Digital Identity Management in Norway is a Catastrophe<br>- Research News

Menu

Digital Identity Management in Norway is a Catastrophe

People who are denied the use of electronic ID solutions such as BankID find it difficult to live full, independent lives in Norway, according to Marte Eidsand Kjørven. She is highly critical of what she describes as a lack of public oversight.

Although digital identity management in Norway is a success in many respects, it faces serious challenges and deficiencies, states Marte Eidsand Kjørven. She is a professor at the Department of Private Law at the University of Oslo. Photo: UiO.

By

Jorunn Kanestrøm,

The Faculty of Law

Published May 29, 2026

Technology

Society

Law

Although digital identity management in Norway is a success in many respects, it faces serious challenges and deficiencies, states Marte Eidsand Kjørven. She is a professor at the Department of Private Law at the University of Oslo and has led the project "Societal Security and Digital Identities," known as the SODI project.<br>Kjørven received the Rule of Law Award (Rettssikkerhetsprisen) for this work in 2024.<br>Market-based electronic solutions such as BankID, Buypass, and Comfides have contributed significantly to the digitalization of both the private and public sectors.<br>These "universal keys" provide access to a range of vital services for large portions of the population, including online banking, tax services, health services, and Altinn.<br>At the same time, these solutions bring serious challenges related to social exclusion, ID abuse, and failing legal protection. Digital identity management is complex, functioning almost as an ecosystem with numerous actors, technical solutions, and legal regulations. This digitalization has occurred rapidly.<br>In a podcastepisode at 'Universitetspodden' Kjørven and Henriksen discuss the problems (only in norwegian).

However, Kjørven explains that the legal rules intended to ensure responsible digitalization do not sufficiently account for the serious consequences this has brought about.<br>Scathing Criticism<br>In the project's final report, the research group directs scathing criticism at what they believe are serious failings in the public governance of digital identity management in Norway. The word "catastrophe" is communicated clearly as early as the introduction.<br>Key terms Kjørven uses to describe this catastrophe include disclaimers of responsibility, lack of legal protection resulting in financial miscarriages of justice, human rights violations, and challenges to democracy and national security.<br>Digital Exclusion and Disempowerment<br>It is vital to maintain good control over who has access to electronic ID solutions to avoid abuse and fraud. Simultaneously, digital exclusion is a major problem under current conditions.<br>Digital identity management is characterized by some actors and parts of the population reaping the benefits, while vulnerable groups bear the disadvantages and costs.<br>For many elderly people and individuals with disabilities, it is impossible to use electronic ID solutions without assistance.<br>'Bendik' has Down syndrome and is denied BankID. Photo: Colourbox.The report tells the story of Bendik, who has Down syndrome and is denied BankID, thereby losing access to digital public services due to his diagnosis.<br>– When a "universal key" in the form of an eID is necessary for access to essential services and real participation in society, the consequences are extremely serious for those without such a key, Kjørven points out.<br>Norwegian authorities have left it to private actors to decide who shall have access to digital public services and who shall be excluded and thus disempowered.<br>Sent Backwards in Time<br>Kjørven believes it can be difficult for those who have access to the digital services they need to imagine how intrusive it is to lack an eID, and BankID in particular.<br>– These people have not just been left on the platform while the digitalization train has raced past; they have been sent on a train moving backwards.

They do not have access to the same basic services as others, which constitutes a very serious problem, including from a human rights perspective, the law professor emphasizes.<br>Miscarriages of Justice, Financial Ruin, and Broken Lives<br>Several serious digital fraud cases have been featured in the media in recent years.<br>Phishing for personal information is common method fraudsters use to trick victims into giving up usernames, passwords, and credit card numbers. Last year, DNB customers were targeted in fraud attempts worth over 3.3 billion NOK, a 30 per cent increase from the previous year. Of these, the bank managed to stop 3 billion NOK from falling into criminal hands.<br>Criminals who steal others' electronic IDs can manipulate information in public registers, apply for loans, transfer money, set up companies, and receive public benefits on false grounds. This leads to major losses for individuals, companies, and the public...