Maldives makes strides in digital ID as Taiwan faces scrutiny
Legislators in the Maldives are making strides toward enacting a digital ID legislation, with the most recent development being the initiation of a public consultation.
Lawmakers are seeking public comments on the draft of the nation's Digital Identity Bill, which is designed to improve residents' identification by establishing the Maldives Digital Identity System (MDIDS).
A community reading of the incoming legislation identifies five key objectives, the first of which is the provision of a system that allows residents to identify themselves in both in-person and online transactions.
Furthermore, the system will prioritize privacy and data security while maintaining the economic benefits flowing from digital IDs. There are plans by authorities to use MDIDS as the foundation for a digital payment system akin to India's Unified Payment Interface (UPI).
The Maldives is also eyeing the possibility of using the digital ID legislation to crack down on illegal migrants flooding the tiny island nation.
Ahead of the legislative hurdles, members of the public are urged to submit written comments on the first draft of the bill. The Ministry of Homeland Security and Technology (MoHST) will lead the consultation exercise and release all comments to the public.
However, the MoHST will recognize requests for confidentiality provided they are justifiable, but a non-confidential version must be attached to the submission.
'The MoHST seeks comments from government stakeholders, the business community, and the general public on the draft Digital Identity Bill,' read the statement. 'All comments should be supported as much as possible by detailed explanations and must identify the sources that the respondent is relying on.'
The Maldives is keen on catching up to regional first-movers in digitization and exploring the possibilities of partnerships. Recently, it partnered with Dubai-based MBS Global to build an $8.8 billion blockchain hub in an attempt to diversify its economy from tourism and fishing.
The country has also inked a Memorandum of Understanding (MoU) with Estonia to explore emerging technology use cases for public services. Despite the forward-thinking initiatives, authorities are clamping down hard against illegal operators of digital currency services and other bad actors within their borders.
Taiwan's digital ID system under fire
Several months following the public launch of Taiwan's national digital ID system, the initiative has attracted significant criticism concerning the security and privacy risks it presents to the public. Chinese Nationalist Party (KMT) Legislator Ko Ju-chun is leading the barrage of criticisms against the digital ID system, arguing that residents face grave risks. Dubbed the Natural Person Certificate system, over eight million digital certificates have been issued, but only around four million are in active use.
The lawmaker revealed that bad actors are using the porous security system in the digital ID system for criminal purposes. Up to four times as many flagged bank accounts were opened using Natural Person Certificates over other means of identification, said Ju in a statement.
Ju based his argument on the latest data from the Taiwanese Financial Supervisory Commission (FSC). He added that scammers are gaining access to innocent residents' personal details and using the digital ID system to open a wave of bank accounts for criminal activities.
Commercial banks are striking back, with up to 17 institutions halting the use of digital IDs for identification purposes. Ju hints that more financial institutions are poised to pause the use of the Natural Person Certificate system, defeating the entire purpose of their creation in the first place.
The lawmaker launched a tirade against the government over the handling of the security breaches in the digital ID system. He terms the government's approach as 'absurd,' noting that a public advisory urging individuals to set limits on transfers and asking banks to suspend withdrawals on inactive accounts is 'untrustworthy.'
Ju extends his criticism to the Ministry of Digital Affairs, the National Police Agency, and the Ministry of Interior for failing to take decisive action against bad actors. He recommends new security measures to combat the rising tide of bad actors so the government can gain the waning public trust.
'Government agencies should stop promising lots and delivering little, and instead do their jobs, which is to make Taiwan a haven for digital technology developers, not scammers,' said Ju.
Despite the criticisms of its digital ID system, Taiwan is marching on to introduce a wave of digital products for its residents. At the top of the list is a national digital wallet to be launched before the end of 2025 that will hold all citizens' personal information.
The country is also rushing to plug the holes in its anti-money laundering (AML) rules, aligning itself with international standards. On the regulatory side of things, Taiwan has unveiled new digital asset rules and an artificial intelligence (AI) draft bill designed to improve economic gains.
Watch: Digital identity, digital assets enable Web3
title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen="">
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Telegraph
6 hours ago
- Telegraph
Public think Labour will use new online laws for censorship
New laws will be used by the Government to censor content posted online, a majority of the public believe. There is strong backing for the aims of the Online Safety Act to protect children from online harms but deep scepticism about the consequences for people's privacy and whether it will work in practice, a major poll of more than 2,000 adults by Ipsos has revealed. While 69 per cent supported age verification for platforms hosting harmful content, half of those polled were not confident it will stop under-18s accessing it, according to the poll, published exclusively today by The Telegraph. More than six in 10 (61 per cent) believe the Act will lead to personal data being compromised and a similar proportion (58 per cent) expected increased government censorship. More than four in 10 say it will threaten free speech online. It follows The Telegraph's disclosure of a secretive 'spy' unit which has been used by the Government to target social media posts criticising migrant hotels and 'two tier policing'. Last week the US state department criticised the Online Safety Act over its potential impact on free speech as it warned the British Government had 'repeatedly intervened to chill speech' after the Southport attack. The Act also sparked a political row after Reform UK leader Nigel Farage pledged to repeal the Act as a threat to free speech, prompting Labour to accuse him of being on the side of sex offenders like Jimmy Savile. Keiran Pedley, Ipsos director of UK politics, said the poll exposed a 'significant paradox in public opinion'. 'While there is a clear and broad desire to protect children online, reflected in the strong support for age verification, this is matched by deep-seated scepticism about whether the Act can deliver on its promises,' he said. 'Data breaches and the potential for censorship are highlighted, as the public doubt these measures will be effective against tech-savvy young people. This creates a major challenge for platform operators and regulator, Ofcom: how to implement robust age assurance systems that the public actually trusts and is willing to use.' Nearly half (48 per cent) believe the Act will enable parents to better protect their children from online harms and 46 per cent said it will enable adults to more easily block inappropriate material. However, 44 per cent believe it will limit free speech online, against 40 per cent who do not. A similar proportion (43 per cent) fear it will limit adults' access to 'non-harmful' information online. Half of those polled (48 per cent) said they would be likely to submit proof of age to access a platform or website, against 30 per cent who would not. However, this dropped to 14 per cent for porn sites and 19 per cent for dating apps. More than half (56 per cent) were comfortable with using their email as proof of age but the public drew a line at financial information, with fewer than one in five saying they would use a credit card or banking information. Almost seven in 10 Britons (69 per cent) believed it would be easy for children and young people to get around safeguarding procedures by social media platforms. More than half (51 per cent) feared that it would lead to children using less safe parts of the internet such as the dark web. Nearly a quarter (24 per cent) admitted that they used a VPN when browsing the internet, a technology that enables users to encrypt their communications and hide their IP address. A similar proportion (22 per cent) said they had considered or downloaded a VPN since the introduction of the Online Safety Act. Despite this, four in 10 (40 per cent) believed the Act would prevent children and under 18s from seeing illegal or harmful material, although 52 per cent did not believe it would. While 37 per cent believed the legislation would make platforms and websites remove harmful and illegal content, 51 per cent did not.
Telegraph
14 hours ago
- Telegraph
HMRC sacks dozens of staff for snooping on taxpayers
Have you worked or do you work at HMRC? Tell us about a data breach in confidence at: money@ Information that needs a higher level of security can be submitted here. Please see our Privacy Notice. HM Revenue and Customs sacked 50 workers last year for breaking data privacy rules and snooping on taxpayers' records. In total, 354 tax employees have been disciplined for data security breaches since 2022, of whom 186 have been fired, The Telegraph can reveal. The tax office admitted that some were dismissed for looking up taxpayers' confidential information. HMRC holds a vast amount of sensitive data such as addresses, salaries and National Insurance numbers. Staff are forbidden from looking up these details unless they have a genuine business reason. Despite the warnings, a number of employees have been caught accessing unauthorised accounts using HMRC's IT systems. In 2024-25, 96 staff were disciplined for data security breaches, of whom 50 were later dismissed, according to data obtained by The Telegraph via a Freedom of Information request. HMRC said this represented less than 0.1pc of its nearly 68,000 staff. The numbers have fallen since last year when 138 employees were disciplined, and 68 were given the sack. The figures covered all data security breaches and not just staff searching for taxpayers' records. Other examples of data breaches include making changes to records without authorisation, losing sensitive documents or failing to securely dispose of inadequately protected devices. In one incident in 2023, an employee was sacked from HMRC after sending the data of 100 individuals to his personal email address. According to court documents, the staff member was visiting a business as part of a compliance check when he emailed himself a PDF containing a list of staff members' details – including their salaries and National Insurance numbers – and printed it off for the meeting using his home computer. The incident was flagged to his line manager by the analytics team responsible for identifying data breaches and he was dismissed for gross misconduct following an investigation. The worker took HMRC to an employment tribunal, arguing he had not been thinking straight at the time due to anxiety. However, the tribunal dismissed his claim for wrongful dismissal. Data breaches like this have been on the rise since the pandemic because of remote working, according to one HMRC manager cited in the tribunal. In an email reminding staff never to send personal data outside the tax office's systems, the line manager of the claimant wrote: 'There have been more incidents of this recently as we are working from home a lot more since Covid, but never send anything to your own private email address to print off that contains any personal or business data.' Former HMRC inspectors said the importance of data security was drilled into employees from day one. Ronnie Pannu, of advice firm Pannu Tanu, said: 'When I was in HMRC, there was always a strong message from above that viewing a taxpayer's records where this was not necessary for a particular purpose was a serious issue which could have serious consequences for the individual concerned.' John Hood, of accountants firm Moore Kingston Smith, said: 'Any HMRC employee foolish enough to look up personal information that is not part of their usual responsibilities faces a ticking time bomb as most searches are tracked. 'As an additional security, some parts of the system are restricted so that only specifically authorised personnel can access them, such as the departments dealing with MPs and civil servants.' All staff receive mandatory training on data security, and HMRC restricts access so workers can only look up customer records if this is needed for their specific role. In addition, the tax office tracks staff activity on its systems to deter misuse and record breaches. Employees who break the rules are investigated and will face penalties, with each incident considered on a case-by-case basis. Ellen Milner, of the trade body the Chartered Institute of Taxation, said: 'Taxpayers have to be able to trust that the private information they provide to HMRC will not be leaked, supplied to criminals or used for any purpose other than that for which it was provided, and in accordance with the law. 'That is why HMRC treats unauthorised access to records and data so seriously, and it is good to see that where breaches happen, HMRC will act.' On the social network, Reddit, users who claim to work at the Civil Service say they have seen new recruits at HMRC and the Department of Work and Pensions (DWP) fired after looking up their own records or those of friends and celebrities out of curiosity. In 2021, an administrative officer was sacked from DWP after looking up her neighbour's address using Searchlight, a database containing information about almost everyone in the country. According to the court documents, DWP workers are explicitly told not to look up themselves, families or celebrities. A DWP employee present at the tribunal described it as 'the number one rule' impressed upon everyone who joined the department. Serious data breaches must be reported to the Information Commissioner's Office. HMRC's annual report shows that there were six incidents last year of employees changing customer records without permission, and two of staff losing inadequately protected devices. HMRC is under growing pressure to strengthen its data security as criminal attacks grow more sophisticated and as it shifts towards becoming a digital-first organisation. It recently emerged that 100,000 taxpayers had been affected by phishing attacks in the past year. Criminals used stolen credentials to access taxpayers' accounts and claim significant sums in rebates. There was no loss to the individuals, who have since been contacted, and a number of arrests were made – but the cost to the taxpayer was £47m. A spokesman for HMRC said: 'Instances of improper access are extremely rare, and we take firm action when it does happen, helping prevent a recurrence. 'We take the security of customers' data extremely seriously and we have robust systems to ensure staff only access records when there is a legitimate business need.'
BBC News
2 days ago
- BBC News
Instagram's new 'Map' is a digital ghost town
Some 170 million people got access to Instagram's new location-sharing feature, so why is the Map so empty? In the app's loneliest corners, Meta and its users may be fighting a quiet battle. On Saturday, I pulled up my phone settings and did something I haven't considered in almost a decade, a move so brazen I've spent my whole career telling people to avoid it. I gave Instagram access to my location. Millions of Americans were greeted by a pop-up last week inviting them to try the new "Instagram Map". The feature lets users share their exact, real-time location with each other. If you want, you can blast your whereabouts to every single one of your mutual followers. For many, however, the app's history makes it an unsettling place for this kind of intimacy. Instagram bills the Map as "a new, light way to connect". But a trip through the feature suggests a different reality, one defined more by emptiness than connection, with users unwittingly broadcasting their location and urgent warnings from the few people watching. It lays bare what may be an emerging conflict between the platform and its users that strikes at Instagram's very core: what is this app even for? On one hand, it's nothing new. Apple and Android phones have let you exchange locations with your contacts for years, and Snapchat has the nearly identical Snap Map that works the same way. In modern relationships, location sharing is as popular as it is problematic. The New York Times described the trend with the catchy headline "I Love You, Let's Stalk Each Other" back in 2023.
