Skip to content
High Severity

National ID Integration Without Oversight

Subsection (5) mandates that telecommunications providers implement subscriber verification systems interoperable with national identity databases, creating comprehensive surveillance infrastructure linking all phone users to government ID systems. While framed as subject to "oversight by the Authority," this oversight is by the same regulator enforcing the requirement, not independent judicial review. The provision lacks explicit safeguards on government access to this integrated system, individual rights to consent or object, or clear purpose limitations beyond verification. Combined with subsection (4)'s metadata retention for "national security" (undefined), this creates infrastructure enabling comprehensive communications surveillance without the independent oversight, judicial authorization, or explicit access limitations found in GDPR and ECHR frameworks.