{"id":151908,"date":"2025-09-11T15:17:44","date_gmt":"2025-09-11T22:17:44","guid":{"rendered":"https:\/\/www.lankaweb.com\/news\/items\/?p=151908"},"modified":"2025-09-11T15:17:44","modified_gmt":"2025-09-11T22:17:44","slug":"role-of-foreign-system-integrator-for-sri-lanka-digital-id-raising-concerns","status":"publish","type":"post","link":"https:\/\/www.lankaweb.com\/news\/items\/2025\/09\/11\/role-of-foreign-system-integrator-for-sri-lanka-digital-id-raising-concerns\/","title":{"rendered":"Role of foreign system integrator for Sri Lanka digital ID raising concerns"},"content":{"rendered":"

Courtesy Biometric\u00a0 Update.com<\/em><\/span><\/h2>\n\n\n

The Department for Registration of Persons (DRP) in Sri Lanka is raising concerns about the proposed unique digital identity project<\/a> (SL-UDI), especially pertaining to the role of a foreign master system integrator (MSI) accountable for the project\u2019s delivery, maintenance, and integration.<\/p>\n\n\n\n

A senior DRP official told Biometric Update<\/em> on Wednesday that the DRP<\/a> has to be aligned with the 1968 Number 32 Persons Registration Act in the country, which is a law that provides for the registration of all citizens and the issuance of National Identity Cards to eligible individuals, and will not do anything that goes beyond this act.<\/p>\n\n\n\n

The Indian National Institute for Smart Government (NISG) is seeking bids from Indian companies<\/a> to appoint an MSI for this initiative, to collect citizens\u2019 demographic and biometric data, similar to India\u2019s Aadhaar system. At least 40 Indian firms<\/a> have applied for this.<\/p>\n\n\n\n

P.T.G. Perera, the Acting Project Director of Sri Lanka\u2019s electronic national identity card (e-NIC) project, raised 22 specific concerns to the Digital Economy Ministry in a letter. A major issue is that the MSI would have control over sensitive data and profile management, which traditionally falls under the DRP\u2019s IT department, potentially undermining established oversight and data security protocols.<\/p>\n\n\n\n

The senior official noted that signing off on this will need the Attorney General\u2019s clearance.<\/p>\n\n\n\n

The SL-UDI project is positioned as a basis of Sri Lanka\u2019s digital economy, aiming to provide citizens with a unique digital identifier that enables seamless digital transactions and interactions. However, Perera\u2019s letter highlights several risks, including restricted bidding of the MSI to Indian entities, vague clauses regarding data export, and the potential for data leakage during the data migration process. The MSI\u2019s control over critical security components raises further alarms about data sovereignty.<\/p>\n\n\n\n

At this point, we need the roles and responsibilities of the DRP to be clearly outlined. There are concerns about data migration and setting up data centers, etc, which need more clarity. Also, the arbitration process outlined in the bid documents would take place in New Delhi, effectively side-stepping Sri Lanka\u2019s judicial system, while intellectual property rights may remain with the contractor,\u201d the senior official further stressed. The limitation of liability clause poses a major risk, as it limits the contractor\u2019s liability to only 10% of the contract value in cases of data breaches, leaving the Sri Lankan government susceptible to substantial financial losses.<\/p>\n\n\n\n

Perera\u2019s letter also notes overlaps with existing systems, such as the e-NIC<\/a>, and warns that the MSI\u2019s management of IT assets could upset governance and security protocols. Legal frameworks for certain biometric data collection, like iris scans, are still not enabled by law, which is also a setback.<\/p>\n\n\n\n

The Supreme Court is set to consider a petition challenging the India-Sri Lanka Memorandum of Understanding related to SL-UDI on October 17, underscoring the\u00a0ongoing legal<\/a>\u00a0and governance challenges surrounding this major digital initiative.<\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Courtesy Biometric\u00a0 Update.com The Department for Registration of Persons (DRP) in Sri Lanka is raising concerns about the proposed unique digital identity project (SL-UDI), especially pertaining to the role of a foreign master system integrator (MSI) accountable for the project\u2019s delivery, maintenance, and integration. A senior DRP official told Biometric Update on Wednesday that the DRP has to be aligned with […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-151908","post","type-post","status-publish","format-standard","hentry","category-politics"],"_links":{"self":[{"href":"https:\/\/www.lankaweb.com\/news\/items\/wp-json\/wp\/v2\/posts\/151908","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lankaweb.com\/news\/items\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lankaweb.com\/news\/items\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lankaweb.com\/news\/items\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lankaweb.com\/news\/items\/wp-json\/wp\/v2\/comments?post=151908"}],"version-history":[{"count":1,"href":"https:\/\/www.lankaweb.com\/news\/items\/wp-json\/wp\/v2\/posts\/151908\/revisions"}],"predecessor-version":[{"id":151909,"href":"https:\/\/www.lankaweb.com\/news\/items\/wp-json\/wp\/v2\/posts\/151908\/revisions\/151909"}],"wp:attachment":[{"href":"https:\/\/www.lankaweb.com\/news\/items\/wp-json\/wp\/v2\/media?parent=151908"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lankaweb.com\/news\/items\/wp-json\/wp\/v2\/categories?post=151908"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lankaweb.com\/news\/items\/wp-json\/wp\/v2\/tags?post=151908"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}