Bhutan

Legal Identity

Since the 1980s, births and deaths in Bhutan have been recorded through Family Diaries, which were paper based.^[1] This system changed in 2003, where the Department of Civil Registration and Census (DCRC) began computerising these diaries to create a more comprehensive database called the Bhutan Civil Registration System (BCRS).^[2] The primary aim of this system was to issue citizenship cards, while also integrating other details such as births, deaths, family ties, and movement of other family members.^[3] According to Bhutan’s Immigration Rules and Regulations (2023), the proof of identification or legal identity for Bhutanese nationals is the Citizenship Identity Card or an identification document issued by the DCRC.^[4] In an effort to be more inclusive and accessible, births and deaths can be registered in the BCRS online.^[5]

Once a child’s birth is registered in Bhutan, the DCRC instantly assigns them with a Unique Citizenship ID (UCI) which can be activated and utilised once the child turns 15.^[6] While processing this card, the biometrics of citizens are collected and stored in the BCRS biometric database, which upon the death of the individual gets deactivated.^[7] Non-residents, who are also a part of this system, are issued Special Residents (SR) Cards.^[8] Only citizens and SR card holders can register births and deaths through the civil registration system of Bhutan.^[9] In order to apply for an SR card, one must provide their own citizenship as well as the citizenship of their mother and father, which presents a major administrative barrier for stateless people.^[10]

In case there is a delay in registering a child’s birth, the child will be provided with a civil status, namely “delayed birth registration”.^[11] Although there is no late fee for registration, registering a child once the stipulated time has passed becomes more complex, as it requires filling up an individual registration form, attaining the requisite endorsement by local government authorities, and providing reasons as to why there was a delay in the birth registration.^[12]

Bhutan introduced its digital ID system, the National Digital ID (NDI) in 2022 with an aim to provide “secure and verifiable digital ID credentials”.^[13] It is the first country in Asia to roll out a decentralised Self Sovereign Identity (SSI)-based system.^[14] The SSI provides a foundational element, connecting the citizens, government, and the private sector of Bhutan.^[15] The Bhutanese government claims that the SSI-based system gives users complete control over their personal data and what information they provide to prove who they are to access websites and other services.^[16]

While there is no data to suggest public involvement in the adoption of the digital ID, media reports show that there were discussions and debates in the Parliament that led to the adoption of the NDI Framework.^[17] The adoption of the NDI framework has been a collaborative effort between various government institutions and private actors, who came together to establish Bhutan NDI, a body that caters to the issuance and working of NDIs.^[18]

The government, with the Government Tech Agency and DCRC, also developed the Integrated Citizen Services System to further establish DPI and reduce further administrative barriers.^[19] This system also aims to streamline access to services such as access to legal documentation like a birth certificate, marriage certificate, or death certificate, and access to agriculture sector, health, and judicial services through the Citizens portal website and the mobile application.^[20] However, this service is only accessible to citizens as it requires an NDI number.^[21] While a direct linkage between citizenship and digital ID cannot be drawn through the Act, it can be reasonably ascertained from official sources and Bhutanese media that the digital ID can only be issued to a citizen of Bhutan.^[22]

The National Digital ID (NDI) app holds personal information of users and is designed as a mobile wallet which holds identity related documents that citizens and residents can use to verify on websites and other services.^[23] Biometric data of citizens is collected through this application where foundational IDs can be provided to citizens through the facial recognition process.^[24] Bhutan does not recognise dual citizenship,^[25] hence dual citizens and other non-citizens cannot access digital IDs in Bhutan. Since Bhutanese citizenship is a prerequisite to accessing the Bhutanese digital ID,^[26] there is no information available as to how stateless populations will access basic services as the country moves to link access of basic services with the NDI, despite it not being mandatory for citizens to secure.^[27]

Domestic Laws and Policy

The NDI was introduced after the establishment of the NDI Governance Framework by the Bhutanese Parliament by enacting various legislative documents, the key one being the National Digital Identity Act of Bhutan (2023) (‘NDI Act of 2023’).^[28] The NDI Act does not expressly define digital ID but simply states its purpose which is to create a digital economy where citizens as self-sovereign identities can access both government and private sector services.^[29]

Data Protection

The Bhutan NDI has in-built-in provisions for data protection.^[30] Since the NDI is based on principles of self-sovereign identity, each individual has complete control over their personal information, thereby setting a benchmark for digital privacy.^[31] Furthermore, the NDI governance framework follows a stringent approach towards data collection by ensuring that any user information is neither collected nor stored.^[32] The privacy policy of NDI Bhutan states that while a copy of the facial data is stored with the Ministry of Home Affairs to ensure that identity theft or duplication does not take place, no other data provided is stored on the database servers of the NDI.^[33] All digital information present in the digital wallet belongs to the user and cannot be accessed in any form (encrypted or otherwise) by the NDI Admin or a third party, unless the user consents to storing it on the NDI application’s cloud servers.^[34] This information is only accessible in an encrypted format and cannot be read by the NID Admin or other third parties.^[35]

The privacy provisions ensure that the data collected at the time of registration is stored and safely secured, creating accountability on those involved in the process.^[36] There is no evidence to establish the usage of this data by the government against stateless persons, refugees or migrant populations since many of them would have been unable to register for the NDI in the first place since they cannot validly prove their citizenship.

International Commitments

Bhutan has not ratified any specific treaty or legislation in relation to digital ID. As a party to the CRC, Bhutan has obligations to ensure the right to be registered immediately at birth and the right to an identity.^[37] Bhutan’s CRVS system procedures do not align with these obligations as only citizens and SR card holders can register births, leaving non-citizens without access to the SR card and stateless people unable to register births.^[38] Stateless people are also unable to access a legal identity in Bhutan, further contradicting Bhutan’s obligations under the CRC.^[39]

Legal Identity

Digital ID Overview

Law

Domestic Laws and Policy

Data Protection

International Commitments

Designed to Include?