Digital identity and human rights

An identity system decides who can prove who they are, to whom, at what cost, under whose observation. Those are questions about power before they are questions about technology — which is why the design of identity infrastructure is a human-rights subject, whether or not its designers think in those terms. A system can make privacy the default or the exception; it can make participation universal or conditional; it can make surveillance impossible or merely impolite.

The service this site documents is stewarded by DETIO FOUNDATION LTD, whose constitution names the commitment directly. Clause 6.1.3 establishes, as a charitable purpose of the company, "promoting and protecting human rights, including privacy, dignity, autonomy, equality of access, and protection from unlawful surveillance, coercion, discrimination, and private capture of essential digital infrastructure." This article unpacks what each of those words demands from an identity system — and what it looks like when they are engineered rather than promised.

In identity systems, privacy is decided by architecture, not policy. A system that routes every authentication through a central observer produces a life-log of everyone's interactions as exhaust; no privacy policy can un-produce it. Engineering privacy means the observer never exists: evidence encrypted on your device, services receiving proofs rather than data, no central party in the presentation loop. Privacy achieved this way needs no one's ongoing good behaviour — which is the only kind of privacy that survives changes of management.

Dignity in identity means the system serves the person's account of their own life, not an administrator's. Concretely: you see everything held about you; you correct errors through re-verification you control; you are not silently scored or flagged by processes you cannot inspect; and you can leave entirely, with deletion that is real because encryption keys are destroyed. Autonomy is the active form of the same value: participation is voluntary, every disclosure is a consented, purposed, revocable act, and refusing to verify costs you only what genuinely requires verification — nothing is bundled.

These sound like product features. They are rights implementations. The difference shows at the edge cases: a feature can be deprecated when inconvenient; a constitutional purpose binds the steward even when honouring it costs something.

An identity system that becomes essential and then excludes people — by device requirements, cost, disability, or documentation status — converts inequality into digital law. Engineering equal access means tiering requirements so that low-risk participation demands little, meeting accessibility standards as an obligation rather than a roadmap item, keeping the software free and open source so cost never gates identity, and being honest that document-based verification inherits the unequal distribution of documents — a limit this service states rather than hides.

The constitution's most distinctive move is recognising that the gravest threats to identity rights are structural: mass observation, and control of essential infrastructure falling into hands that can price, condition or weaponise it. The engineering responses are the ones this site documents throughout — no central database to search or seize, biometrics processed at the edge, records distributed across a network no party administers alone.

The governance responses live in the foundation itself: a not-for-profit public company limited by guarantee, a public-benefit lock over assets and intellectual property, no dividends, and winding-up provisions that pass everything to another public-benefit entity. The patent over the verification method is held inside that structure — meaning the legal instrument that could have fenced the technology off instead anchors it to public purpose.

Because intentions do not survive incentives, and technology outlives its founders. Every identity system starts with good intentions; the ones that end badly are the ones whose structures permitted it. A constitutional purpose clause, protected provisions, and a steward legally incapable of private capture are attempts to make the good outcome structurally cheaper than the bad one — to give the values a legal existence independent of whoever holds office. Whether that succeeds is a question decades will answer; that it is attempted, in public, in binding form, is what distinguishes infrastructure built for rights from infrastructure that merely mentions them.