Independent digital ID expert. I help governments assess, design & implement reliable, inclusive, scalable & protecting #DPI. Views my very own.
France
Joined June 2013
- Tweets1.9K
- Following1.4K
- Followers957
- Likes235
Pinned Tweet
What does "consent" mean when 60% of the population is poor and illiterate? What does "purpose limitation" mean when the sale of personal data is the core business model? Is it "privacy by default" if I am only left with 2 options: "agree" or "spend 1 hour reading legalese"?
Jerome Buchler retweeted
Digital ID wallets are opening doors to jobs, finance, and social support across the Western Balkans and paving the way for EU integration. Highlights from the #WBDS2026 panel moderated by @WorldBankECA’s Isabel Neto 👇
Digital ID wallets streamline access to jobs, finance, and social assistance.
At #WBDS2026, @WorldBankECA Digital Practice Manager Isabel Neto moderated a panel on how the @WorldBankGroup is helping the Western Balkans adopt digital wallets—key to EU integration.
🇵🇸 UNDP/PAPP and MTDE have launched an RFP for Palestine’s National Authentication and Federation Platform (NAFP) Core MVP, covering digital identity, secure authentication, SSO and Hukumati integration.
Ref: UNDP-PAL-00551
Deadline: 2 Nov 2026
ungm.org/Public/Notice/31634…
22
Jerome Buchler retweeted
“#Governance must scale as fast as the #technology or convenience becomes control.”
#DPI #DigitalID
#DigitalTransformation #AI
Countries should share their DPI mistakes as well as successes, says World Bank ID4D expert Tariq Malik. His proposed “exit test”: can partner countries run, audit and replace systems independently?
#DigitalIdentity #DPI
biometricupdate.com/202610/t…
Jerome Buchler retweeted
Le temple BAPS inauguré en France le mois dernier est le fruit d'un mouvement dérogeant aux valeurs de l'Esplanade des religions qui le porte. Comment dès lors expliquer sa construction?
la-croix.com/a-vif/le-temple…
@CERI_SciencesPo @afspinfos @forumfranceinde @VilledeBussy @LaCroix
🧵As dramatic as the news sounds, personal data is already widely available online, often cheaply. The real problem is therefore not simply that personal data can leak, but that we continue to design identity systems around stable, widely shared personal identifiers (/n)
And so, "incidents" like this should be treated as foreseeable rather than exceptional. Yet in most low and middle income countries (where I work), we still lack awareness of the issue in the first place... (/n)
1
4
We, the digital identity industry, need to urgently rethink some of our assumptions. Geopolitics, AI, cybersecurity and identity are no longer separate conversations. They are converging fast. Digital identity carries an immense responsibility.
1
50
Strategic choices, policies as much as seemingly technical implementation details, are increasingly political and can have far-reaching consequences.
The threat landscape is shifting. Trust models are being challenged.
1
12
KYC models built around systematically collecting and retaining copies of personal data may be one of the worst design choices we’ve normalized in digital services. We can do much better: standards-based Verifiable Credentials, backed by robust national DPI, are the way forward.
‼️ BREAKING: The threat actors who targeted Revolut with information-demand emails are now posting sensitive customer data, including that of high-profile clients such as tennis player Shevchenko and Römer, CEO of Gamdom/Skinscom.
They want Revolut to pay up. They say they'll release more messages, data and insights into how the Revolut team operates.
They're accusing Revolut of handing over sensitive information to countries outside its jurisdiction.
They accuse the company of negligence around privacy and the exposure of sensitive information.
Jerome Buchler retweeted
L'Ukraine vient de faire quelque chose d'étonnant.
Le ministère ukrainien de la Défense vient de lancer TrophyLab - essentiellement en rendant l'accès à toutes les technologies d'armes russes capturées gratuit pour les gouvernements étrangers, les institutions de recherche et l'industrie de la défense.
Ils enverront même du matériel physique aux alliés pour examen et pour le démonter afin de découvrir les secrets militaires russes. Ainsi que des spécifications techniques, des plans et des résultats de recherche.
Le site web comprend des listes pour les véhicules blindés, les missiles, les avions, les UAV, les actifs EW, les UGV, les missiles de croisière, etc.
Les gouvernements veulent généralement garder ce genre de technologie capturée secret pour leur propre avantage. L'Ukraine a décidé d'en faire un accès ouvert au bénéfice de l'Occident.
Ukraine has just done something astonishing.
The Ukrainian Ministry of Defence has just launched TrophyLab - essentially making access to all captured Russian weapon technologies free for foreign governments, research institutions and the defence industry.
They will even send physical hardware to allies for examination and to rip it apart to discover Russian military secrets. As well as technical specifications, blueprints and research results.
The website includes listings for armoured vehicles, missiles, aircraft, UAVs, EW assets, UGVs, cruise missiles etc.
Governments usually want to keep this kind of captured tech a secret for its own advantage. Ukraine has decided to make it (relatively, I think) open access for the benefit of the West.
AI is reshaping implementation strategy: vulnerability discovery gets cheaper, while patching remains the bottleneck. That will for sure reignite the debate over open source in critical software infrastructure.
theregister.com/2026/05/05/n…
18
It was consented, so it’s fine.
Bloomberg News has won the 2026 Pulitzer Prize for Illustrated Reporting and Commentary for “trAPPed,” a graphic novel depicting the psychological ordeal of a woman in India held under “digital arrest” for eight days, subjected to 24/7 surveillance in a widespread and ruinous scam. bloomberg.com/graphics/2025-…
🎨: Anand RK
19
"If we can’t control the AI, we should control the data layer it acts on". Like many countries without frontier-level AI capabilities (including mine, some will say), India 🇮🇳 is operating from a defensive position.
The release of Claude Mythos has raised serious concerns in Delhi and in capitals across the world about what the model can do, who has access to it, and what it means for national infrastructure security.Bilateral engagement with Anthropic is natural and should be pursued, but it will not solve the problem. US technology companies are bound by US law regardless of foreign jurisdiction, as the ICC learned in 2025 when Microsoft blocked its Chief Prosecutor's email on US sanctions. Working at the level of model access may not help as the patching bottleneck affects every defender, with or without model access.If we cannot act at the level of the model, we must act at the level of the data ecosystem the model is being used against. India has already built the tools for this through DEPA. They turn out to be exactly what is needed for cyber defence at national scale. #DEPA
indiatoday.in/amp/technology…
47
papers.ssrn.com/sol3/papers.…
Insightful work by @SakshyamBanjade on Nepal's "Civic ID Stack". The emphasis on federated architecture, consent, and attribute-level access is spot on. Subtly suggests keeping the NIN out of circulation via ctxt-specific ids to reduce linkability risk.
1
36
IA-generated videos are already beating KYC checks. Online trust is collapsing in real time. We need to accelerate the deployment and adoption of reliable, privacy-preserving verifiable credentials.
111
📊Extracted from #DPIDB: birth registration rate at age 5 across Africa #civilRegistration #birthRegistration #DataViz #SDGs #CRVS
31