1、eID Country Report 2024April 2024eID Country Report 2024Adoption and data privacy in a digitized world a global benchmarking studyStrategy&April 2024The eID Country Report 2024 a survey-based benchmarking study on the global state of adoption and level of data privacyIntroduction and methodologyDigi

2、tized worldIn an increasingly digitized world,technologies such as the eID(online identification function)are gaining in importance.eID enables the use of digital public services as well as private services that require identification.Status of adoptionHowever,the extent to which the respective eID

3、solutions are adopted by both citizens and service providers varies considerably.While some countries are regarded as pioneers in this technology,others are still struggling to introduce it.Level of data privacyThis report examines how adoption is related to the level of data privacy protection offe

4、red by the respective local eID solution.How do the eID user rate,the number of eID service providers,and the level of data privacy compliance and public trust correlate with each other?This global benchmarking study examines this and other questions.Content scopeThe eID Country Report 2024 covers a

5、doption and level of data protection of the respective eID solution in various countries around the globe.This global benchmarking study aims to identify international standards and glean best practices for both the public and private sector.Geographical scopeCountries included in this years study a

6、re:Denmark Estonia France India(The)Netherlands Norway United Arab Emirates(UAE)UruguayThe countries covered in this study were selected due to the availability of data and local experts.SurveyThe information on which the eID Country Report is based was collected in a structured survey within the Pw

7、C network at the beginning of 2024.The survey participants are local experts for the respective eID solution and have worked with relevant clients in the public and private sector.eID Country Report 20242ScopeMethodologyRelevanceStrategy&22 July 2020Data privacy compliance builds trust,fostering eID

8、 adoptionExecutive summaryeID technology is gaining in importance,but the level of adoption variesAlthough eID technology is becoming increasingly important in a digitized world,its level of adoption varies greatly even in developed countries,where user rates sometimes fall below 20%of the respectiv

9、e total population.1Global eID champions focus on data privacy and service offeringAn analysis of countries with the highest user rates(an average of 87%)reveals that they offer both a high level of data privacy compliance(an average of 4.6 on a scale of 5)and a variety of services(+100 service prov

10、iders on average).2Data privacy compliance is the foundation of trustThe analysis of eID champions demonstrates that a high level of data privacy compliance has a significant impact on trust(average level of 90%),which in turn is reflected in high user rates.The number of service providers is also c

11、orrelated with trust levels.3eID laggards should urgently tackle data privacy Countries with stagnating user rates should therefore identify data privacy as a critical factor in boosting adoption.They should continually monitor and enhance data privacy to ensure a trust-building ecosystem,facilitati

12、ng successful public digitization.4eID Country Report 2024April 20243Strategy&April 2024Recent data suggests that data privacy compliance could well boost eID user rates in laggard countries1)IDnow Digital Identity Index 2023 Germany;2)eGovernment MONITOR 2023;3)Digital Strategy of Germany(2023),p.1

13、1Road to adoptionTrust driversFoundation for trust?Stagnating user ratesIn an increasingly digitized world,eID is gaining in importance because it enables the use of public and private digital services that require identification However,the extent to which eID is adopted by citizens varies consider

14、ably,even among developed countries such as Austria,Germany and ItalyBut why are user rates and number of service providersfor such an important future technology stagnating?46%55%36%16%Data privacySecurityUsabilityImage7%CompatibilityRecent survey data1)from Germany on comparable technologies shows

15、 that data protection is the most important trust driver,together with securityThis finding gains further significance when one considers another German study2)where respondents cited lack of trust as a top 5 reason why they do not use eIDMoreover,the German governments digital strategy3)also points

16、 to data privacy as the foundation for trustBut do global eID leaders really ensure a high level of data privacy compliance,and does data privacy compliance really build trust?Do data privacy compliance and trust affect eID user rates and the number of service providers?And if so,what actions do eID

17、 laggard countries really need to take in order to increase user rates and the number of service providers?TextData privacycomplianceTrustUser rateNumber of service providers0%20%40%60%80%100%User rate2021202220239%46%10%58%14%56%49%7%1%GermanyItalyAustriaGreeceCzech RepubliceID Country Report 20244

18、Strategy&April 2024All our hypotheses on the link between adoption and data privacy compliance are based on key metricsEstablishing the connectioneID Country Report 20245Key metricsDescriptionDefinitionDataHypothesisThe user rate depends not only on the eID services available,but also on the level o

19、f trustUser rateMetric reveals the percentage of respective total population using the eID solutionUser rate of respective eID was taken from official sources and is as up to date as possibleHigh levels of data privacy compliance and trust also have a positive effect on the number of service provide

20、rsNumber of service providersMetric sets out how many eID services are available in the respective countryNumber of service providers was reached through official sources and expert estimatesData privacy compliance of the eID solution increases the level of trust among citizensData privacy complianc

21、e Metric evaluates the compliance of the respective eID solution with the applicable data privacy lawsLevel of data privacy compliance is based on expert estimatesThere is a positive correlation between the level of trust and the user rate of the eID solutionLevel of trustMetric refers to degree of

22、trust of the respective population in the data privacy compliance of the local eID solutionLevel of trust in data privacy compliance is also based on estimates of local expertsChapterState of adoptionLevel of data privacyStrategy&April 2024State of adoptioneID Country Report 20246Strategy&April 2024

23、April 2024Strategy&France Identit allows for a significant number and wide range of servicesFrance IdentitUser rate(as%of total population)Lack of social acceptance and adjustment due to fear of public intrusionEstablishment of national industrial eID ecosystem with common vision and standardsMaturi

24、ty of relevant digital use cases justifies the need for secure ID solutionFrance IdentitGDPR2019Ministry of InteriorNational citizens,local residentsNational identity card,residence permitState of adoptionInitial challengesOverviewNumber of service providers59%101+Applying for voting proxyAccessing

25、the justice portalAccessing shared medical recordsUtilizing notary servicesFranceTop use casesOfficial nameDocuments linked toResponsible institutionYear introducedEligibility to useData privacy frameworkeID Country Report 20247April 2024Strategy&Lack of available digital services,which require an e

26、ID to log inTechnological compatibility issues with commonly used platforms(browsers,operating systems,etc.)Keeping up with demand for new electronic services as the user rate increasedLogging in to business registerEstonias ID card and Mobile ID are regarded as Europes frontrunners ID card and Mobi

27、le IDEstoniaID card Mobile IDGDPR2002(ID card)2010(Mobile ID)Ministry of InteriorNational citizens Local residentsNational identity card citizenship cardresidence permitState of adoptionInitial challengesOverview84%501+Filing tax reportsReceiving medical prescriptionsUsing banking servicesLogging in

28、 to patient portalUser rate(as%of total population)Number of service providersTop use casesOfficial nameDocuments linked toResponsible institutionYear introducedEligibility to useData privacy frameworkeID Country Report 20248April 2024Strategy&By working with financial services providers,MitID unloc

29、ked its potentialMitIDBy working with the Danish financial sector,attracting active users through eIDlogin to online bankingUnsuitable technology as the eID was based on Java,which was not available on mobile devicesLack of available digital public services that require an eID to log inMitIDGDPR2010

30、Danish Agency for Digital GovernmentNational citizens,local residents,organizationsPassportState of adoptionInitial challengesOverview88%101+Making use of public servicesUsing Danish insurance servicesUsing Danish banking servicesScheduling with private doctorsShopping on private websitesDenmarkUser

31、 rate(as%of total population)Number of service providersTop use casesOfficial nameDocuments linked toResponsible institutionYear introducedEligibility to useData privacy frameworkeID Country Report 20249April 2024Strategy&Both DigiD and eHerkenning allow for a significant level of adoptionDigiD and

32、eHerkenningOverall lack of digital literacy among end usersDigi-accessibility for potential end userswith disabilitiesBumpy connection process for organizations(eHerkenning)DigiDeHerkenningGDPR2003(DigiD)2011(eHerkenning)Ministry of the Interior and Kingdom relationsNational citizens(DigiD)organizat

33、ions(eHerkenning)National identify card,passport,driving licenseState of adoptionInitial challengesOverview90%101+Using local government servicesAccessing social security servicesAccessing student services and loansFiling tax reportsLogging in to healthcare servicesNetherlandsTop use cases(DigiD)Off

34、icial nameDocuments linked toResponsible institutionYear introducedEligibility to useData privacy frameworkUser rate(as%of total population)Number of service providerseID Country Report 202410April 2024Strategy&Because of fierce private competition,public MinIDs user rate is below average1)Private e

35、ID solutions includedMinID and ID-portenFierce competition with private eID solutions(e.g.,Commfides,Buypass and BankID)Cumbersome paper-based registration process using mailed pin-code sheetMistrust as public eIDsolution MinID provides for only Substantial AssuranceMinID and ID-portenGDPR2008The No

36、rwegian Digitalisation AgencyNational citizens,local residentsNoneState of adoptionInitial challengesOverview97%1)51-100Making use of public servicesSigning official documentsIdentifying in work contextNorwayTop use casesOfficial nameDocuments linked toResponsible institutionYear introducedEligibili

37、ty to useData privacy frameworkUser rate(as%of total population)Number of service providerseID Country Report 202411Filing tax reportsAccessing social security servicesApril 2024Strategy&Aadhar is among the most adopted eID solutions in the worldAadhaarInadequate technical options to enroll in Aadha

38、ar and update dataErrors with biometric authentication via fingerprints or iris scanLinking of eID solution with services for which it is technically not mandatoryAadhaarDigital Personal Data Protection(DPDP)Act2009Unique Identification Authority of IndiaNational citizens,local residentsNoneState of

39、 adoptionInitial challengesOverview94%101+Accessing social security servicesUtilizing eSign functionalitiesMaking use of public servicesUsing banking servicesAccessing telco servicesIndiaTop use casesOfficial nameDocuments linked toResponsible institutionYear introducedEligibility to useData privacy

40、 frameworkUser rate(as%of total population)Number of service providerseID Country Report 202412April 2024Strategy&In terms of user rate,Uruguays eID solution is the most advanced in LATAMIAS CLASSIC v4Initial cyber security incidents such as malware,spam and phishing Regulatory compliance challenges

41、 with regard to modern eGovernment Reputational damage due to dubious deals by private service providersIAS CLASSIC v4International Civil Aviation Organization(ICAO)Doc 93032015AGESICNational citizens,local residents,organizationsNational identity card,citizenship card,residence permitState of adopt

42、ionInitial challengesOverview85%11-50Identifying for digital servicesReducing the risk of identify theftUtilizing eSign functionalitiesUruguayTop use casesOfficial nameDocuments linked toResponsible institutionYear introducedEligibility to useData privacy frameworkUser rate(as%of total population)Nu

43、mber of service providerseID Country Report 202413April 2024Strategy&With 100%user rate,Emirates ID is the most popular eID solution in the worldEmirates IDEnsuring widespread awareness of eIDsimportance among the whole populationOvercoming significant logistical and operational challenges in order

44、to implement Emirates IDEstablishing a legal and regulatory framework that supports the objectives of Emirates ID while protecting individual rightsEmirates IDPersonal Data ProtectionLaw(Federal Decree LawNo.45 of 2021)2006Federal Authority for Identity and CitizenshipNational citizens,local residen

45、tsNational identity card,passport,citizenship card,residence permitState of adoptionInitial challengesOverview100%501+Using local public servicesUsing banking servicesLogging in to healthcare servicesAccessing telco servicesManaging employment and businessesUnited ArabEmiratesOfficial nameDocuments

46、linked toResponsible institutionYear introducedEligibility to useData privacy frameworkUser rate(as%of total population)Number of service providersTop use caseseID Country Report 202414Strategy&April 2024Level of data privacyeID Country Report 202415Strategy&April 2024Strategy&April 2024Source:PwC S

47、trategy&analysisThe results from most of the surveyed countries confirm their reputation as global champions in eID technologyResults overview84%100%588%100%590%80%597%100%585%100%494%100%459%60%4101+501+101+101+501+51+11+101+FREEDKNLNOUYINUAEeID user rateeID user rate(as%of total population)Numbero

48、f service providersNumber of eID service providersLevel of eID data privacy compliance Data privacy compliance of eID(5=very high)Level of trust in eID privacyLevel of trust in eID privacy(in%)87%101+4.690%100%100%5eID Country Report 202416Strategy&April 2024eID frontrunners take various technical a

49、nd other measures in order to comply with data privacy requirementsData privacy complianceGlobal eID frontrunners have almost all possible technical measures in place especially Norway,which has a 97%user ratePrivacy-sensitive biometric authentication is rarely used in European and GDPR-regulated co

50、untriesOn the other hand,almost all countries,especially the GDPR-regulated ones,provide for data privacy certification(e.g.eiDAS)Vast majority of global eID frontrunners are publicly managed,although private service providers are also used in most of these countriesOther measuresTechnical measuresC

51、ountryKey observationsData privacy certificationBody to collect+manage dataRight to view+manage dataTwo-factor authenticationPassword policiesBiometric authenticationTokenisationEncryptionDKPublicEEPublic private partnershipFRPublic private partnershipINPublic private partnershipNLPublicNOPublicUAEP

52、ublicUYPubliceID Country Report 202417Strategy&April 2024Results show that data privacy compliance correlates positively with trust levels,in turn increasing user rateRelationship between data privacy compliance,level of trust and user rateeID Country Report 2024190(not existing)12345(very high)1101

53、200%20%40%60%80%100%120IndiaUAEDenmarkNetherlandsNorwayEstoniaFranceUruguayLevel of trust Data privacycomplianceOverall,high levels of data privacy compliance and trust in eID privacy are evident across the surveyed countries:50%of these countries demonstrate an outstanding commitment to both data p

54、rivacy compliance and trustSurvey results suggest a potential positive correlation,implying that higher data privacy compliance may align with elevated trust levelsAdministrators should therefore take data privacy seriously as a trust-building factor,and design respective eID solutions in a complian

55、t wayAnalysesKey observationsSurvey results suggest a positive correlation between level of trust and user rates,with trust levels averaging only 3%higher than user ratesTherefore,the users level of trust in the publicly provided infrastructure isa key success factor for eID solutionsHowever,with co

56、untries displaying both high levels of trust and high user rates,it is important to explore additional factors,such as the number of service providers,thus ensuring a thorough analysis0%100%FREEDKNLNOUYINUAELevel of trustUser rateLevel of trustUser rateComplianceStrategy&April 2024Insights reveal a

57、positive relationship between service provider quantity,compliance and user rate,albeit with some variabilityLink between data privacy compliance,number of service providers and user rateeID Country Report 2024210(none)12345(very high)Numberof serviceprovidersData privacycompliance11+51+100+500+Urug

58、uayNorwayIndiaFranceUAEDenmarkNetherlandsEstoniaAnalysesKey observations0%20%40%60%80%100%Number of service providersUser rate500+100+51+11+0Number of service providers User rateComplianceAcross all surveyed countries,it can be observed that a large number of providers(mostly 100+)offer eID services

59、Our results suggest that countries with a higher level of data privacy compliance tend to boast a larger number of service providersGenerally,however,there is evidence to suggest that service providers are also reassured by a data privacy-compliant regulatory environmentOverall,there is a positive t

60、rend in the eID user rate as the number of eID service providers increases:Countries with 100 service providers report the highest user eID rates,underscoring the positive impact of service diversityon user engagementTherefore,regulators should create an environment in which providers are encouraged

61、 to offer a wide range of eID servicesStrategy&April 2024In order to establish a secure and user-friendly eID solution,four best practices are critical to successData protection by design and default2Continual monitoring and enhancement Long-term projects and infrastructure development offer constan

62、t opportunities to identify the need for improvement and establish how optimisation can be achievedMonitoring and enhancement processes involving all stakeholders should be agreed at an early stage1In order to establish trustworthy and compliant eID-solutions,privacy requirements should be considere

63、d right at the outsetPrivacy principles can be particularly helpful in guiding how to design and implement eID-solutions and their technical infrastructureRecommendationsWhen processing personal data,appropriate risk assessments must be carried out before the processing is initiatedA thorough analys

64、is helps to ensure that any risks are recognised at an early stage and that suitable mitigation measures can be decided on as early as possibleResponsible handling of privacy risks strengthens customer confidence and builds trust for new products4Risk assessments and measures3Thorough documentation

65、and overviewThorough,precise,and transparent documentation is a statutory requirement and is crucial for ensuring compliance of nationwide projects,allowing stakeholders to meet their obligations and be accountable to authoritiesComplete documentation also ensures that a holistic overview of complex

66、 infrastructure,dependencies and implementation of privacy requirements is providedeID Country Report 202422Strategy&April 2024Safeguarding the reputation of all stakeholdersMaintaining the reputation of all involved stakeholders benefits ongoing and future projectsGrowing data protection awarenessG

67、rowing awareness leads to more frequent assertion of data subject rights,fostering trust in public bodies and stakeholders when they comply with legal processes to meet user expectationsResponsibility for governments to complyGovernment bodies,and their IT solutions,have a general obligation to comp

68、ly with legal requirementsData protection and privacy should be utilised as key success factors in bolstering user attractivenessData protection and privacy as critical success factorsData protection and privacy have become a critical element in customer and user trust A lack of necessary data prote

69、ction awareness can lead to the failure of a product launch and cause lasting damage to trust and accountabilityeID Country Report 202424Strategy&April 2024Our local eID experts are available throughout the world and look forward to talking with youLucas SyDirector,Strategy&Matthias BleidieselDirect

70、or,PwC LegalNiklas KelbchManager,PwC LegalLukas David HoffmannSenior Associate,Strategy&Malien ZehnpfenningAssociate,Strategy&NetherlandsPascal MannotPJan VisserSenior MTosja SelbachSenior A FranceJean-Philippe DuvalPNorwayMarius VoldenSenior MTrung X.TranDElisabeth S.LkkebDIndiaAmit JoshiDSudhansu

71、JainSenior MHimanshu WaliSenior MDenmarkClaus Nrklit RoedDEstoniaKaidi-Kerli KrnerManagerkaidi-UruguayRichard MoreiraPJorge SerDRafael PereiraMMarcos GimenezDeID Country Report 202425United Arab EmiratesHani ZeinPDany KaramPAbdallah ElhorDirectorabdallah.EIshika SahayM 2024 PwC.All rights reserved.PwC refers to the PwC network and/or one or more of its member firms,each of which is a separate legal entity.Please see for further details.Disclaimer:This content is general information purposes only,and should not be used as a substitute for consultation with professional advisors.Thank you