Plans to photograph and fingerprint every baby born in South Africa for a digital register could lead to data leaks and identity theft without robust safeguards, rights experts said.
The department of home affairs’ new draft policy aims to capture detailed biometrics – unique physical traits – of every child born in SA and link this data to parents’ identity numbers, which are printed on all ID documents.
The government hopes the new registration system will prevent corrupt officials selling birth certificates to foreigners to illegally secure South African citizenship and protect children who otherwise risk going undocumented.
About one in 10 of about 1 million babies born in SA each year are not registered at birth, government data shows. Without birth certificates, they risk exclusion from school and health care and denial of citizenship.
Under the proposed policy, all children – including those whose parents are migrants or stateless, meaning no country recognises them as citizens – will receive a digital number, though this does not translate to automatic citizenship.
“Governments need to have digital registers of their population to deliver services,” said Joseph Atick, executive chairperson of ID4Africa, a charity that promotes digital identification – or online identity records – across Africa.
“(But) the threat to privacy is real. That is why we promote the development of data protection and privacy laws and frameworks before embracing digital identity,” Atick told the Thomson Reuters Foundation in e-mailed comments.
The department of home affairs did not respond to multiple requests for comment.
SA passed the Protection of Personal Information Act in 2013, which aims to protect private data held by government, businesses and individuals from security breaches, theft and misuse, but key elements have yet to be enacted.
The country has been hit repeatedly by cyber criminals.
The city of Johannesburg had to shut down its website and online services in 2019 after its network was breached by hackers who threatened to upload all its private data online unless the government paid a ransom.
About 1 billion people globally lack identity proofs, which are often vital to access welfare payments, open businesses, obtain phone lines and vote, according to the World Bank, which is backing efforts to roll out digital IDs worldwide.
Advanced biometric systems are already in use in countries such as India, Bangladesh and Pakistan.
India’s system – the world’s largest – has come under fire for excluding about 100 million vulnerable people, many of whom are homeless or transgender and have been denied essential services, according to a 2019 study by consulting firm Dalberg.
“Digital identity systems are complex and there needs to be significant … oversight to ensure that any system that is implemented is not subject to abuse,” said Avani Singh, director of ALT Advisory, a data privacy law firm.
“As members of the public increasingly demand agency over their personal information, we need to ensure that any digital identity system is robust, secure, trustworthy, lawful and inclusive.”
South Africans apply for a digital ID number at the age of 16, and their photos and fingerprints are taken.
The draft identity management policy seeks to capture more biometric data, such as photos of eyes, hands, feet and ears – and possibly DNA collection in the future – to ensure no-one lives without “a legal record of existence”.
The policy is open for public comment until February 28, after which it will be drafted into a bill.
Murray Hunter, a South African digital rights activist who authored Boris the BabyBot, a children’s book about surveillance, was sceptical that biometrics can solve identity management issues.
“Can it truly be that the only solution (to identity theft) is not to root out corrupt officials, but to create massive databases of every child’s face, fingerprints and other biometric info?” he asked. – Thomson Reuters Foundation