Domestic law and policy
Papua New Guinea has concluded its final draft of the Digital ID Policy. [38]Final consultations for the PNG’s draft Digital ID Policy planned for July 2025. [39]In the draft policy, digital ID is defined as “an electronic identity verification system that allows individuals to prove who they are for the purpose of accessing services, conducting transactions, or engaging in digital interactions.” [40]Additionally, the Plan includes efforts to create monitoring indicators to assess the outcomes and effectiveness of the current digital government initiatives. [41]Moreover, while the government officials claim that the digital ID will be based on a “federated model,” it is yet to see how legislative amendments are made to build trust with the users as well as ensure accountability. [42]
Data Protection
While the Constitution of Papua New Guinea provides a “reasonable right to privacy” for every individual with respect to their private and family life, [43]there is currently no privacy and data protection legislation in place related to the implementation of the digital ID framework. [44]
Papua New Guinea’s safeguards for data protection are guided by the National Data Governance & Data Protection Policy (DGDP) 2024. [45]This policy is meant to support interoperability and reduce administrative burdens by allowing the “reuse and transparent sharing of previously submitted data.” [46]The policy specifically addresses the importance of biometric data protection within the digital ID system, acknowledging the need for robust security measures to ensure data is used only for its intended purpose and is obtained by free and informed consent. [47]
Likewise, while there is explicit mandate for encrypting data collected for digital IDs, the policy highlights the Secured Data Exchange (SDE) platform established under Section 31 of the Digital Government Act (2022). [48]This platform facilitates the encrypted exchange of sensitive data between government entities and businesses, utilizing advanced encryption technologies to secure information both in transit and at rest. [49]
International Commitments
Papua New Guinea is not currently a party to any international framework, agreement, or treaty that explicitly outlines obligations for digital IDs. [50]However, the country has ratified several key human rights treaties, such as the 1951 Refugee Convention and its 1967 Protocol, ICCPR, ICESCR, ICERD, CRC, and CEDAW. [51]
Papua New Guinea has not ratified international conventions specifically addressing statelessness, such as the 1954 Convention on the Status of Stateless Persons and the 1961 Convention on the Reduction of Statelessness. [52]However, it has acceded to the 1951 Refugee Convention and its 1967 Protocol and has incorporated some of their principles into national legislation and policy. [53]The country’s ongoing development of a digital ID system raises potential human rights issues, particularly in the areas of accessibility and inclusion.
This restricted access conflicts with Papua New Guinea’s commitments under the ICCPR, particularly Article 26, which mandates equality before the law and protection from discrimination. [54]Additionally, the digital ID requirements may impede these groups’ access to essential services, contradicting the right to an adequate standard of living and health under the ICESCR, specifically Articles 11 and 12. [55]
