The drafters listened to the court in coming up with NIDS 2.0. Voluntary enrolment, ease of exit and it's not a requirement to access government services (well, not in this statute). Its only purpose is authentication.

I also see some attention to the data protection standards with a focus on *adequate* security standards and limits on right of access even within the NIDS regulator. But the devil will be in the details under the regulations and guidelines.

Does it pass the proportionality test? Limited to authentication, it can.

But where will see other statutory uses of the ID and links to the E-transactions Act which will convince us GOJ is serious about using it for government filings even.

Our biggest concern should be the cost. We'll need an Authority. which is the principal regulator, an appeals tribunal and a national database inspectorate. All this when we are also establishing the office of the Information Commissioner under the Data Protection Act. Worth it?