Tech • AI • Robotics
Digital identity: you will never be free again (it's already here)
6/10TL;DR
Europe, national governments and private firms are accelerating digital identity systems, but repeated data breaches, coercive uses abroad and the rise of biometric verification are intensifying concerns over surveillance, exclusion and systemic vulnerability.
KEY POINTS
Digital identity can become a gatekeeper to daily life
A digital identity concentrates access to payments, transport, healthcare and online services into a single credential stored on a phone or managed through centralized infrastructure. Failures or exclusions can have immediate real-world effects. In India in 2017, errors in the Aadhaar biometric identity system reportedly cut some people off from food aid, while in Estonia a vulnerability affecting 750,000 digital ID cards disrupted a country heavily reliant on electronic identity.
Centralization magnifies security risks
Digital identity systems promise convenience, but they also aggregate highly sensitive data in one place: identity records, health information, banking proofs, diplomas and activity logs. That creates a high-value target for criminals and insiders. The underlying concern is not only hacking, but dependence on trusted intermediaries that ultimately control access and revocation.
France has suffered a succession of major leaks
The scale of recent French breaches has sharpened criticism of broader identity centralization. Between January and March 2026, 23.5 million French accounts were reportedly compromised, and since 2004 the total has reached 740 million leaked accounts and 2.1 billion personal records. A 2024 breach at France Travail affected 43 million people after attackers used simple account impersonation and went undetected for 30 days.
Sensitive state databases have also been exposed
Other incidents have hit agencies and platforms holding official or intimate data. Reported cases include leaks tied to ANTS, which manages identity cards, passports and driving licences, as well as student, school, public-sector messaging and banking-account files. A separate case in June 2025 involved a tax employee accused of selling access to sensitive French state databases to criminal networks, illustrating the danger of insider abuse as well as external attack.
The EU is pushing ahead with a unified wallet
The centerpiece at European level is eIDAS 2.0, a regulation designed to create a digital identity wallet available on smartphones, with rollout expected from late 2026. The wallet is intended to hold official credentials such as identity documents, licences, diplomas, prescriptions and banking proofs in a single application. Supporters present it as streamlined authentication across borders and services; critics see a single point of failure.
Age verification is becoming a back door to broader identification
In France, digital identity expansion is also moving through age-control rules. A 2024 law imposed age verification for pornographic content, and a late 2025 bill sought to bar under-15s from social networks. The practical objection is that verifying age often requires identifying the user or outsourcing that task to private intermediaries, weakening anonymous access for everyone rather than only for minors.
Effectiveness is disputed and privacy risks are concrete
Experience abroad suggests these systems can be both intrusive and easy to bypass. In Australia, minors reportedly found ways around similar restrictions at high rates. One age-check provider, HGO, was accused of collecting the full URLs of videos viewed by users, undermining claims that identity and browsing activity would remain strictly separated.
Political resistance can slow mandates without removing infrastructure
In the United Kingdom, a plan unveiled on 26 September 2025 aimed to make digital ID compulsory for adults by 2029, partly to fight illegal immigration and undeclared work. A parliamentary petition gathered nearly 3 million signatures, and support reportedly fell from 62% to 31% in three months. The compulsory framing was dropped, but the broader lesson is that governments can preserve technical architecture even after softening the political presentation.
AI fraud is driving demand for biometric proof
The spread of deepfakes is changing the identity debate. A Hong Kong case in January 2024 involved an employee tricked by AI-generated video and audio impersonations into transferring $25 million. Some estimates cited surges of 495% in deepfake identity fraud and up to 3,892% in fake-document fabrication, helping explain why governments and companies increasingly treat face, iris or fingerprint checks as the hardest credentials to fake.
Private firms are building global biometric systems faster than states
World, formerly Worldcoin and co-founded by Sam Altman, says it has scanned the irises of 18 million people across 160 countries to generate cryptographic proof that a user is a unique human. In April 2026, it announced partnerships with Zoom, Tinder and Discord. But the company has faced bans, suspensions or restrictions in jurisdictions including Brazil, Germany, Thailand, the Philippines, Indonesia, Spain, Portugal and Hong Kong, with regulators repeatedly focusing on the risks of a global biometric database controlled by one company.
CONCLUSION
The central question is no longer whether digital identity will expand, but who will control it and under what safeguards. As states and private firms race to become the default gatekeepers of online life, the trade-off between convenience, security and civil liberty is becoming harder to ignore.
Explain this