Idaho law limits use of digital ID, bans compelled adoption

Idaho law limits use of digital ID, bans compelled adoption
Idaho Governor Brad Little has signed into law Senate Bill 1299, which limits how public entities can use digital identification while stopping short of some of the stronger remedies included in the bill’s original version.

The result is a law that still places meaningful limits on mandatory digital ID and related device access, but with enforcement mechanisms that are more restrained than what lawmakers first proposed. The act takes effect July 1.

The new law adds a new section to Idaho code defining digital identification as an electronic credential issued by a public entity and stored or displayed on a personal electronic device to establish a person’s identity, age, or legal status.

It defines “public entity” broadly to include the state, agencies, political subdivisions, and contractors acting on the state’s behalf.

At the heart of the measure is a ban on compelled use. Public entities may not require anyone to obtain, maintain, present, or use digital identification, and they may not deny, delay, condition or reduce any service, benefit, license, employment, education, or access because a person refuses or is unable to use it.

The law also states that physical, non-digital identification authorized under Idaho law remains valid for all governmental purposes.

The statute also includes device privacy protections. A public entity may not require a person to surrender, unlock, or relinquish control of a personal electronic device for identity verification, and presenting digital identification does not constitute consent to search or access any other contents of the device.

It further limits digital identification to immediate identity verification and bars public entities from tracking individuals, retaining identity data beyond a transaction, or using digital identification as a universal or shared credential across agencies.

But the final law is narrower on remedies than the introduced bill. The original version said information incidentally observed on a device could not be used to establish probable cause or justification for further search or seizure, and it allowed statutory damages of $500 to $2,500 per violation along with civil penalties of up to $5,000 for knowing violations after notice and an opportunity to cure.

A Senate amendment stripped those provisions out. In their place, the final law gives the Idaho attorney general authority to enforce the statute after written notice and a 15-day cure period.

If a violation is not cured, the attorney general may seek injunctive relief in district court.

Aggrieved individuals may still bring actions for declaratory or injunctive relief, and prevailing plaintiffs may recover attorney’s fees and costs, but the specific statutory damages and civil penalty provisions from the introduced bill are gone.

The amendment also says no public employee is personally liable for actions taken within the scope of employment.

Digital ID trust cannot be fully automated, it needs the human layer: GITEX Africa panel

Digital ID trust cannot be fully automated, it needs the human layer: GITEX Africa panel

A panel at the recent GITEX Africa 2026 event, which took place from April 7–9 in the imperial Moroccan city of Marrakech, described digital ID trust as something achievable not only through multi-stakeholder collaboration but also by building a strong human layer.

Three panelists from government and the private sector shared their perspectives on how collaboration between the parties involved can sustain the digital identity and trust momentum currently being built around the world.

The focus of the panel, moderated by CNBC Australia’s Amanda Drury, was on how such partnerships can boost the adoption of digital services made available to citizens across sectors, in order to improve their daily lives.

El Hadji Malick Gueye, General Director for Senegal at fintech startup Wave; Dr. Muhammad Sharif, Advisor for Science and Environment at the Rabat-based Islamic World Educational, Scientific and Cultural Organization (ICESCO); and Dr. P.C. Jaffer, Secretary to the Government in charge of budget and resources for the Indian State of Karnataka, all emphasized the undeniable role of trust in digital ID.

Gueye described trust as a fundamental pillar of every country’s digital ecosystem but opined that it cannot be entirely automated. He and the other speakers agreed that technology alone will not convince people to trust digital identity systems. Instead, trust must be built through human networks, inclusive governance, and practical technical literacy among decision-makers.

This is exactly what they are doing at Wave, he said. Wave, which describes itself as the first unicorn in Francophone Africa, operates in ten West and Central African countries and is one of the fintechs working to deepen financial inclusion across the continent.

“Trust is vital, especially in Africa, where human contact remains very important. Even though we are a digital company, we deliberately maintain a vast network of agents. Across Africa, we have 150,000 agents,” Gueye said.

“They act as our first ambassadors. They explain the product, help customers understand the process, and reassure them. Even in countries like Senegal, where we have reached a level of saturation, they continue to help us push our development further. The reality is that trust cannot be fully automated. That is why we leverage our agents to continue our growth dynamic.”

Sharif stated that in building trust, cooperation is a very important aspect, and that is one of the priorities of their work at ICESCO.

“At ICESCO, we are firmly convinced of one thing: the importance of international cooperation. We actively foster it,” he said, adding that networking is one of the key pillars of their work as an intergovernmental, non-profit organisation that operates through a large setup of national commissions.

For Jaffer, building a solid human layer to enhance digital trust entails a great deal, including improving technical capacity and enabling a full understanding of the technology involved.

“That is a very significant challenge because most of the people who manage government programs do not come from a technology background, and they need not. They do not need to know every nuance of the technology,” he said.

“However, designing any digital system actually requires two distinct sets of skills. First, you need a very clear understanding of your domain or sector. Second, you need a certain level of technical literacy, not necessarily the ability to write code, but an understanding of the broader architecture, business processes, and the kinds of algorithms suited to the task at hand,” he stated.

He added that with constant work on different systems over time, it is possible to acquire that knowledge.

“Myself, I come from a humanities background. My formal qualifications are in education, but through experience, I have developed an understanding of how to design digital projects and can engage meaningfully with technical teams. The key thing is being able to translate your sectoral knowledge and requirements into language a technical person can understand,” he shared.

To support his point about capacity building, the official cited the work being done by the International Institute of Information Technology in Bangalore (IIIT-B), where MOSIP, a major global player in trusted digital ID today, was incubated.

He added that programs such as IIIT-B’s cover questions including what kind of digital ID platform to use, whether to opt for open-source or proprietary solutions, and what database structures are appropriate at different scales.

The speakers also shared their thoughts about what role AI-powered identity verification systems can play in bolstering digital ID trust.

“We do leverage AI, and it plays an important role. However, we have to be careful. Simply importing AI solutions developed elsewhere and applying them directly to our markets is not the right approach. I fully agree with my colleague’s earlier point about the need for contextual adaptation. AI has to be fitted to the specific ways people interact with digital systems in our African context,” Gueye advised.

According to Jaffer, the difficulty in building digital ID systems that enable smoother and faster access to government services is huge, but it is possible for countries to keep pace with those expectations by designing better systems which they can continue to upgrade, and ensure data security and privacy.