Argentina
Stock of legislation / current regulation on digital ID
Contributor: Victoria Penas
Organization: Association for Civil Rights (Asociación por los Derechos Civiles-ADC)
Country: Argentina
Chapeau
To fully understand the logic behind the digital ID regulations in Argentina, it is fundamental to address the fact that the whole population registry and identification system was firstly regulated under the rule of a military dictatorship, in a context of institutional paralysis. Even the vocabulary of the legislation back then left no doubt about the indifference towards a human rights approach. Since then, democratic governments have relied on this foundation to implement digital identification systems. Often these systems were implemented without public debate or human rights impact assessments. As a result the laws have been “weak” and the privacy protection authority in Argentina has proposed new regulations based on these previously omitted procedures.
Category 1: Stock of legislation / current regulation on digital ID
Last updated: [date researcher submitted or last updated]
1.1. Which are the specific laws creating and regulating Digital ID and what is their hierarchy (constitutional, organic laws, regional/sub-state laws, regulations, procedures)?
- Governments rely on Law N° 17.671 for the amplification of identification systems. The legality of most biometric identification systems is based on Article 9, which enables the National People’s Registry (RENAPER, for its name in Spanish) to collect birth testimonies, pictures, fingerprints, blood type information and any other relevant identification element.[1]
- In 2019, the City of Buenos Aires created SRPF, a facial recognition system for fugitives. This system was implemented through an administrative resolution and a formal legal project did not arrive until the next year. Part of this 2020 formal legal project was a commitment to create an oversight board for surveillance systems but the city parliament did not create one until 2022.[2]
1.2. What is the definition of Digital Identity brought by the Law or regulation, if any?
- Digital Identity is defined by the RENAPER as the technological process that allows peoples remote ID validation in real time, through the biometric authentication provided by a mobile device after taking a facial picture and comparing it with the corresponding ID from the National People’s Registry database.[3]
- The new regulation drafted and proposed by the AAIP (discussed in 1.3, below), includes a definition for biometric information that includes all personal data obtained by a specific technical treatment, related to physical and behavioral features, that uniquely allow to confirm a person’s identity, and it should be considered sensitive information whenever its use allows a discriminatory treatment.[4]
1.3. Which are the corresponding Data Protection laws, if existing?
- The protection of personal data is constitutionally regulated in Argentina as the citizens’ right to access their personal information and require any action that is needed when they are inaccurate or discriminatory. The current National Data Protection Law, enacted in 2000, widens the constitutional definition and specifies the rights of the data owners, but does not include any reference to biometric data.[5]
- The Public Information Access Agency (AAIP), also known as the data protection enforcement authority, began a public process of debate towards a new regulation in 2022. A draft was presented to Parliament, “this month”.. This draft includes new measures to address modern data exploitation models, requirements of transparency and accountability for data collectors, and prior human rights impact assessments for any data collection systems.[6]
1.4. What are the main elements of the Digital ID framework (scope, eligibility criteria, remedies)?
- The National People’s Registry (RENAPER):
- The federal biometric identification system (SIBIOS):
- Eligibility criteria and remedies not mentioned in the report.
1.5. Are there specific complaint mechanisms foreseen in the Digital ID and Data Protection laws?
- Not mentioned in the report.
1.6. Was public participation ensured when these were drafted and enacted? How?
- No, the whole population registry and identification system was firstly regulated under the rule of a military dictatorship, in a context of institutional paralysis. The further implementation of digital identification systems in Argentina has been weak in terms of legal procedure. The deployment of the aforementioned tools demanded a certain level of public debate that was not granted by the authorities.[11]
- The new regulation proposed by the AAIP was initiated by a public process of debate. A final draft has been presented to Parliament.[12]
1.7. Was there a Human Rights Impact Assessment prior to the enactment of the laws?
- No, the identification system was firstly regulated under the rule of a military dictatorship, in a context of institutional paralysis. Even the vocabulary of the legislation back then left no doubt about the indifference towards a human rights approach.[13]
- The new regulation proposed by the AAIP includes prior human rights impact assessments to determine the legitimacy of any data collection systems.[14]
1.8. Does the country’s Digital ID framework reflect any particular digital ID model existing elsewhere (e.g., similar/comparable to X country)?
- Not mentioned in the report.
1.9. What is the interrelation of these Digital ID laws with existing nationality laws (does Digital ID reflect nationality status, is nationality an eligibility criterion or only legal residence)?
- Not specifically mentioned in the report, however, RENAPER is used to collect birth testimonies, classify citizens’ information and issue their IDs.[15]
1.10. Court cases: Is there litigation going on? Has there been prior litigation? What are the specifics of those cases (list and summarize)?
- No formal court cases. The City of Buenos Aires did register cases of people who were wrongly identified as fugitives while moving through public spaces from their SRPF, facial recognition system. [16]
1.11. How has Digital ID been rolled out?
- The legal framework for the Digital ID system was rolled out in 2009. This authorized the existing National People’s Registry to use technology for the purpose of classifying citizens’ information and issuing IDs.[17]
- Two years later, SIBIOS was created for security purposes and then the technology began to be used for other areas such as social security programs, banking duties, education systems, “among others”.[18]
1.12. Has there been any special measures to ensure access for vulnerable and isolated communities (e.g., for PwD, minorities, elderly) such as mobile offices or free legal aid? Are those measures provided for in law?
- None mentioned in the report.
Gaps/Unknown:
- More information about the effects of the Digital ID system itself could be helpful. What are the criteria for use? Does it disadvantage certain groups more than others? Are there any remedies available for its shortcomings?
- Also, anywhere that says “none mentioned in the report,” please verify whether there is information available on this topic or not. If there is, please add it.
[1] Ucciferri, Leandro. “Tu Yo Digital – Descubriendo Las Narrativas Sobre Identidad y Biometría En América Latina.” Asociación por los Derechos Civiles, October 14, 2022. https://adc.org.ar/informes/tu-yo-digital-descubriendo-las-narrativas-sobre-identidad-y-biometria-en-america-latina/.
[2] Ucciferri, Leandro, and Adc. “Avanza La Regulación Del Reconocimiento Facial En La Legislatura Porteña.” Asociación por los Derechos Civiles, September 21, 2020. https://adc.org.ar/2020/09/18/avanza-la-regulacion-del-reconocimiento-facial-en-la-legislatura-portena/.
[3] Servicios.infoleg.gob.ar. Accessed August 29, 2023. https://servicios.infoleg.gob.ar/infolegInternet/anexos/155000-159999/159070/norma.htm.
[4] Ucciferri, Leandro. “Tu Yo Digital – Descubriendo Las Narrativas Sobre Identidad y Biometría En América Latina.” Asociación por los Derechos Civiles, October 14, 2022. https://adc.org.ar/informes/tu-yo-digital-descubriendo-las-narrativas-sobre-identidad-y-biometria-en-america-latina/.
[5] Id.
[6] Diego Fernandez, Josefina Barbero. “Se Presentó Ante El Congreso Nacional Argentino Un Nuevo Proyecto de Ley Para Reemplazar La Actual Ley de Protección de Datos Personales.” Se presentó ante el Congreso Nacional argentino un nuevo proyecto de ley para reemplazar la actual Ley de Protección de Datos Personales, August 1, 2023. https://iapp.org/news/a/se-presento-ante-el-congreso-nacional-argentino-un-nuevo-proyecto-de-ley-para-reemplazar-la-actual-ley-de-proteccion-de-datos-personales/.
[7] Ucciferri, Leandro. “Tu Yo Digital – Descubriendo Las Narrativas Sobre Identidad y Biometría En América Latina.” Asociación por los Derechos Civiles, October 14, 2022. https://adc.org.ar/informes/tu-yo-digital-descubriendo-las-narrativas-sobre-identidad-y-biometria-en-america-latina/.
[8] Servicios.infoleg.gob.ar. Accessed August 29, 2023. https://servicios.infoleg.gob.ar/infolegInternet/anexos/155000-159999/159070/norma.htm.
[9] Ucciferri, Leandro. “Tu Yo Digital – Descubriendo Las Narrativas Sobre Identidad y Biometría En América Latina.” Asociación por los Derechos Civiles, October 14, 2022. https://adc.org.ar/informes/tu-yo-digital-descubriendo-las-narrativas-sobre-identidad-y-biometria-en-america-latina/.
[10] ADC. “Tecnologías de Vigilancia En Argentina.” Asociación por los Derechos Civiles, October 14, 2022. https://adc.org.ar/informes/tecnologias-de-vigilancia-en-argentina/.
[11] The National Law N° 17,671 referred to the “identification registry and classification of human potential”, therefore posing citizens as mere economic assets.
[12] “Nuevo Proyecto de Ley de Protección de Datos Personales.” Argentina.gob.ar, August 2, 2023. https://www.argentina.gob.ar/aaip/datospersonales/proyecto-ley-datos-pervsonales.
[13] “Nuevo Proyecto de Ley de Protección de Datos Personales.” Argentina.gob.ar, August 2, 2023. https://www.argentina.gob.ar/aaip/datospersonales/proyecto-ley-datos-pervsonales.
[14] Diego Fernandez, Josefina Barbero. “Se Presentó Ante El Congreso Nacional Argentino Un Nuevo Proyecto de Ley Para Reemplazar La Actual Ley de Protección de Datos Personales.” Se presentó ante el Congreso Nacional argentino un nuevo proyecto de ley para reemplazar la actual Ley de Protección de Datos Personales, August 1, 2023. https://iapp.org/news/a/se-presento-ante-el-congreso-nacional-argentino-un-nuevo-proyecto-de-ley-para-reemplazar-la-actual-ley-de-proteccion-de-datos-personales/.
[15] Ucciferri, Leandro. “Tu Yo Digital – Descubriendo Las Narrativas Sobre Identidad y Biometría En América Latina.” Asociación por los Derechos Civiles, October 14, 2022. https://adc.org.ar/informes/tu-yo-digital-descubriendo-las-narrativas-sobre-identidad-y-biometria-en-america-latina/.
[16] Hayon, Alejandra. “Seis Días Arrestado Por Un Error Del Sistema de Reconocimiento Facial: La Pesadilla de Guillermo Ibarrola, Víctima Del Gran Hermano Porteño.” PAGINA12. Accessed August 29, 2023. https://www.pagina12.com.ar/209910-seis-dias-arrestado-por-un-error-del-sistema-de-reconocimien#:~:text=Gran%20Hermano%20porte%C3%B1o-,Seis%20d%C3%ADas%20arrestado%20por%20un%20error%20del%20sistema%20de%20reconocimiento,un%20delito%20que%20nunca%20cometi%C3%B3.
[17] Servicios.infoleg.gob.ar. Accessed August 29, 2023. https://servicios.infoleg.gob.ar/infolegInternet/anexos/155000-159999/159070/norma.htm.
[18] ADC. “Tecnologías de Vigilancia En Argentina.” Asociación por los Derechos Civiles, October 14, 2022. https://adc.org.ar/informes/tecnologias-de-vigilancia-en-argentina/.
Category 2: What's the underlying technology? What's the narrative that supports it?
Last updated: [date researcher submitted or last updated]
2.1. What’s the underlying technology? What’s the narrative that supports it?
2.2. Which model does the Digital ID framework follow? What are the main features (e.g., in relation to identification, authentication, authorization)?
2.3. Is the system used for identification purposes or only for authentication/authorization?
2.4. Is there a centralized database with all relevant data?
2.5. Does the system gather biometric data? What kind?
2.6. Who are the private actors in each national context? Providers.
2.7. How are these technologies procured (contractual processes) in your context?
2.8. Are there technical actors we can engage?
2.9. Who is pushing for this kind of work (political actors, private sector, multilateral organisms, etc.)?
2.10. Which companies have been contracted by the state for the implementation of digital ID?
Gaps/Unknown:
If there are any unanswered questions from the template, or any things you think could use more elaboration, please indicate that in comment bubbles where relevant, and then sum-up in this section as well. This will allow the researcher to either indicate that those areas remain unknown, or they can add more info.
sources
To fully understand the logic behind the digital ID regulations in Argentina, it is fundamental to address the fact that the whole population registry and identification system was firstly regulated under the rule of a military dictatorship, in a context of institutional paralysis. Even the vocabulary of the legislation back then left no doubt about the indifference towards a human rights approach.
Since the enactment of the Law N° 17.671 in 1968, upcoming democratic governments relied on it for the amplification of identification systems. In fact, the legality of most biometric identification systems was based on Article 9, which enabled the National People’s Registry (RENAPER, for its name in Spanish) to collect birth testimonies, pictures, fingerprints, blood type information and any other relevant identification element.
In 2009, Argentina provided the legal framework for the implementation of a digital identification system, authorizing the RENAPER to use technology for the purpose of classifying citizens´ information and issuing their IDs. In order to clarify the concept of digital identity, the developers of the platform referred to it as the technological process that allows people´s remote ID validation in real time, through the biometric authentication provided by a mobile device after taking a facial picture and comparing it with the corresponding ID from the National People’s Registry database.
Two years later, the country took another step forward in this direction with the creation of a federal biometric identification system for the purpose of security (known as SIBIOS, for its name in Spanish), operated by the Federal Police and supervised by the National Ministry of Security. Soon enough, these technologies were incorporated for other purposes such as social security programs, banking duties and education systems, among others.
