National Digital Identification Act 2024, categories of data barred from the Identity Database
In force since .
A sensitive categories rule binding government bodies.
- Obligation class
- Governance
- Audit expectation
- none
What it requires
- As the Registrar General, do not hold any biometric data, or any data that directly identifies a person's race, religion, ethnicity, language, income or medical history, in the Identity Database.
- As the Registrar General, hold in the Identity Database only the data that section 27(3) lists.
These lines are LexLint's reading of the law's text.
What it makes you log
Logging duty
Section 27(3) and (4) set which categories of data the Identity Database may and may not contain. They name no log, record of processing, retention period or audit.
- Kind
- None
- As of
What this law does
Section 27(4) bars the Identity Database from containing any biometric data or data that directly identifies an individual's race, religion, ethnicity, language, income or medical history. Section 27(3) limits the Identity Database to the data it lists, which are the Samoa Digital Identification Number and any associated token, name, date of birth, place of birth, sex, home address, names of parents, date of death, and data about issued, revoked or cancelled ID credentials.
When LexLint raises it
When your app profile says your app processes biometric data or processes personal data.
Back to the example · Lint your app
Page updated .