Digital ID Mandates Threaten Anonymity
A legislative proposal in Colorado to embed mandatory digital ID verification at the operating system level is sparking debate over the future of online anonymity. Critics argue that such mandates could undermine privacy, chill free speech, and negatively impact participation in user research by making it difficult for users to provide feedback without revealing their identity.
- A recent Colorado bill, SB24-090, which would have required drivers to produce a digital ID for law enforcement, was postponed indefinitely in May 2024; however, a separate bill, HB 25-1076, was signed into law in March 2025, officially recognizing digital IDs for notarial acts starting in 2026. - The European Union is rolling out its own framework, the EU Digital Identity Wallet (EUDI Wallet), which will be available to all citizens, residents, and businesses by the end of 2026 to access public and private services across the EU. Unlike some mandatory proposals, the eIDAS Regulation specifies that use of the EUDI wallet will be voluntary for individuals. - Poland's mObywatel app serves as a successful European case study, with four in five Poles using an electronic ID for services beyond simple verification, including accessing their driving record, viewing educational qualifications, and checking local air quality. Other countries with high adoption rates include Belgium, which issues eIDs to all citizens over 12, and Italy, whose SPID system reached over 36 million users in 2023. - Critics of mandatory digital IDs warn of "function creep," where a system created for one purpose, like identity verification, gradually expands into a tool for broader surveillance and social control, potentially chilling free speech and the right to protest. - Digital rights organizations argue that mandatory systems can exclude marginalized groups who lack digital literacy, access to smartphones, or the necessary documentation to register, thereby creating a two-tiered system of access to essential services. - To ensure cross-border use, a common technical stack is emerging based on standards like ISO/IEC 18013-5 for mobile driver's licenses and protocols from the OpenID Foundation, which are being adopted in both EU and UK projects. - In the United States, the bipartisan "Improving Digital Identity Act" was reintroduced to Congress to establish a government-wide task force for creating a secure, consent-based digital identity framework, signaling a move toward a more coordinated federal approach rather than a patchwork of state-level systems. - Other countries are also formalizing their approach; Australia's Digital ID Act 2024 commenced on December 1, 2024, establishing a voluntary accreditation scheme for digital ID providers and creating new regulatory and privacy oversight roles for the Australian Competition and Consumer Commission (ACCC) and the Office of the Australian Information Commissioner (OAIC).
