Ethiopia's Fayda Digital ID system is a national foundational identity programme that employs artificial intelligence-enabled biometric recognition to authenticate beneficiaries at social protection service and payment points, with the aim of reducing leakage, fraud, and identity-related exclusion across government programmes. The system was established under the Ethiopian Digital Identification Proclamation No. 1284/2023 and is implemented by the National ID Program (NIDP) under the Office of the Prime Minister, with USD 350 million in financing from the World Bank through the Digital ID for Inclusion and Services Project (P179040), approved in December 2023.
The Fayda system is built on the Modular Open Source Identity Platform (MOSIP), an open-source digital public good originally developed by the International Institute of Information Technology, Bangalore (IIIT-B). The NIDP first partnered with MOSIP in June 2020, formalising the relationship through a Memorandum of Understanding in February 2022. The MOSIP platform has been customised for the Ethiopian context and branded as 'Fayda', which means 'value' in several local languages. The system collects biometric data comprising ten fingerprints, two iris scans, and a facial photograph, alongside minimal demographic data including full name, date of birth, gender, nationality, and current address. Email and phone numbers are optional. The biometric data collection infrastructure uses MOSIP-certified hardware, including Integrated Biometrics' Kojak fingerprint scanners, which are capable of operating in direct sunlight and extreme temperatures while exceeding US military durability standards. An Automated Biometric Identification System (ABIS) performs deduplication to enforce the one-person-one-identity principle, though the specific ABIS vendor and contract terms have not been publicly disclosed in government or World Bank documentation.
The system operates across registration and authentication functions. At registration, biometric and demographic data are captured at enrolment stations. At authentication, beneficiaries verify their identity at social protection service and payment points using biometric matching against their stored template. The authentication framework supports both online verification (where connectivity is available) and offline verification modes. All communication between endpoints, including enrolment stations, supervisor and admin portals, authentication stations, resident service portals, and backup sites, is end-to-end encrypted according to the NIDP. The system targets at least 90 million Ethiopians plus refugees and migrants, and as of early 2026, over 30 million people had been registered, with weekly enrolments reaching approximately one million. Over 90 government and private-sector agencies have integrated their services with the Fayda system for identity verification and authentication purposes.
The social protection integration is a core component of the World Bank project design. The project explicitly includes components for adaptive social protection services and financial inclusion acceleration. Fayda authentication is intended to serve beneficiaries of programmes including the Productive Safety Net Programme (PSNP) and the Urban Productive Safety Net Programme (uPSNP), with coordination mechanisms planned to prevent duplicate enrolment across programmes. The World Bank feature article from February 2025 specifically highlights that Fayda is enabling women to access social protection payments, open bank accounts, and access loans, noting that Ethiopian women are 15 percent less likely to possess any form of identification compared to men. A data-sharing agreement between the NIDP, UNHCR, and the Refugee and Returnee Service (RRS), signed in January 2024, extends Fayda coverage to over one million refugees, enabling access to mainstream government services rather than parallel refugee-specific systems. The OpenG2P platform has been identified for delivering social benefits to vulnerable communities.
The legal and data protection framework centres on Proclamation No. 1284/2023, which mandates consent-based processes throughout the digital identification lifecycle, non-disclosure of personal data, data minimisation, and purpose limitation. Ethiopia subsequently enacted the Personal Data Protection Proclamation of 2024 (PDPP 2024), which requires all personal data collected domestically to be stored domestically, mandates 72-hour breach notification to the Ethiopian Communications Authority and affected individuals, grants data subjects rights to access, erasure, correction, objection, and portability, and requires data controllers and processors to register with the Ethiopian Communications Authority before operations. Cross-border data transfers under the PDPP 2024 require either adequate protections in receiving jurisdictions or explicit data subject consent. The World Bank project also includes a component to establish a Personal Data Protection Commission, though the enabling legislation for this body remained pending as of the most recent verification.
From a technical infrastructure perspective, the Ethiopian government has articulated plans for government 'green data centres' and cloud adoption, but the precise production hosting location and jurisdiction of the biometric data have not been publicly documented in available government or World Bank sources. Cybersecurity and data-centre investments form part of the World Bank project, but specific details regarding the compute environment, hosting provider, and data residency arrangements remain underdocumented. The NIDP has partnered with Ethio-telecom for registration campaigns.
Risk considerations for this case are substantial. The system processes special-category biometric data for a rights-affecting purpose, specifically controlling access to social protection benefits at point of use. The decision criticality is high because a failed biometric match or system unavailability could result in denial of benefits to entitled individuals. Scholars and civil society organisations have raised concerns about ethnic profiling risks, particularly regarding the Tigrayan minority community, who fear potential misuse of biometric and demographic data for surveillance and arrests. The quasi-mandatory nature of enrolment, driven by increasing requirements for Fayda registration to access e-government services and banking, creates concerns about meaningful consent, particularly for children aged five and above who are enrolled but whose capacity to provide informed consent is questionable. The tension between the system's efficiency objectives and equity outcomes for vulnerable and marginalised populations, including internally displaced persons, homeless populations, and minority communities, remains a significant governance challenge. Standard operating procedures for biometric authentication at social protection payment points have not been located in public documentation.