Global eID country report 2024

Adoption and data privacy of the online identification function in a digitized world

Viewpoint

Key findings

  1. eID technology is gaining in importance, but the level of adoption varies
  2. Global eID champions focus on data privacy and service offering
  3. Data privacy compliance is the foundation of trust
  4. eID laggards should urgently tackle data privacy

The global state of adoption and level of data privacy

In an increasingly digitized world, technologies such as the eID (online identification function) are gaining in importance. eID enables the use of digital public services as well as private services that require identification. However, citizens and service providers vary considerably in their adoption of the respective eID solutions. Some countries regard as pioneers in this technology, while others still struggle to introduce it.

This global benchmarking report covers the adoption and level of data protection of the respective eID solution in eight countries around the world. The countries covered in this study were selected due to the availability of data and local experts. Furthermore, it explores the correlation between adoption and the level of data privacy protection. This report aims to find international standards and best practices for both the public and private sector.

Register here to download

Data privacy compliance to boost eID user rates?

eID is becoming more important as it allows people to use digital services that need identification. However, the number of users and service providers for this technology is not growing. A recent survey1 in Germany found that data protection and security are the most important factors for building trust in technology.

This discovery is significant. Another study2 from Germany found that lack of trust is one of the top 5 reasons for not using eID. Moreover, the German government's digital strategy3 also points to data privacy as the foundation for trust.

Click to increase view

1 IDnow Digital Identity Index 2023 Germany; 2 eGovernment MONITOR 2023; 3 Digital Strategy of Germany (2023), p.11

Overview of the eID country report results

The results from most of the surveyed countries confirm their reputation as global champions in eID technology:

Click to increase view

The eID frontrunners take various technical and other measures to comply with data privacy requirements. Additionally, the results show that data privacy compliance correlates positively with trust levels, which in turn increases user rate.

Half of the countries surveyed are strongly dedicated to protecting data privacy and building trust. While administrators should prioritize data privacy to build trust, they should also design respective eID solutions in a compliant way.

When analyzing countries with high levels of trust and high user rates, it is important to consider additional factors. One of these factors is the number of service providers. This will help ensure a comprehensive examination.

Best practices for successful eID solutions

To establish a secure and user-friendly eID solution, four best practices are critical to success:

To establish trustworthy and compliant eID-solutions, organizations should consider privacy requirements right at the outset. Privacy principles can be particularly helpful in guiding how to design and implement eID-solutions and their technical infrastructure.

When processing personal data, appropriate risk assessments must be carried out before the processing is initiated. A thorough analysis helps to ensure that any risks are recognized at an early stage and that suitable mitigation measures can be decided on as early as possible. Responsible handling of privacy risks strengthens customer confidence and builds trust for new products.

Comprehensive, accurate, and clear documentation is a legal necessity and plays a vital role in ensuring nationwide projects comply with regulations. It also helps stakeholders fulfill their responsibilities and be transparent with authorities. Completing documentation also ensures that it provides a holistic overview of complex infrastructure, dependencies, and implementation of privacy requirements.

Long-term projects and infrastructure development provide ongoing chances to identify areas for improvement and determine how to optimize them. All stakeholders should agree on monitoring and enhancement processes at an early stage.

Data protection and privacy as critical success factors

Data protection and privacy have become a critical element in customer and user trust. However, a lack of necessary data protection awareness can lead to the failure of a product launch and cause lasting damage to trust and accountability. We consider the following three recommendations as critical success factors to establish data protection and privacy:

Growing data protection awareness

As awareness grows, people are more likely to assert their data rights. This helps build trust in public bodies and stakeholders who follow legal processes to meet user expectations

Safeguarding the reputation of all stakeholders

Maintaining the reputation of all involved stakeholders benefits ongoing and future projects

Responsibility for governments to comply

Government bodies, and their IT solutions, have a general obligation to comply with legal requirements

Niklas Kelbch, Lukas David Hoffmann and Malien Zehnpfenning also contributed to this report.

Contact us

Lucas Sy

Lucas Sy

Partner, Strategy& Germany

Matthias Bleidiesel

Matthias Bleidiesel

Director, PwC Germany

Hide