module that enables citizen single sign-on for government digital services via OpenID Connect protocols.

Key facts:
- eSignet supports consent-based identity data sharing and is used by countries building authentication layers for digital public infrastructure.
- WSO2 provides open-source middleware and API management platforms used by governments for identity federation across multiple countries.
- The partnership enhances deployment readiness and interoperability for national digital identity programs built on the MOSIP ecosystem.


Onondaga County advances biometric surveillance signage bill after Wegmans controversy

Onondaga County, New York advanced legislation requiring businesses to display visible notices before any area where biometric data—including facial recognition, fingerprint scanning, and voice recognition—is collected, following Wegmans' adoption of biometric disclosure signage and broader retail scrutiny in New York and Connecticut.

Key facts:
- The bill covers surveillance, access control, and customer tracking uses of biometric identifiers in commercial settings.
- Enforcement mechanisms include monetary penalties for non-compliance; the bill advanced through committee in mid-February 2026.
- Wegmans posted biometric disclosure signage at New York City locations in January 2026, prompting the county's legislative action.


Mitek enhances video verification to counter injection attacks in Spanish market

Mitek enhanced its SEPBLAC-compliant digital onboarding platform for Spain with four defense layers against injection attacks—deepfake detection, digital manipulation analysis, injection attack protection, and face gallery analysis—achieving 99.9% accuracy on known deepfake engines and over 99% detection rates for face swaps.

Key facts:
- 89% of Spanish companies reported increased fraud attempts annually, with identity fraud the leading cause of corporate fraud loss in Spain.
- The update aligns with February 2025's new European injection attack standard, CEN/TS 18099:2025.
- Mitek's approach combines AI-trained detection with traditional software checks targeting coordinated fraud attempts during onboarding.


Spain's digital DNI achieves full legal parity with physical ID card

Starting April 1, 2026, Spain's digital National Identity Document—accessed via the MiDNI mobile app using secure real-time QR codes—will carry the same legal weight as the physical ID card, requiring public and private organizations to accept it for identification purposes.

Key facts:
- The legal equivalence was established by Real Decreto 255/2025, published April 1, 2025, with a twelve-month implementation window.
- The physical DNI remains required for international travel; the digital version coexists as an extension rather than replacement.
- Spain joins a growing number of EU member states moving to grant mobile identity documents legal parity with physical credentials.


Wicket expands Major League Soccer agreement to deploy facial authentication across 2026 events

Wicket expanded its Major League Soccer agreement to deploy facial authentication as an identity layer for event operations across multiple 2026 league events, including Generation Adidas Cup, MLS NEXT Flex, and MLS NEXT Cup, as well as existing MLS club programs at LAFC, Columbus Crew, and Atlanta United.

Key facts:
- Wicket's facial authentication is designed to speed up check-in and reduce manual verification at stadium and event venues.
- The deployment extends to MLS NEXT developmental competitions and multiple league events throughout 2026.
- Earlier 2025 Wicket deployments supported MLS NEXT competitions and the All-Star Game in Austin.


Innovatrics claims top rank-1 accuracy in latest NIST ELFT latent fingerprint benchmark

Innovatrics reported top rank-1 accuracy in the latest results from NIST's Evaluation of Latent Fingerprint Technologies (ELFT), achieving a 98.6% rank-1 hit rate on FBI Dataset #1 comprising 285 operational crime-related fingerprint probes.

Key facts:
- NIST ELFT measures how accurately systems identify suspects from crime scene fingerprints against large operational databases.
- Rank-1 hit rate indicates how often the correct subject appears first in candidate lists, reducing manual review time for forensic examiners.
- Innovatrics also demonstrated strong performance on the DoD Dataset #1, the benchmark's largest dataset with 5,259 operational probes.


Pakistan's NADRA formally rolls out Nishan Pakistan for unified identity verification

NADRA formally launched Nishan Pakistan on February 10, 2026, a centralized one-window platform designed to standardize identity authentication services across public and private sector applications, consolidating fragmented verification channels into a unified digital trust infrastructure.

Key facts:
- Nishan Pakistan aims to reduce duplication across verification touchpoints and accelerate digital onboarding for regulated workflows.
- The platform builds on prior NADRA initiatives including a 2025 biometric bank deposit service and an all-in-one digital ID kit launched in March 2025.
- NADRA Chairman Lt Gen Muhammad Munir Afsar formally launched the system; specific technical integration timelines were not announced.


U.S. Customs and Border Protection signs Clearview AI deal for tactical targeting

U.S. Customs and Border Protection signed an agreement with Clearview AI for facial recognition services covering tactical targeting and strategic counter-network analysis, granting access to more than 60 billion publicly available images and extending the company's federal footprint across Department of Homeland Security agencies.

Key facts:
- The CBP deal follows an existing $9.2 million ICE contract with Clearview AI, reflecting broader DHS adoption of the company's face-search technology.
- Clearview AI's database is sourced from publicly available images scraped from the internet; the company faces ongoing litigation over its data collection practices.
- The contract covers use within CBP intelligence units for counter-network analysis, extending beyond isolated investigative checks.


iBeta liveness certifications point to market shift as Level 2 becomes the norm

An analysis of iBeta's 2025 certification activity—55 confirmation letters covering 40 companies—finds a near-even split between Level 1 and Level 2 presentation attack detection certifications, indicating that Level 2 is transitioning from a premium feature to a baseline procurement requirement, particularly in financial services and identity verification.

Key facts:
- Passive liveness approaches accounted for the majority of certifications in 2025, meaning systems that require no explicit user action.
- Identity verification providers represent over half of certified companies, reflecting certification's role as a standard procurement prerequisite.
- iBeta introduced Level 3 testing in mid-2025 targeting advanced attacks such as hyper-realistic masks, expected to shape market conversations in 2026.


UIDAI plans full Aadhaar app with family verification and privacy-first sharing

India’s UIDAI said it plans to launch a full Aadhaar mobile app with family verification and privacy-first data sharing features.

Key facts:
- The planned app is positioned as a full-featured Aadhaar app for mobile use.
- UIDAI says the app will support consent-based sharing and family verification workflows.


Malaysia endorses Zetrix proof-of-age model tied to national digital ID

Malaysia endorsed a Zetrix proof-of-age model that is linked to national digital ID verification, positioning it as an approach for age assurance.

Key facts:
- The model is designed for proof-of-age checks tied to national digital ID verification.
- Government endorsement signals official support for the approach.


Paravision and emaratech deploy face recognition corridor at Dubai airport

Paravision and emaratech deployed a face recognition corridor at Dubai International Airport to support passenger processing.

Key facts:
- The deployment is at Dubai International Airport.
- The corridor uses face recognition for identity checks in the passenger flow.


Margins ID Group wins contract for Gambia national and digital ID systems

Margins ID Group was awarded a contract to implement Gambia’s national ID and digital ID systems.

Key facts:
- The contract covers both national ID and digital ID system components.
- Margins ID Group is the awarded implementer.


Manila’s NAIA rolls out 78 biometric eGates

Manila’s Ninoy Aquino International Airport rolled out 78 biometric eGates for passenger processing.

Key facts:
- The rollout includes 78 biometric eGates.
- The system supports automated border checks at NAIA.


UK begins trials of a digital driving licence in the GOV.UK One Login app

The UK government began trials of a digital driving licence delivered through the GOV.UK One Login app.

Key facts:
- The trial runs within the GOV.UK One Login identity service.
- The digital licence is being tested as a mobile alternative to the physical card.


India mandates biometric liveness checks and geo-tracking for crypto KYC

India issued requirements for cryptocurrency KYC that include biometric liveness detection and geo-tracking during onboarding.

Key facts:
- KYC procedures must include biometric liveness checks.
- Geo-tracking is required as part of the onboarding process.


TSA launches PreCheck Touchless ID at Boston Logan Airport

The TSA launched PreCheck Touchless ID at Boston Logan Airport, allowing identity verification without handing over a physical ID.

Key facts:
- Touchless ID uses facial matching for eligible TSA PreCheck travelers.
- Boston Logan is a new deployment location for the program.


Alabama Bill Would Authorize Optional Mobile Driver's License and Digital State ID

Summary: Alabama's House Bill 110 would authorize an optional mobile driver's license and digital state ID credential tied to the existing physical license system. The proposal keeps physical IDs valid and frames the digital credential as an additional format for on-demand presentation.

HB 110 defines a digital driver's license and digital identification card as electronic credentials derived from the corresponding physical ID.

The bill makes participation voluntary and keeps physical licenses and IDs valid.

The draft includes limits on what a verifier can require from the holder's device when presenting digital ID.

If enacted, the bill would establish a legal framework for state-issued mobile ID without mandating adoption or specifying a vendor.


Cameroon Councils Begin Issuing Digital Birth Certificates in UNDP-Backed Project

Summary: Local councils in Cameroon have begun issuing digital birth certificates under a UNDP-backed project aimed at modernizing civil registration and expanding access to legal identity. The shift signals operational issuance at the municipal level rather than only policy announcements.

Implementation is being carried out through local councils responsible for registering births.

UNDP frames the project as a modernization of civil registration and vital statistics.

Digital birth certificates support access to services that require proof of identity.

Digitizing birth registration can improve coverage and reliability for downstream identity and service systems.


ShopRite Facial Recognition Use Draws Scrutiny as Connecticut Considers Retail Restrictions

Summary: CT Insider reports facial recognition signage at ShopRite stores across Connecticut as lawmakers move toward legislation that would restrict biometric collection in retail. The disclosures highlight data sharing and retention practices while the state debates new limits.

Reporters saw facial recognition notices at seven of eight ShopRite stores visited; staff confirmed use at the eighth.

Signage says facial geometry is analyzed for security and non-matched data may be retained for up to 90 days.

Connecticut legislators say they plan to introduce a bill that would prohibit biometric collection in retail settings.

Retail biometric deployments continue to attract regulatory attention as states weigh consent, notice, and retention requirements.


Somalia Estimates $125 Million to Complete National Digital ID Rollout

Summary: Somali officials estimate about $125 million is needed to complete nationwide rollout of the national digital ID program. The estimate targets full operational coverage, with funding sources not yet specified.

Officials cite the estimate as the cost to reach nationwide deployment from current progress.

The program recently launched national identity platforms including HUBIYE for identity verification and e-Aqoonsi for mobile digital IDs.

No detailed cost breakdown or funding source has been published.

The estimate underscores the funding requirements that often surface when national ID programs move from pilots to population-scale issuance.


Telefonica Tech Launches Self-Sovereign Identity Platform Based on Verifiable Credentials

Summary: Telefonica Tech launched a self-sovereign digital identity solution that stores verifiable credentials on user devices and supports selective disclosure. The company says organizations can issue, verify, and revoke credentials for use cases such as age checks and access control.

Credentials are stored locally on user devices with user-controlled sharing.

The platform supports issuance, verification, and revocation of verifiable credentials.

Telecom and enterprise use cases cited include age verification, access control, and digital certificate issuance.

The launch adds another commercial option for organizations evaluating privacy-preserving credential models.


Accenture and NTT DOCOMO GLOBAL Launch Universal Wallet Infrastructure for Digital Identity

Summary: Accenture and NTT DOCOMO GLOBAL announced Universal Wallet Infrastructure (UWI), described as an interoperability-focused infrastructure layer intended to support digital identity and digital trust use cases.

The companies frame UWI as infrastructure that can support multiple wallets rather than a single wallet product.

Accenture describes an initial early-adopter phase under letters of intent.

The announcement emphasizes cross-organization credential exchange as a goal of the infrastructure approach.

Wallet infrastructure layers can become important coordination points for interoperability, governance, and trust frameworks as multiple issuers and relying parties adopt credential-based identity models.


Accu-Time Agrees to Proposed $1.5M Settlement in Illinois BIPA Fingerprint Time Clock Case

Summary: Accu-Time Systems agreed to a proposed $1.5 million settlement in an Illinois Biometric Information Privacy Act (BIPA) class action related to fingerprint time clock use.

Settlement materials describe a $1.5 million fund with estimated individual payments ranging from about $100 to $500 depending on approved claims.

The claims deadline is March 12, 2026 and a final approval hearing is scheduled for April 1, 2026, according to the settlement site.

The case highlights compliance risk for workplace fingerprint time and attendance systems under Illinois biometric privacy law.

Fingerprint time clocks are a recurring category in BIPA litigation, where disputes often focus on written consent, retention schedules, and disclosure obligations.


Credas Reports First Property Transaction Using Its Compliance Wallet

Summary: Credas says its Compliance Wallet was used to complete a live UK property transaction, positioning the wallet as a reusable way to share verified identity and compliance information across parties.

Credas describes a “share once” model intended to reduce repeated identity and compliance checks during property transactions.

The announcement describes the first transaction as completed with DezrezLegal, according to company and trade reporting.

Public materials do not clearly specify which credential standards or trust frameworks underpin the wallet implementation.

Early digital wallet deployments in regulated sectors often demonstrate workflow value before standardization details (formats, issuers, and relying party requirements) are fully visible.


FaceTec Appoints Cameron D’Ambrosi as Head of Strategic Partnerships for North America and EU

Summary: FaceTec appointed Cameron D’Ambrosi as Head of Strategic Partnerships for North America and the European Union, describing the role as focused on expanding deployments of its 3D face verification and liveness technology.

FaceTec describes the role as spanning enterprise integrations and public-sector digital identity programs.

D’Ambrosi is identified as a co-founder of Liminal and host of the State of Identity podcast.

FaceTec positions liveness detection as a control for AI-enabled fraud and presentation or injection attacks.

Partnership and go-to-market moves in liveness technology often track shifts in fraud patterns, regulatory expectations, and the adoption of biometric verification across consumer and public-sector channels.


Jordan Enables Instant Digital ID Activation in the Sanad App

Summary: Jordan’s Ministry of Digital Economy and Entrepreneurship says a Sanad app update enables in-app digital identity activation, removing the requirement for in-person activation.

The ministry says users can activate a digital identity directly in the app rather than visiting a physical Sanad service center.

The updated app includes access to official digital documents such as national ID cards and driver’s licenses, according to public reporting.

Officials reported usage metrics including monthly users and activated digital identities following the update.

Moving digital ID activation fully remote can materially change assurance assumptions and fraud risk, depending on the proofing and account recovery controls used inside the app.


Ethiopia Issues Tender for 20 Million Pre-Personalized Secure Resident ID Cards

Summary: Ethiopia’s National ID Program published a procurement notice for supply and delivery of 20 million pre-personalized secure resident ID cards.

The notice text specifies a bid submission deadline of January 9, 2026 at 2:00 PM local time in Addis Ababa with a public opening shortly after.

The notice specifies bid security of ETB 14,000,000 (or equivalent convertible currency) via bank guarantee.

The tender references beneficial ownership disclosure requirements for bidders.

Large-scale secure card procurement can signal a transition from enrollment to issuance, with card personalization scope and supply-chain controls becoming central implementation risks.


Neurotechnology Reports Level 2 PAD Evaluation for Face Liveness Technology

Summary: Neurotechnology says its face liveness and presentation attack detection technology passed a Level 2 evaluation aligned with ISO/IEC 30107-3, conducted by BixeLab.

The company describes Level 2 testing as covering more sophisticated presentation attacks than Level 1, including variants beyond printed photos or screen replays.

Neurotechnology’s announcement does not disclose quantitative metrics or test configuration details.

ISO/IEC 30107-3 defines testing and reporting requirements for PAD but does not prescribe a universal pass/fail threshold.

Third-party PAD evaluations can be used to compare spoof-resistance claims, but without published operating points and error rates they provide limited insight into deployment tradeoffs.


UIDAI Raises Aadhaar PVC Card Fee and Discontinues Hologram

Summary: India’s UIDAI increased the Aadhaar PVC card service fee and issued guidance discontinuing the Aadhaar hologram on the optional physical card product.

UIDAI’s memo raises the Aadhaar PVC card fee from ₹50 to ₹75, inclusive of taxes and delivery charges.

UIDAI issued a circular stating Aadhaar PVC cards will be issued without the hologram feature.

UIDAI also published guidance related to preventing unauthorized use of the Aadhaar name and logo.

Updates to physical credential features and pricing can affect adoption dynamics and the balance between physical-card verification and QR or digitally mediated Aadhaar verification flows.


Kantara Opens Public Comment on Identity Assurance Criteria Aligned with NIST SP 800-63 Rev. 4

Summary: Kantara opened public comment on draft updates to its Identity Assurance Framework intended to align assessment criteria with NIST SP 800-63 Revision 4, with comments due January 20, 2026.

Kantara describes the draft as criteria aligned with SP 800-63-4A, which covers identity proofing and verification requirements.

Kantara indicates future volumes will address authentication (63B) and federation (63C) criteria to align with the broader NIST model.

Alignment can affect certification and trustmark pathways where programs reference NIST assurance levels.

Assurance criteria updates can influence how identity service providers are assessed and how relying parties interpret proofing, authentication, and federation controls.


Pakistan’s NADRA Introduces Facial Recognition Certificate for Biometric Verification

Summary: Pakistan’s NADRA launched a facial-recognition-based verification certificate intended to provide a contactless alternative for individuals who cannot complete fingerprint-based checks.

Local reporting describes the certificate as issued after facial biometric verification against NADRA’s identity database.

Reports describe a printed certificate with a QR code for validation by institutions that require biometric confirmation.

Coverage cites an expected issuance timeline of about seven days and a low fee.

Multimodal verification pathways can improve accessibility for populations where fingerprints are degraded or difficult to capture, but they also shift operational reliance toward face capture and matching governance.


UK Digital ID Consultation Reported to Slip into 2026

Summary: UK reporting indicates the government’s public consultation on national digital ID plans may not begin until 2026, with governance work described as shifting to the Cabinet Office.

Reports describe the consultation as expected “in the new year,” after earlier statements referenced a 2025 timeline.

Coverage attributes the timing shift to a governance transfer from DSIT to the Cabinet Office.

Downstream sequencing questions include which credentials are prioritized first and how trust framework certification is governed.

National digital identity programs frequently depend on consultations and governance decisions that shape assurance levels, interoperability expectations, and oversight structures.


Federal Judge Blocks Texas Law Requiring App Store Age Verification

Summary: A federal judge granted a preliminary injunction blocking Texas SB 2420, which would have required app stores to verify user age and obtain parental consent for minors.

The injunction prevents enforcement of the law while litigation proceeds in federal court.

SB 2420 would have required age verification before app downloads or access to paid in-app content, and parental verification and consent for users under 18.

The court compared the law’s effect to requiring age checks before entering a bookstore, according to reporting on the decision.

Age assurance debates often hinge on where verification is performed (platform vs. app), what data is collected, and how minors’ privacy and parental consent requirements are implemented in practice.


UK Opens Registration for Deepfake Detection Challenge 2026

Summary: UK government bodies opened registration for the Deepfake Detection Challenge 2026, an exercise intended to benchmark and test deepfake detection tools in adversarial scenarios.

Public materials describe a two-stage format: a benchmarking phase and a scenario-based exercise.

The initiative is linked to the Home Office, DSIT, The Alan Turing Institute, and the Accelerated Capability Environment.

The challenge targets risks associated with synthetic media, including identity and security use cases such as remote verification and fraud investigations.

Deepfake detection is increasingly treated as a practical component of anti-spoofing and fraud defense, especially when identity verification depends on media authenticity.


Aruba Airport Launches Enhanced Passenger Processing with CBP and iProov

Summary: Aruba Airport Authority says Enhanced Passenger Processing is live at its U.S. Pre-Clearance facility, using facial biometrics to verify travelers against passport data and CBP’s Traveler Verification Service.

The deployment is described as available automatically to U.S. citizens departing Aruba without pre-enrollment.

The airport authority says travelers typically do not need to present a physical passport unless additional review is required.

The program is positioned as reducing queues and processing time through biometric identity verification.

Enhanced Passenger Processing deployments illustrate how facial biometrics are being integrated into pre-clearance and border workflows as an alternative to routine document presentation.


India’s National Testing Agency Adds Live Photo Capture and Reported Facial Checks for Exams

Summary: India’s National Testing Agency (NTA) updated exam materials to require live photo capture during registration, while media reports say additional facial verification measures may be expanded at exam centers.

NTA’s 2026 Information Bulletin specifies that applicants must submit a live photograph captured via camera or webcam, with a QR-code-based fallback option.

Media reporting describes plans to compare candidates at exam entry against previously captured images to deter impersonation and exam fraud.

Public reporting has not clearly established whether Aadhaar-based e-KYC is required for these workflows across all exams.

At large scale, face-based candidate verification raises operational questions about error handling, privacy controls, and how image capture and matching are governed across diverse exam sites.


Peel Regional Police Issues RFP for Cloud-Based AFIS Integrated with RCMP RTID

Summary: Peel Regional Police issued an RFP for a cloud-based automated fingerprint identification system (AFIS) integrated with the RCMP’s real-time identification capability.

The tender describes a 60-month procurement for supply, implementation, and support of an AFIS-RTID solution.

The listing describes a questions deadline of January 20, 2026 and a bid closing date of January 28, 2026.

The listing identifies several plan takers, including Canadian entities associated with large identity and biometrics vendors.

Cloud-based AFIS procurement can indicate a shift toward managed biometric identification infrastructure and closer integration between municipal policing workflows and national databases.


Airports Group Warns of Disruption Risk as EU Entry/Exit System Scales Up

Summary: ACI EUROPE called for an urgent review of the EU Entry/Exit System (EES), citing outages and operational issues that it says could cause disruption as processing volumes increase in early 2026.

ACI EUROPE says EES began operations on October 12, 2025 and uses facial images and fingerprints to register third-country nationals entering and exiting the Schengen Area.

ACI EUROPE cites planned increases in the share of travelers processed through EES, including a published target of roughly 35 percent starting January 9, 2026.

The group cites airport reports that processing times at some locations increased by as much as 70 percent compared with pre-EES baselines.

Large-scale biometric border systems can create queueing and safety risks when biometric capture, matching, or downstream infrastructure does not reliably operate at peak throughput.


NEC and emaratech Deploy Biometric Smart Gates for flydubai Crew at Dubai Airport

Summary: NEC and emaratech say they deployed facial-recognition smart gates to automate immigration clearance for flydubai crew in a dedicated operations environment at Dubai International Airport.

The deployment is described as scoped to flydubai crew operations rather than general passenger processing.

NEC says the system is based on its NeoFace Express X5 facial recognition terminal and matches against immigration records maintained by Dubai’s residency and foreigners affairs authority.

The companies frame the gates as reducing manual document checks and processing time for crew movement through secure areas.

Operational biometric deployments at airports are expanding beyond passenger checkpoints into workforce and logistics flows where throughput and access controls are tightly coupled.


OpenID Foundation Sets Date for Verifiable Credentials Conformance Self-Certification

Summary: The OpenID Foundation says implementers will be able to self-certify against OpenID4VP 1.0, OpenID4VCI 1.0, and HAIP 1.0 via its conformance testing platform starting February 26, 2026.

The conformance suite is described as open-source tooling that can be run locally or against OpenID-hosted servers.

OpenID says organizations can submit self-certified test logs for publication on its certification site, with publication optional.

The foundation says it plans to introduce additional accreditation services in 2026 following the self-certification launch.

Conformance testing is often used to reduce ecosystem fragmentation when multiple wallet, issuer, and verifier implementations need to interoperate across jurisdictions.


Whistleblowers Raise Security Concerns About the UK GOV.UK One Login Program

Summary: ITV News reports that whistleblowers have raised security concerns about the UK government’s GOV.UK One Login system, which supports access to online services and is linked to planned digital identity initiatives.

ITV reports One Login is used by an estimated 13 million people and is positioned to underpin the GOV.UK digital wallet concept.

Reported concerns include whether One Login is meeting required UK government cyber standards and how access to sensitive components is controlled.

A UK government spokesperson told ITV it works with the National Cyber Security Centre and addresses issues identified through testing.

Digital ID platforms that centralize access to government services tend to concentrate risk, making security governance, monitoring, and incident response central to program trust.


CLEAR Adds Passport-Based Digital ID Creation in Its App

Summary: CLEAR says users can create a passport-based digital ID inside the CLEAR app, extending its mobile identity verification offering for travel-related use cases.

The workflow is described as creating a digital ID derived from a passport within a mobile app.

The feature expands the set of identity documents supported by CLEAR’s identity verification flows.

The announcement reflects continued movement toward reusable mobile identity credentials in travel contexts.

Passport-derived digital IDs in consumer apps highlight an emerging model for reusable identity verification, while raising questions about interoperability, privacy controls, and acceptable uses.


Ethiopia Plans Secure Physical ID Cards Linked to Fayda Digital ID

Summary: Ethiopia says it will begin issuing secure physical ID cards tied to its Fayda digital identity system, aiming to support in-person identity checks and biometric authentication for eKYC workflows.

The National ID Program says the card issuance work is part of expanding the Fayda digital ID ecosystem.

Officials describe the cards as supporting higher-assurance in-person identity verification.

The program is positioned as enabling biometric authentication within identity proofing and verification flows.

Ethiopia’s plan to add secure physical ID cards alongside Fayda reflects a common pattern in national identity programs: pairing a digital ID platform with card-based credentials to support both online and in-person verification.


California DOJ Opens Comment Period on Age Assurance Practices

Summary: California’s Department of Justice has invited public comments on age assurance practices, reflecting ongoing regulatory scrutiny of how online services verify age while managing privacy and risk.

The request focuses on implementation questions for age assurance approaches used by online services.

Age assurance can involve document checks, biometrics, or attribute-based verification, each with different privacy and accuracy tradeoffs.

Public input can influence how requirements are interpreted and enforced across sectors.

Regulatory consultations on age assurance often become de facto guidance on acceptable data collection, retention, and fallback processes when automated checks fail.


Denmark Selects Signicat for EU Digital Identity Wallet Work

Summary: Denmark’s digital government agency selected Signicat for work related to a digital identity wallet aligned with EU eID requirements, including onboarding and document verification flows.

Reported scope includes identity proofing and verification workflows for Denmark’s planned wallet implementation.

The work references NFC document verification as part of identity checks.

The selection reflects continued European build-out of interoperable wallet implementations tied to eIDAS requirements.

Wallet initiatives increasingly translate policy into concrete onboarding pipelines, including document verification, credential issuance, and step-up verification for higher-risk transactions.


Quebec Launches Consultation on Digital Identity, Biometrics, and Data Sharing

Summary: Quebec launched a public consultation on digital identity that includes questions about biometrics and data sharing, reflecting how subnational governments are shaping governance for identity modernization.

The consultation frames digital identity as part of public service modernization and online access.

Biometrics and related privacy safeguards are included among the topics under consideration.

Outcomes may influence rules for data sharing, consent, and acceptable authentication methods in government services.

Public consultations can set practical boundaries for identity systems—especially around biometric use, data minimization, and how credentials are shared across agencies and partners.


Swissbit Adds HID Seos Support to iShield Key 2, Expands Enterprise Passkey Use

Summary: Swissbit added HID Seos support to its iShield Key 2 portfolio, positioning a single enterprise token for both FIDO2/WebAuthn passkeys and physical-access credential deployments.

The update adds Seos support for physical access systems alongside FIDO2 authentication capabilities.

Swissbit describes multiple iShield Key 2 variants, including a Pro version aimed at broader credential use cases.

The announcement reflects enterprise interest in consolidating logical-access and physical-access credentials.

Hardware tokens that bridge physical and logical access can simplify credential issuance and lifecycle management, but also concentrate risk if token governance and recovery processes are weak.


UIDAI Publishes Fingerprint SDK Benchmark Results Using Child Growth Dataset

Summary: India’s UIDAI released results from a fingerprint-SDK benchmarking challenge that evaluates one-to-one verification using child fingerprints collected across multi-year intervals.

The dataset tests long-term matching performance as children’s fingerprints change over time.

UIDAI frames the benchmark as supporting evidence-based assessment of fingerprint SDK performance.

The agency indicated plans for similar benchmarking efforts for face and iris modalities.

Longitudinal benchmarks can help national ID programs and relying parties design age-appropriate authentication policies, including re-enrollment triggers and fallback mechanisms when match confidence drops.


Dubai Launches Citywide One-Time Biometric Hotel Check-In

Summary: Dubai is preparing a citywide hotel check-in program that lets visitors complete identity verification once on a mobile device and then reuse biometric authentication for subsequent stays at participating properties.

The program is described as allowing travelers to submit ID details and biometrics (including a facial scan) before arriving.

Officials say the onboarding remains valid until the underlying identity document expires.

The rollout is positioned for use across Dubai’s hotel sector rather than property-by-property enrollment.

Citywide onboarding models reduce repetitive check-in friction, but require clear rules around consent, retention, revocation, and how biometric profiles are shared across hotels and other tourism services.


Ireland Advances Draft Law on Police Use of Biometric Recognition Tools

Summary: Ireland has advanced draft legislation intended to define how police can use biometric recognition tools in investigations, including governance and safeguards for biometric matching systems.

The draft is positioned as clarifying legal bases and oversight for biometric recognition in investigative contexts.

Policy debates typically focus on proportionality, accuracy, bias risks, and limits on surveillance use.

Legislation can shape requirements for warrants, auditing, retention, and permissible datasets.

As jurisdictions legislate biometric recognition for law enforcement, the details of scope, oversight, and operational constraints often determine whether deployments remain tightly bounded or expand over time.


Pakistan Orders Exchange Companies to Add Facial Recognition to Biometric Checks

Summary: Pakistan directed exchange companies to add facial recognition as part of biometric identity verification processes, reflecting continued expansion of multi-modal checks in regulated financial workflows.

The directive is framed as strengthening identity verification for higher-risk transactions and fraud prevention.

Facial recognition is positioned as an additional modality alongside existing biometric checks.

The move illustrates how financial compliance controls increasingly rely on biometric identity verification.

Multi-modal identity checks can reduce certain fraud vectors, but depend on strong governance for accuracy monitoring, fallback processes, and appropriate handling of biometric data.


Printed Face Masks Can Bypass Weak Attendance Face Recognition, Report Says

Summary: A reported demonstration shows printed face masks can deceive a facial-recognition-based attendance system, underscoring the need for robust presentation attack detection and system-level controls.

The attack uses low-cost physical presentation artifacts rather than sophisticated synthetic media.

Weak or missing liveness/PAD checks increase the risk of impersonation in face-based authentication.

Higher-assurance deployments typically combine PAD with policy controls, auditing, and fallback verification.

Face-based attendance systems are particularly sensitive to spoofing because incentives for circumvention are high and operational oversight is often limited, making PAD and governance controls critical.


U.S. Education Department Says Identity Verification Blocked $1B in Student-Aid Fraud

Summary: The U.S. Department of Education says it blocked more than $1 billion in attempted student-aid fraud in 2025 after requiring mandatory identity verification for certain first-time FAFSA applicants.

Flagged applicants must present unexpired government ID in person or via live video, according to the department.

The department cited detection of high volumes of suspect identities as a driver for stronger front-end proofing.

The change reflects a broader shift toward higher-assurance identity proofing to counter automated fraud.

As fraud becomes more automated, agencies and platforms are increasingly moving identity proofing earlier in the process, trading additional friction for reduced downstream losses.


Spanish Airport Operator Aena Fined €10M Over Biometric Boarding

Summary: Spain’s data protection authority has fined airport operator Aena €10 million over its biometric boarding program, citing GDPR violations in how passengers’ facial images were collected and processed.

The sanction relates to Aena’s use of facial recognition for automated boarding at Spanish airports.

Regulators found shortcomings in informed consent, transparency, and the legal basis for processing biometric data.

The case highlights regulatory scrutiny of airport facial recognition schemes across Europe.

Spain’s AEPD has imposed a €10 million GDPR fine on airport operator Aena for its facial recognition boarding program, spotlighting legal risks when biometric border control deployments lack clear consent, transparency, or lawful basis.


Alaska Explores AI-Driven Digital ID Wallet for myAlaska

Summary: The State of Alaska is exploring an AI-enabled digital identity wallet and upgraded myAlaska app, aiming to give residents a secure, mobile way to prove identity and access online government services.

An Alaska RFI seeks ideas for a digital ID wallet linked to the myAlaska account used for state services.

Officials are considering AI and automation to improve identity verification and fraud detection.

The initiative reflects growing U.S. state-level interest in mobile digital IDs and government service wallets.

Alaska is testing the waters for a digital ID wallet connected to its myAlaska digital services account, signaling a move toward mobile-first identity credentials and experimenting with AI to streamline verification and fraud controls.


EU Lawmakers Back EU-Wide Age Checks for Social Media

Summary: The European Parliament has backed an EU-wide framework for age checks on social media platforms, pushing for consistent rules on how providers verify that under-16s are kept off services where they are not allowed.

MEPs support mandatory age checks for platforms with minimum age requirements, with safeguards against excessive data collection.

The proposal emphasizes privacy-preserving age assurance, avoiding general monitoring of all users.

If finalized, the framework would force platforms to standardize age checks across EU member states.

EU lawmakers are pressing for harmonized, privacy-aware age checks on social media, signaling that platforms will need robust age assurance mechanisms to keep under-16s off services where they are not permitted.


Indian States Curb Aadhaar Use as Proof of Birth

Summary: Uttar Pradesh and Maharashtra have stopped accepting Aadhaar as proof of birth for civil registration, signaling a tighter interpretation of India’s national digital ID system and its role in age and identity verification.

State authorities in UP and Maharashtra now require birth certificates or hospital records rather than Aadhaar for proof-of-birth documentation.

The move responds to central government guidance that Aadhaar is an identity number, not a proof of birth or citizenship.

The change affects how residents prove age and identity in procedures such as school enrollment and access to entitlements tied to date of birth.

Two of India’s largest states, Uttar Pradesh and Maharashtra, have stopped accepting Aadhaar as proof of birth for civil registration and public services, reinforcing guidance that the national digital ID is an identity number rather than a birth or citizenship document.


Intercede Wins at Least $4.2M in New Digital ID Deals

Summary: UK-based identity and credential management specialist Intercede has announced at least $4.2 million in new digital identity contracts, underscoring continuing demand for high-assurance credentialing and access control.

The new contracts span government and enterprise customers for digital identity and credential management solutions.

Intercede highlights growing interest in strong authentication and lifecycle management for digital credentials.

The wins add to a broader trend of increased spending on high-assurance digital ID infrastructure.

Intercede has reported at least $4.2 million in new digital identity contracts across government and enterprise customers, reflecting sustained demand for strong credential management and access control platforms.


UK Puts First Price Tag on National Digital ID Scheme

Summary: UK officials have released the first public cost estimate for a national digital ID scheme, offering a clearer view of the investment required to roll out government-backed digital identity services.

The estimate covers multi-year spending on infrastructure, integration, and operations for a nationwide digital ID system.

It follows earlier work on GOV.UK One Login and related identity assurance initiatives.

Publishing cost projections is meant to increase transparency and inform debate over benefits, risks, and alternatives.

The UK has moved from vision to budget planning for a national digital ID scheme by publishing an initial multi-year cost estimate, setting the stage for more detailed scrutiny of how digital identity investments will be prioritized and governed.


Vietnam Banking Rules Push Customers to Chip IDs and VNeID

Summary: Vietnam’s central bank is tightening know-your-customer (KYC) rules for banks and payment firms, effectively steering customers toward chip-based ID cards and the VNeID digital identity app for account opening and remote transactions.

New regulations require banks and payment institutions to authenticate customers against the national population database using chip-based ID cards or VNeID.

The shift aims to reduce manual ID checks and improve remote onboarding and transaction security.

Legacy paper ID documents become less usable for high-assurance financial services as the rules take effect.

Vietnam’s banking and fintech sector is being pushed to rely on chip-based citizen ID cards and the VNeID app for identity verification, as regulators tighten KYC rules and require electronic checks against the national population database.


CLEAR Becomes TSA PreCheck Enrollment Provider, Expands Biometric Pods

Summary: CLEAR is now an authorized TSA PreCheck enrollment provider, rolling out biometric enrolment pods and deeper integration with TSA’s facial-ID checkpoints at U.S. airports.

CLEAR gained TSA approval to enroll travelers into PreCheck using its airport pods.

Biometric Credential Authentication Technology units with facial matching continue expanding at TSA checkpoints.

Move tightens the link between commercial identity services and federal aviation security flows.

CLEAR is extending its footprint in U.S. aviation security after being authorized to enroll passengers in TSA PreCheck through its airport kiosks. The pods capture identity data and biometrics, feeding enrollment into TSA’s risk-based screening program.

TSA is simultaneously widening deployment of facial-matching Credential Authentication Technology units at checkpoints, reducing reliance on boarding passes and increasing touchless identity checks. Together, the moves deepen biometric dependencies in airport flows and raise questions about data governance and traveler choice.


FBI Seeks Next-Gen Biometric Algorithms for NGI Upgrade

Summary: An FBI RFI calls for vendors to provide next-generation fingerprint, face, iris, and tattoo algorithms to modernize the Next Generation Identification (NGI) system.

Request spans tenprint, latent, face, iris, and tattoo matching for large-scale identification workloads.

Vendors are expected to participate in NIST testing and supply performance data.

Signals continued NGI modernization and potential procurement roadmap.

The FBI issued a new request for information seeking next-generation biometric matching algorithms to upgrade the NGI platform. The RFI covers tenprint and latent fingerprints, face, iris, and tattoo recognition, emphasizing scalability and validated performance.

Vendors are asked to align with NIST evaluation regimes and provide metrics suited to federal identification workloads, signaling a procurement track for refreshed multimodal capabilities inside NGI.


Indonesia Launches Walk-Through Biometric Border ‘Seamless Corridors’

Summary: Jakarta and Bali airports now let eligible travelers clear border control while walking through facial-recognition corridors paired with e-passport checks.

Walk-through lanes perform facial recognition and e-passport verification without stopping at a booth.

Initial rollout targets Indonesian citizens and pre-vetted travelers, with expansion planned.

Program aligns with broader seamless travel initiatives like IATA One ID.

Indonesia’s immigration service introduced “Seamless Corridor” lanes at Soekarno-Hatta (Jakarta) and Ngurah Rai (Bali), letting pre-approved passengers clear border checks while walking. Cameras perform facial matching against e-passport data and watchlists, aiming to lift throughput and cut queues.

Officials say the system will expand beyond the initial traveler cohorts after validation, positioning the corridors as part of global seamless travel efforts and raising governance questions around accuracy, retention, and vendor access.


Oracle Identity Manager Zero-Day Actively Exploited (CVE-2025-61757)

Summary: A pre-authentication flaw in Oracle Identity Manager is being exploited for remote code execution, threatening downstream access governance across enterprises.

Bug allows unauthenticated REST requests to invoke a Groovy script endpoint, leading to RCE.

CVE-2025-61757 was patched in October 2025, but many deployments remain exposed.

Compromise of identity governance tier can cascade to connected enterprise apps.

Oracle Identity Manager installations are under active attack via CVE-2025-61757, a pre-auth flaw that lets remote actors trigger Groovy execution through a mis-filtered REST endpoint. Successful exploitation yields code execution on the identity tier that provisions access to downstream systems.

Oracle issued a fix in the October 2025 Critical Patch Update, but lagging patch adoption leaves many enterprises exposed. Security teams are urged to patch immediately and hunt for abuse across connected applications.


UK Companies House to Begin Mandatory Identity Checks for Directors and PSCs

Summary: Companies House will require identity verification for company directors and persons with significant control (PSCs), with checks beginning November 18, 2025, as part of ECCTA reforms.

Mandatory ID checks for directors and PSCs from Nov 18, 2025

Part of Economic Crime and Corporate Transparency Act measures

Expected to use GOV.UK One Login for verification

The introduction of mandatory checks is intended to deter fraud and improve data integrity in the UK company register while aligning with broader government digital identity initiatives.


DCSA ‘Identity Exchange’ Targets Verified Business Digital Identity in Container Shipping

Summary: The Digital Container Shipping Association introduced an ‘Identity Exchange’ to share verified business identity data across the shipping ecosystem, aiming to streamline trust and reduce fraud.

Sector initiative for verified business identity

Supports cross‑party interoperability in shipping

Business‑to‑business credential sharing can reduce onboarding friction and fraud, especially when based on interoperable verifiable credential profiles.


Gentex Acquires BioConnect to Form New ‘Security & Access Control’ Division

Summary: Gentex acquired BioConnect and established a dedicated Security & Access Control division, signaling continued consolidation around biometric access and identity‑centric physical security.

Acquisition creates new access‑control division

Expands portfolio into identity‑centric access

Biometric access control vendors continue consolidating as enterprises favor unified identity stacks across physical and logical domains.


India Operationalizes Digital Personal Data Protection Act with ‘SARAL’ Rules

Summary: India finalized ‘SARAL’ rules to operationalize the DPDP Act, clarifying obligations on consent, processing, and redress that affect digital identity onboarding and verification workflows.

Rules complete the DPDP Act’s operational framework

Impacts consent and retention in ID flows

Raises compliance stakes for IDV providers

Clear privacy rules influence how digital ID systems capture and retain attributes, driving changes to consent UX, audit logging, and data minimization.


Somalia’s E‑Visa Platform Hit by Cyber Incident, Exposing Traveller Data

Summary: Somalia acknowledged a cyber incident affecting its e‑Visa platform that exposed traveler information, prompting remediation steps and scrutiny of e‑government security controls.

Exposure involved traveller data on e‑Visa system

Authorities confirmed incident and launched fixes

Highlights security debt in border‑ID digitization

Digitized border systems concentrate sensitive data; robust access controls, auditability, and incident response are essential to mitigate risk.


Sumitomo Mitsui Trust Bank Moves Mobile Customers to FIDO Cloud Authentication with OneSpan

Summary: Sumitomo Mitsui Trust Bank is migrating mobile users to phishing‑resistant, FIDO‑based cloud authentication with OneSpan, replacing passwords with passkeys built on WebAuthn/FIDO2.

Bank‑scale rollout of passkeys for mobile customers

Cloud authentication built on WebAuthn/FIDO2

Targets stronger security and simpler sign‑in

FIDO passkeys replace shared secrets with device‑bound cryptographic keys, reducing credential phishing and reuse while keeping the login experience simple for mobile users.


CLEAR Highlights Q3 Growth and eGate Expansion

Summary: CLEAR reported continued revenue growth alongside new airport partnerships and expanded eGate deployments, signaling steady scaling of face‑based traveler processing.

Additional eGates and lanes at major airports

Face‑based identity checks continue to expand in travel

Focus on throughput and passenger experience

CLEAR’s quarterly update emphasized growth in airport deployments and eGate coverage, reflecting ongoing momentum for face‑based identity checks in travel. The company points to improved throughput and user experience as drivers for adoption.

Face recognition at the edge of border and travel flows is becoming table‑stakes, with operators extending deployments to more terminals and partners.


HUB Cyber Security Introduces HUB Token for SSI on Trvsthub

Summary: HUB Cyber Security unveiled the HUB Token, a software credential designed for self‑sovereign identity workflows on Trvsthub, enabling selective disclosure and standards‑based verifiable credentials.

Targets SSI/VC use cases with selective disclosure

Positions Trvsthub as an issuance and verification hub

Aims to streamline cross‑border compliance and onboarding

HUB Cyber Security announced the HUB Token for the Trvsthub ecosystem, bringing standards‑aligned verifiable credentials and selective disclosure to digital identity workflows. The token is positioned for compliance‑sensitive onboarding and cross‑border use cases where cryptographic proofs reduce data exposure.

The effort underscores a broader push toward portable credentials that organizations can verify instantly—without collecting more data than necessary.


MoneyGram Taps Oscilar’s Cognitive Identity Intelligence

Summary: MoneyGram selected Oscilar’s risk and identity engine to strengthen fraud detection and onboarding decisions, incorporating behavioral signals and ML‑driven orchestration across the customer journey.

Combines behavioral signals with identity and risk data

Supports KYC/AML decisioning and step‑up flows

Designed to reduce false positives while catching fraud

MoneyGram is adopting Oscilar’s Cognitive Identity Intelligence to enhance real‑time risk decisions during onboarding and transactions. The approach fuses behavioral telemetry with identity and device data to improve precision, triggering step‑up checks only when risk rises.

For global money movement, this kind of orchestration aims to preserve user experience while tightening anti‑fraud controls.


Secured Signing Adds Reality Defender ‘Realify’ Deepfake Checks for RON

Summary: Secured Signing partnered with Reality Defender to offer ‘Realify,’ a deepfake detection add‑on that strengthens liveness and fraud controls in Remote Online Notarization workflows.

Deepfake and spoof detection integrated into RON sessions

Complements selfie match and liveness checks

Aims to reduce synthetic‑ID and impersonation risk

Secured Signing introduced ‘Realify,’ an integration of Reality Defender’s deepfake detection that runs alongside existing identity checks in Remote Online Notarization (RON). By flagging manipulated media and suspicious capture conditions, the add‑on provides an extra assurance layer for high‑trust signatures.

Vendors across identity workflows are incorporating PAD and deepfake defenses as synthetic media risks rise.


UK One Login Explores Fraud & Contact Validation Providers (RFI)

Summary: The UK’s Government Digital Service issued an information request to source fraud and contact validation capabilities for One Login, seeking signals across email, phone and device to prevent misuse.

Focus on contact and fraud signals to harden One Login

Targets improved onboarding assurance and account integrity

Early market engagement ahead of formal procurement

GDS is assessing providers that can supply fraud and contact validation signals to strengthen One Login. The goal is to raise assurance during onboarding and sign‑in without adding excessive friction, using layered signals like email, phone and device risk.

The request signals continued expansion of One Login’s capabilities as the service scales across agencies.


DHS Finalizes Nationwide Biometric Exit Rule

Summary: Final rule removes ‘pilot’ limits and authorizes facial image collection for departing non‑citizens at all ports of exit.

Effective December 26, 2025; comments on process due November 26, 2025

Expands CBP authority from limited pilots to all airports, land and sea ports

Builds on Simplified Arrival; 178M travelers processed via face match in 2024

The U.S. Department of Homeland Security published its final rule establishing a permanent biometric entry–exit framework. The text explicitly removes the prior “pilot program” limitation for exit checks, authorizing facial image capture for departing non‑citizens at airports, land borders, and seaports.

The rule codifies what CBP has already deployed for entry and opens the door to broad expansion at exit, with the agency estimating a three‑to‑five‑year build‑out to reach full coverage. CBP is soliciting targeted public comments on the specific collection process and cost–benefit assumptions even as the final rule moves forward. citeturn2view0


Ring to Add ‘Familiar Faces’ Facial Recognition

Summary: Amazon’s Ring will enable on‑device facial recognition for doorbells and cameras, arriving in December with opt‑in controls.

Feature is opt‑in and processed on device, per Ring

Launch slated for December with phased rollout

Marks major consumer‑market shift toward face unlock/alerts at the edge

Ring announced “Familiar Faces,” bringing facial recognition to select doorbells and cameras. According to the company, matching happens on the device, with users able to opt in and manage face profiles. The feature is scheduled to arrive in December with a staged availability across models and regions.

While phones have normalized local face unlock, always‑on home cameras using facial recognition have been slower to reach mass adoption. Ring’s move signals a broader mainstreaming of edge‑based face recognition beyond mobile devices. citeturn2open3


USCIS Sets $85 Biometric Services Fee

Summary: New USCIS fee structure establishes a standard $85 biometric services charge across affected immigration forms.

Fee applies where biometrics are required; part of broader USCIS fee update

Aligns processing costs for background checks and identity capture

USCIS finalized a standardized $85 biometric services fee applicable to petitions and applications that require identity capture and checks. The move folds disparate charges into a single line item tied to biometrics collection, clarifying costs for applicants and sponsors. citeturn2open4


Germany Moves Government Services to Passkeys

Summary: Germany announced a program to replace passwords for government services with passkeys, aligning with WebAuthn standards to improve security and usability.

Government accounts to support passwordless login

Built on WebAuthn/FIDO2 platform authenticators

Part of a broader digital identity modernization agenda

Passkeys bind accounts to device-based cryptographic keys, reducing credential phishing and reuse while keeping login flows simple for end users.


Australia Registers New eSafety Industry Codes With Age-Assurance Provisions

Summary: Australia registered expanded eSafety industry codes that include stronger age‑assurance expectations for online services, formalizing obligations to limit minors’ exposure to harmful content.

Codes registered by the eSafety Commissioner on Sep 9, 2025

Codifies age‑assurance across covered online services

Implementation details to vary by risk and service type

Age‑assurance techniques range from document, biometric, and signal‑based checks to privacy‑preserving attestations; suitability depends on risk, accuracy, and proportionality.


Hopae Connect Becomes EU‑Registered eIDAS 2.0 Intermediary

Summary: Hopae Connect launched as one of the first private‑sector intermediaries registered under eIDAS 2.0 to support routing and interoperability for EUDI Wallet deployments.

Registered intermediary to bridge issuers, wallets, verifiers

Supports EUDI Wallet rollout across EU markets

Positions private sector roles in the eIDAS 2.0 ecosystem

Intermediaries can provide trust, routing, and policy enforcement services that simplify cross‑border credential use while meeting regulatory requirements.


Kenya Reinstates Biometric Identity for Public Healthcare Access

Summary: Kenya dropped one-time passwords and reinstated biometric identity checks for access to public healthcare services, citing fraud risks and the need for higher assurance.

OTP-only access replaced by biometric verification

Authorities cited fraud and impersonation risks

Re-introduces face and fingerprint checks at point of service

Higher-assurance identity checks at the point of service can reduce impersonation in healthcare systems, though they require inclusive enrollment and fallback options to handle failures and edge cases.


U.S. and Chile Deepen Biometric Border Cooperation Through BITMAP

Summary: The U.S. and Chile have signed an agreement to expand participation in the Biometric Identification Transnational Migration Alert Program (BITMAP), increasing biometric data sharing for border and migration risk screening.

BITMAP enables collection and sharing of biometric and biographic data on high-risk travelers and migration cases.

The new agreement formalizes Chile’s cooperation with U.S. agencies on biometric screening and watchlist checks.

Program reflects a broader trend toward cross-border biometric information exchange for migration control.

The BITMAP agreement between the United States and Chile expands biometric data sharing to support border and migration risk assessments, including fingerprint and face matching against U.S. systems. Chilean authorities can submit biometric records collected at borders or during investigations for checks against U.S. holdings.

By deepening cooperation under BITMAP, both countries aim to identify high-risk travelers, disrupt transnational crime, and strengthen the integrity of their border management processes using shared biometric intelligence.


Sumsub Integrates With Solana for Reusable Digital ID

Summary: Sumsub announced an integration with the Solana ecosystem to enable reusable digital identity, allowing users to re-present verified credentials across supported services.

Reusable credentials can be re-presented within Solana-integrated apps

Aims to reduce repeated KYC while preserving assurance levels

Ties Web3 flows to established digital identity verification

Reusable digital identity lets a previously verified user present the same credential for subsequent checks. The Solana integration connects credential presentation with on-chain services, while the underlying verification remains off-chain.


W3C VC 2.0 Incorporates TruAge Contributions for Age Verification

Summary: The W3C Verifiable Credentials 2.0 effort incorporated age‑verification contributions from the TruAge initiative, supporting privacy‑preserving proof of age.

VC 2.0 adds patterns for age attestations

Enables selective disclosure of age without full identity

Supports reusable credentials across services

Age proofs built on VCs can minimize data exposure by revealing only what’s necessary (e.g., over‑18) rather than full DOB or identity details.


OpenID Foundation to Demo Next‑Gen Digital ID Interoperability

Summary: The OpenID Foundation announced demos of next‑generation digital ID technologies with major partners, highlighting interoperability across credential issuance and wallets.

Focus on OpenID specifications for credential flows

Ecosystem demos with multiple industry partners

Supports emerging EUDI wallet implementations

Interoperability testing across wallet, issuer, and verifier components is essential for portable credentials to work reliably across jurisdictions and vendors.


China Bans Mandatory Facial Recognition for Routine Business ID Checks

Summary: China has issued new rules prohibiting companies from forcing customers to use facial recognition for everyday identity verification, narrowing acceptable use to specific security and compliance scenarios.

Businesses can no longer make facial recognition the only option for routine customer authentication.

Permitted uses are limited to defined high-security or public safety contexts under data protection rules.

Policy responds to overuse of biometric data in retail, property access, and online services.

Chinese regulators have moved to curb the routine use of facial recognition in consumer services, barring companies from making face scans a mandatory condition for basic identity checks. Instead, organizations must offer non-biometric alternatives for standard customer onboarding and access.

The rules still allow facial recognition in tightly scoped contexts—such as critical infrastructure, public safety, or specialized security zones—but emphasize minimization and proportionality in biometric data collection.


Pakistan Launches All-in-One Digital ID Kit With Multimodal Biometrics

Summary: Pakistan has introduced a portable digital ID kit that combines fingerprint, face, and iris capture with backend verification, enabling field enrollment and authentication for its national identity system.

Kit integrates multimodal biometric capture with secure connectivity to Pakistan’s national ID backend.

Designed for mobile use in field enrollment and verification scenarios, including remote communities.

Supports a broader push to expand inclusion and tighten the assurance level of national ID credentials.

Pakistan’s new all-in-one digital ID kit combines fingerprint, face, and iris capture hardware with software that connects to the national identity database for verification. Authorities can enroll or verify citizens in the field without permanent infrastructure, extending coverage to underserved areas.

The deployment underscores how multimodal biometrics and portable form factors are becoming a standard pattern for strengthening national ID programs while supporting inclusion and fraud reduction goals.


Kurdistan Region Rolls Out Digital ID–Based Payroll for Public Employees

Summary: The Kurdistan Regional Government (KRG) is shifting public-sector salary disbursement to a digital identity–enabled payroll platform, linking verified ID records to bank accounts and mobile channels.

Payroll reform ties civil servant salary payments to verified digital identity records.

System is designed to reduce ghost employees and duplicate salary payments.

Initiative is part of a broader KRG digital transformation agenda spanning MyAccount and e-government services.

The Kurdistan Regional Government is implementing a digital identity–enabled payroll system that links civil servants’ verified identity records to bank and mobile payment channels. The move is aimed at reducing fraud and ghost employees while creating a more auditable, transparent salary process.

The payroll upgrade sits within a wider digital transformation push that includes the MyAccount platform and other e-government services, positioning digital identity as the backbone for how residents authenticate and receive state benefits.