Identity card agencies across the continent have been called upon to put in place more measures that will see the protection of the right to privacy of citizens using the systems.

Discussing a topic, "Legal frameworks and governance of identity management systems,” at the ID4 Africa Forum in Kigali yesterday, experts brainstormed on privacy risks identity and identification systems may face that require attention and mitigation, as well as construction of framework to protect the legal rights and the privacy of personal information in ID systems.

The topic also saw a discussion on how the electronic capture and storage of personal data requires strong provisions of governance and management to ensure the quality, security and privacy of data, protection from misuse, exploitation, or theft.

Addressing the delegates, James Neumann, a senior counsel for transport and ICT global practice at the World Bank Group, said legal framework for the protection of people’s privacy in ID systems is important yet it may end up in vain due to lack of implementation.

"These rules are critical in making sure that we have safety around identification arrangements. Are we sure we have the appropriate processes in place to give assurance to the people that there is compliance and that the rules are more than words on a page?” Neumann said.

"And what steps are we taking to monitor, foster and encourage such compliance? Think about what we can do, which sort of outreach, what more trainings could be put in place to make sure that they are truly effective.”

Modern technology

Mia Harbitz, a former consultant and expert at the World Bank and the Inter-American Development Bank, said a legal framework that is in line with the 21st century technologies must be put in place to protect people’s privacy in ID systems.

"We have been talking about technology, which is important, but before we even start discussing technology or applying it, the legal framework has to be modern,” she said.

Harbitz added that effective identity management systems increase citizens’ trust in the ID authorities, citing an example of Peru where she said people trust the registration system more than they do the Catholic Church.

She called on people to be better digital users in order to protect their private information.

"A lot of people are putting their personal information out on the Internet yet they want their privacy protected.

We and the people need to become better digital users; we need to protect our personal information,” Harbitz said.

According to Pascal Nyamulinda, the director-general of the National Identification Agency (NIDA), Rwanda’s national ID system has never encountered any privacy threats so far.

"If anyone needs any information from NIDA concerning another person, they are required to get a warrant from either the Prosecutor-General or the Inspector General of Police.

The delegates also heard from other countries’ experiences and measures in place to ensure privacy with Josef Iroko, general legal counsel of Ghana National Identification Authority, among those who shared their country’s legal framework for ID regime.

editorial@newtimes.co.rw