Component 2

Digital Identification

Component 2: Digital Identification for Improved Online and In-Person Service Delivery

Will help strengthen the Maldives’ foundational identification system and digital identification systems. This component will provide support to the Department of National Registration and the National Centre for Information Technology in the form of technical assistance, equipment, and legislative support.
Component 2 will help enhance trust and efficiency in both in-person and online transactions and service delivery through a multipronged approach, which includes: (a) the establishment of legal and institutional enablers and safeguards for secure data- and identity management; b) the modernization of existing identity management software and hardware and the introduction of a new digitally enabled ID card, issued by the Department of National Registration; and (c) updating of the digital ID system to enable secure and consent-driven data sharing and authentication in remote, online contexts. These investments will be implemented in a way that ensures operational and financial sustainability, in line with the Principles on Identification for Sustainable Development. The ID system(s) will be designed and built using international standards and leverage multivendor and open-source solutions, to the extent possible, to ensure adaptability and reduce the risk of vendor- and technology lock-in. The modernization of the system will also contribute to climate change mitigation and adaptation goals. The new hardware for identity management and data storage will be energy efficient in its operation, validated through compliance with globally recognized standards, contributing to mitigation objectives. The strengthened enabling environment for digital data governance (data protection, cyber, e-transactions, etc.) supported under subcomponent 2.1. will further contribute to resilience through greater availability and uptake of public and private sector services and transactions that can be accessed and completed online.
The modernization of the ID ecosystem will follow a people-centric and privacy-conscious approach and support more efficient, inclusive, and climate-resilient service delivery across a wide range of sectors, including health, social protection, and financial services. Following the adoption of data protection legislation, digital identity verification and authentication will, for the first time, be available to the private sector, including financial service providers. The proposed system improvements are expected to, inter alia, enable people to open accounts and complete financial transactions remotely, support improved patient- and health record management, and reduce the need for in-person visits to government offices. By enabling people to transact and access services online, the upgraded digital ID ecosystem will also mitigate the risk of service disruption if physical service delivery locations are affected by adverse climate events and help people, especially those residing in more remote islands, access critical disaster relief programs including digital payments and telehealth in the event and aftermath of climate-induced natural disasters. To close remaining gender gaps in identification—particularly with respect to the use of eFaas—the project will ensure a gender-inclusive process for obtaining and using the new physical and digital ID credentials, including through targeted communications and awareness raising campaigns. Stakeholder consultations will include women-support organizations and civil society organizations to promote the uptake of IDs and use of ID-enabled services among women. People’s data and privacy will be protected through a combination of legal, administrative, and technical safeguards, including tokenization

2.1 Legal and institutional enablers and safeguards for secure data and identity management

This subcomponent will focus on strengthening legal and regulatory frameworks and institutional capacity for improved data governance. It will finance TA, capacity building, and stakeholder consultations to support the development of legal and regulatory frameworks, roadmaps, standards, toolkits, and similar instruments in areas such as data protection, cybersecurity, electronic transactions, and identification and civil registration. In support of the successful operationalization of these frameworks, the project will also invest in strengthening of cyber incidence response and management capabilities within NCIT and the development of a toolkit and training materials on the proposed legislative frameworks for facilitating compliance among data processors. In addition, TA will be provided to support the development of a government data architecture framework. These interventions will help ensure secure processing of data, foster and maintain trust in digital transactions and services, and mitigate risks. Greater alignment of Maldives’ legal landscape with international good practice will, in turn, help promote the development and transition to digital service delivery and transactions in the public and private sector. Being able to access a wider range of services and transactions online will be particularly impactful for those living on more remote islands, where the nearest physical office or branch of a certain service provide may be located hundreds of kilometers away.

US$ 900,000

Allocation

US$ 227,366

Funds Spent

MDS

Stakeholder

4

Activity

5% Completed

Activity 2.1.1

Providing technical assistance to support the development of relevant legal and regulatory frameworks in areas such as data protection, cybersecurity, electronic transactions, identification, and civil registration and ensure secure processing of data, carrying out stakeholder consultations and capacity building.

50% Completed

Activity 2.1.2

Strengthening of cyber incidence response and management capabilities within NCIT.

0% Completed

Activity 2.1.3

Providing technical assistance to support the development of a government data architecture framework.

0% Completed

Activity 2.1.4

Developing a toolkit and training materials on the proposed legislative frameworks for facilitating compliance among data processors.

0% Completed

2.2 Modernizing of the foundational ID system and credential

The modernization of the foundational ID system and credentials will help meet growing demand for secure authentication for in-person and offline transactions. The use of legacy systems and the current ID card design limits opportunities for digital identity verification and authentication for in-person transactions. To address these constraints, the project will support an update of DNR’s existing identity management system and the issuance of new ID credentials, including a physical card. To ensure optimal design and sustainability, the modernization of the system will be informed by rigorous analysis of needs and technology choices, complemented by stakeholder engagement. To this end, the project will finance technical assistance and capacity building to support the design and implementation of upgrades to the civil registration and ID system, with a focus on the assessment of ID card design and technology options as well as secure data capture and processing, including the integration of privacy-by-design features, in line with relevant international standards and good practices. The project will also finance investments in new software, hardware, and related system integration services, as needed, for the modernization of civil registration and identity management and to support the issuance of new digitally enabled ID credentials. These updates will enable more efficient, people-centric, and secure registration, data processing, and data storage. In addition, the subcomponent will finance stakeholder engagement and communications related to enhancements of the foundational ID system to promote awareness about the systems' new features and trust in their use, with targeted measures to ensure equal access among women and members of vulnerable groups. This activity may also cover the digital ID platform and will be implemented by MoHST jointly with DNR.

US $ 3,000,000

Allocation

US$ 165,923

Funds Spent

DNR

Stakeholder

4

Activity

30% Completed

Activity 2.2.1

Providing technical assistance and capacity building to support the design and implementation of upgrades to the civil registration and ID system through inter alia assessment of options to inform the design, review of international standards and good practices for data capture and processing and use of tokenized ID numbers.

100% Completed

Activity 2.2.2

Modernising the civil registration and identity management through the necessary hardware, software, and system integrated services to enable more efficient and secure registration, data sharing, and data storage.

0% Completed

Activity 2.2.3

Enabling the issuance of new digitally enabled ID credentials through the necessary hardware, software, and system-integrated services.

0% Completed

Activity 2.2.4

Carrying out stakeholder engagement and communications related to enhancements of the foundational ID system.

0% Completed

2.3 Strengthening the digital authentication ecosystem

The project will finance the updating of the digital ID platform to facilitate remote service delivery by enabling people to securely prove who they are with a high level of assurance from anywhere, any time. Activities supported by the project will include technical assistance and continuous stakeholder engagement necessary for the successful transition from eFaas to a new digital ID platform, including activities targeted to build trust and promote access and use among women and members of other vulnerable groups. In addition, the project will finance the necessary software, hardware, and system integration services, as necessary, for the upgrading the digital ID platform. This may include the development of an authentication layer/service to enable more streamlined and transparent identity verification and authentication processes for service delivery, a user facing web portal, and a mobile application. These will, inter alia, facilitate the issuance of a virtual version of a person's ID card and enable people to consent to data sharing and authentication requests by service providers in real-time. Activities financed by the project exclude investments directly related to the processing (e.g., collection, de-duplication, 1:1 matching) of biometric data.

US$ 600,000

Allocation

US$ 5,015

Funds Spent

MDS

Stakeholder

3

Activity

0% Completed

Activity 2.3.1

Supporting the upgradation of the digital ID platform, with the necessary hardware, software and system integration services including, setting up of a web portal, and developing a mobile application.

0% Completed

Activity 2.3.2

Providing technical assistance and capacity building to support the design and development of functional requirements and technical specifications of the updated digital ID platform.

0% Completed

Activity 2.3.3

Carrying out stakeholder engagement and communications to raise awareness about new features and processes of the digital ID system.

0% Completed