Manifesto
For a free and open digital identity
European digital identity is entering everyday life. The choices made today will determine, for decades, who controls it, who can build on it and on what terms. We, the signatories, affirm ten principles to keep it a digital commons.
The ten principles
-
Digital identity is a right, not a product
Proving who you are, or one of your attributes, is a condition for accessing rights, public services and economic life. This ability cannot depend on a subscription, on a single intermediary, or on a business model built on exploiting personal data.
-
The individual stays in control
Everyone decides what they disclose, to whom and for what purpose. Selective disclosure, data minimisation and the absence of tracking across uses are design requirements, not options.
-
Going digital remains a choice
Using a digital identity wallet remains voluntary. Nobody should lose access to a right or a service for lack of equipment, skills or willingness to use it. The tools are accessible to people with disabilities.
-
Open and interoperable standards
Identity and trust protocols, formats and profiles are public, documented and freely implementable. No proprietary interface should condition access to a service or prevent switching providers.
-
Open, auditable and free code
Software that handles people's identity and legally binding evidence is published under a free, copyleft licence, so that anyone can examine, verify and improve it, and so that these improvements remain shared.
-
Trust building blocks are commons
Time-stamping, seals, signatures, validation and attestations make up the infrastructure of digital evidence. They must be available with no entry fee, through standard interfaces, to all actors on the same terms.
-
Freedom to do business and to innovate
A craftsperson, an association, a local authority or a start-up must be able to build trusted digital services without paying a rent on every piece of evidence. Access to trust building blocks cannot be reserved for the best-resourced organisations.
-
Governance protected from capture
Public-interest identity and trust infrastructures are governed in a non-profit, transparent way, with segregated duties. Their assets, their keys and their purpose are protected against any appropriation, takeover or diversion.
-
Verifiable security
Trust cannot be decreed: it has to be demonstrated. Published certification policies, published audits, transparency logs and documented procedures allow anyone to check the commitments made.
-
Sovereignty through reversibility
Data and infrastructures fall under European law and are hosted within the Union. No technical or contractual dependency should prevent taking back control or changing operator.
By signing this manifesto, we commit to upholding these principles in our technical choices, our purchasing, our contributions and our public positions, and to supporting the initiatives that put them into practice.
Sign
Add your signature
Both individuals and organisations can sign. Signatures are collected through a form hosted by the French non-profit Framasoft (Framaforms, free software, hosted in France). The form is in French: “Prénom” is your first name, “Nom” your last name, “Adresse e-mail” your e-mail address, “Fonction” your position and “Organisation” your organisation.
- Your first and last name, and if you wish your position and organisation, are only published with your explicit consent (“Publication” box).
- Your e-mail address is never published; it is only used to verify a signature if in doubt and, if you ask for it (“Suites” box), to keep you informed.
- The public list is updated regularly after moderation. You can withdraw your signature at any time by writing to contact@otspi.org.
Get others to sign
A manifesto lives through those who pass it on
Once you have signed, the most useful thing is to spread it: to your colleagues, your organisation and your networks.
Suggest it to your organisation
An association, a company, a local authority or a lab can sign as such. A pre-written e-mail is enough to get things started.
Send a pre-written e-mailAn address easy to remember
To mention it in person, at a meeting or a conference: otspi.org/en/manifesto.
Back to the formSignatories
They support the manifesto
1 signature, published with the author's consent.
- Philippe VienneTelecommunications Engineer, INSA Lyon