A Risk Assessment Framework for Digital Identification Systems
Abstract
We introduce a risk assessment framework for digital identification systems, as well as recommended best practices to enhance privacy, security, and other desirable properties in these systems. To generate these resources, we created a casebook of a wide range of digital identification systems, and we then applied expert analysis and critique to identify patterns. We piloted the framework on several reviews within our organization over a period of approximately one year, and found it to be robust and helpful for those reviews. This work is intended to inform product review and development, product policy, and standards efforts, and to help guide a consistent responsible approach to digital identification across the broader digital identification ecosystem.
Fields of Study & Subjects
Information and Cyber Security
Privacy
Security
and Data Protection
User Authentication and Security Systems
Publication details
- Journal / source
- Proceedings on Privacy Enhancing Technologies
- Publisher
- Privacy Enhancing Technologies Symposium Advisory Board
- Volume
- 2026
- Issue
- 2
- Pages
- 242–258
- Publication date
- 1 April 2026
- Language
- EN