Digital Identity

Determining true risks and their impact to the user experience of Digital ID

The reports below are our analysis of Digital ID in the context of a global pandemic.

Kipande, Kitambulisho, Huduma Namba: The Violent Ontologies and Epistemologies of National Identity Systems in Kenya. 

In 2019, the Government of Kenya through the Ministry of the Interior announced a new initiative called the Huduma Namba; a centralised, ‘single source of truth’ database that would determine the extent to which citizens would be able to access key government services.

However, the Huduma Number is the latest incarnation of the idea that a centralised register of persons is necessary to effective governance. It is designed to take precedence over the existing ID (kitambulisho) system, which has its origins in the pre-independence registration of African males in Kenya. But despite its stated confidence in its own system, the government launched the Huduma Number under a cloud of threats and coercion. Citizens were given 30 days to register for the new system and informed that failure to register would deprive them of access to banking, passports, mobile money, and even while, for instance, provision was not made for those in the diaspora. Eventually, this move raised suspicion as to the legality of this mandatory enrolment.

This paper will retraces the politics and history such centralised databases in Kenya beginning with the introduction of the kipande in colonial Kenya in 1921, through to the creation of the kitambulisho system at independence, including enrolment of women in 1978 and the modern digital database, through to the Huduma Namba itself. This critical genealogy will emphasise the reasons why the various systems were created, the ways they were expected to operate, and the political challenges they raised, as well as the extent to which these challenges were addressed. In this way, the paper argues that the fundamental flaws in Kenya’s identity systems are political and not technological and that the introduction of a digital database without addressing the political context may compound more problems than it solves.

This paper is currently under peer review.

The executive summary for the report:

A Downloadable version of the policy recommendations below is here.

Beyond Technical Soundness: Making Room for Human Rights in Kenya’s Digital Identity Projects.

Policy Brief.

Developing countries around the world are turning to digital identity systems to address development challenges. But some development challenges cannot be resolved purely on technical terms. Where they are implemented without adequate consideration of the local social and historical context, the systems can cause significant harm that undermine any putative benefits. This policy brief focuses on Kenya’s digital identity project which has been plagued with dissent and confusion in part because it has not been sensitive to key human rights concerns. It provides a preliminary human rights framework to analyse Kenya’s Huduma Number.

The report is based on a 12-month desk study conducted at the Centre for Intellectual Property and Technology (CIPIT) at Strathmore University.¹ In brief, the study found that the logic of ID systems in Kenya has always been premised in discrimination and structural violence which has neither been challenged nor addressed over the years. The Huduma Number is therefore being grafted on to a problematic basis and must be subjected to a thorough human rights assessment before it proceeds. Examples of this contextual basis include vetting for specific ethnic communities, politicisation of identity and coercion perpetrated by the Executive.

Aside from these conceptual flaws, the roll out of the Huduma Number has as well been problematic. A court held that the process was not mandatory due the absence of a Data Protection Act.² This was not the first setback. Earlier, in 2007, a unique PIN generated at the direction of an Inter-Ministerial Task Force was to be integrated into the National ID – this did not occur. In 2009, a tender was awarded to OT Morpho to print the cards but this also did not come to pass due to a court challenge. The process was restarted in 2011 through the Kenya Citizens and Foreign Nationals Management Service Act and stalled in 2014. The process has also seen insufficient public participation. The Executive began the Huduma Number registration exercise in June 2018 on the basis of an Executive Order as opposed to an Act of Parliament, precluding public participation. The enabling Act was subsequently passed via the Statute Law (Miscellaneous Amendments) Act in December 2018, but there wasn’t much public participation in that process either. Throughout all this, the government policy was inconsistent. State officers and public officials gave conflicting accounts of the mandatory nature of the Huduma Number.³ The legal validity for the Huduma Number was also questioned by the Senate due to the failure of the National Assembly to consult it during parliamentary debate.

The Huduma Number also faced a number of human rights challenges. Notably, on 22nd March 2019, the Kenya Commission on Human Rights (KCHR) and the Nubian Rights Forum filed a petition to stop the Huduma Namba registration exercise citing that it violated the constitution. Despite a concluded court case, the broader human rights concerns of civil society remain unaddressed. These include: discrimination and exclusion; data protection; state surveillance; and a lack of transparency and public participation.

Conclusions: Technical soundness cannot compensate for human rights failures embedded in the logic of a digital identity system. The Huduma Namba project is not only technically unsound but contains significant human rights issues that must be addressed. A human rights analysis of a digital ID system must address questions of harm, privacy, balance of power, democratic participation, and suitability for local context.

Summarized Policy Recommendations

Recommendations for the Executive: Conduct meaningful nationwide, public engagement on the Huduma Namba, including translations into local languages to enable full participation; and address issues of discrimination and exclusion embedded in the logic of identity systems in Kenya, particularly on the unfair use of vetting against marginalised communities.

Recommendations for the Legislature: Suspend the provisions of the data protection law until an effective human rights review can be conducted with the oversight of the Senate and in partnership with human rights actors in the country. Review, revise, or eliminate “carve-outs” such as blanket exemptions from data protection provisions for public sector activities.

Recommendations for the Judiciary: Strengthen the capacity of the judiciary to understand and effectively litigate digital rights issues.

Recommendations for Human Rights Organisations: Strengthen the capacity of Kenya’s human rights community to respond to the changes in the digital rights landscape; Conduct meaningful research into alternative methods of improving service delivery that do not divert key government resources, perpetuate discrimination and exclusion, enhance the coercive reach of the state, and engender mass surveillance and criminalisation of the society; Lobby parliament for a human rights review of the Data Protection Act (2019) and demand amendments of clauses that do not conform to international standards on data protection; Increase public awareness on the importance of digital rights as human rights, and understanding the implications of building the state’s coercive and surveillance capacity; and Support public forums and debates on the impact of digital identities on daily life.

#GoodID Twitter Chat – Appropriate Uses of Digital ID

CIPIT researcher runner up in Good ID Awards

CIPIT researcher Grace Mutung’u was announced as the runner up in the Accountability category for the Good ID Awards. See the announcement here