Authors:
Giovanni Corti
1
;
2
;
Gianluca Sassetti
3
;
1
;
Amir Sharif
1
;
Roberto Carbone
1
and
Silvio Ranise
4
;
1
Affiliations:
1
Center for Cybersecurity, FBK, Trento, Italy
;
2
Department of Defence Studies, King’s College London, London, U.K.
;
3
Department of Informatics, Bioengineering, Robotics and Systems Engineering, University of Genoa, Genoa, Italy
;
4
Department of Mathematics, University of Trento, Trento, Italy
Keyword(s):
Identity Management, Harms Modeling, Human Rights, Institutional Path Dependence.
Abstract:
The rapid adoption of National Digital Identity systems (NDIDs) across the globe underscores their role in ensuring the human right to identity. Despite the transformation potential given by digitization, these systems introduce significant challenges, particularly concerning their safety and potential misuse. When not adequately safeguarded, these technologies can expose individuals and populations to privacy risks as well as violations of their rights. These risks often originate from design and institutional flaws embedded in identity management infrastructures. Existing studies on NDIDs related harms often focus narrowly on technical design issues while neglecting the broader institutional infrastructures that enable such harms. To fill this gap, this paper extends the collection of harms for analysis through a qualitative methodology approach of the existing harm-related literature. Our findings suggest that 80% of NDID-related harms are the product of suboptimal institutions an
d poor governance models, and that 47.5% of all impacted stakeholders are considered High Risk. By proposing a more accurate harm assessment model, this paper provides academia and the industry with a significant contribution that allows for identifying the possibility of NDID-related harms at an embryonic state and building the necessary infrastructure to prevent them.
(More)