Digital Identity: Bangladesh Bets $748 Million on Trust

Every time you hand a bartender your driver's license just to prove you're old enough to drink, you're giving away way more than your age. Your name. Your home address. Your license number. Your exact birthday. Now imagine a country of a hundred and eighty million people trying to fix exactly that problem, and spending seven hundred and forty-eight million dollars to do it.

That's what Bangladesh is doing right now with a

That's what Bangladesh is doing right now with a project called One-ID. And if you've ever felt uneasy about how much of your personal information gets copied, stored, and leaked across a dozen different offices, this story is about the fix. The World Bank estimates that two point eight billion people around the world still don't have access to a digital ID at all. So this isn't a small experiment. It's a blueprint. But there's a twist in how the money gets spent that surprised even me. So how does a digital ID actually protect you instead of exposing you?

Let's start with what most of us assume. When we hear "national digital ID," we picture a giant database of faces and fingerprints. And honestly, that's a fair guess, because press releases love to show the dramatic part, people lining up to get scanned and photographed. Here's the number that stopped me. About eighty percent of that seven hundred and forty-eight million dollar budget really does go to physical stuff, printing two hundred million chip cards and collecting biometric data. But that visible part? It's not the hard part.

The hard part is invisible. It's building the plumbing so a hospital, a tax office, and a bank can all confirm you're the same person, without any of them passing your private file around. Each of those connections is a separate piece of engineering. And that's the real cost.

How do you prove who you are without oversharing

So how do you prove who you are without oversharing? There's a concept called selective disclosure. Go back to that bartender. Instead of handing over your whole license, the system answers one question, "is this person over twenty-one?" Yes or no. It sends a cryptographic proof. A mathematical stamp of approval. Nothing else. The bar never learns your birthday. And because they never store it, they can't lose it in a breach.

This matters more than it sounds. Every time a company collects your birthdate just to check your age, they've created a permanent risk. One hack, and it's gone. Selective disclosure removes the target entirely. In fact, updated regulations in the European Union now require this approach, not as a nice-to-have, but as a rule.

Now, the piece that ties it together. Bangladesh's system runs on consent-based sharing. That means every time a service wants to check something about you, it has to ask permission in that moment. Not a one-time sign-off buried in paperwork, a live decision, every single transaction. And building that permission flow into every request is the engineering challenge, not just a policy promise.