Digital identities Archives | Page 2 of 186

AI for Good Global Commission launches to expand trusted AI access

Rwanda’s President Paul Kagame, Salesforce Chair and CEO Marc Benioff and International Telecommunication Union Secretary-General Doreen Bogdan-Martin have announced the launch of the AI for Good Global Commission.

The Commission brings together more than 40 founding members, including heads of state and government, technology executives and heads of UN agencies.

It is co-chaired by Kagame and Benioff, with Bogdan-Martin serving as vice-chair. ITU said the Commission will work to identify practical pathways to strengthen trust, expand access and unlock AI’s potential to address real-world challenges.

The initiative will focus on technical, socioeconomic and policy questions around AI, with an emphasis on responsible innovation, human capability and broad-based economic and social benefits.

Access is a central part of the Commission’s mandate. ITU said 2.2 billion people remain offline, limiting their ability to benefit from AI developments.

The Commission builds on ITU/UNESCO Broadband Commission for Sustainable Development, which has focused on connectivity, digital inclusion and economic development.

Its inaugural meeting will take place during the AI for Good Global Summit 2026 from 7 to 10 July. The Summit is part of Digital Week, which also includes the first UN-mandated Global Dialogue on AI Governance and the WSIS Forum 2026.

Why does it matter?

The AI for Good Global Commission places digital inclusion at the centre of global AI governance debates. Its launch highlights a key challenge: many countries and communities cannot benefit from AI if they lack connectivity, infrastructure, skills and institutional capacity. The Commission’s relevance will depend on whether it can move beyond high-level commitments and help turn access, trust and responsible innovation into practical support for developing countries.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our Diplo chatbot!

India launches WhatsApp chatbot for public health services

India’s Union Health Minister Jagat Prakash Nadda has launched Ayushman Sarathi, a WhatsApp chatbot developed by the National Health Authority to provide round-the-clock access to services under the Ayushman Bharat Pradhan Mantri Jan Arogya Yojana (PM-JAY), the country’s government-funded health insurance scheme.

Built on secure API integrations with the PM-JAY digital platform, the chatbot enables beneficiaries to check their eligibility, apply for and download Ayushman Cards, complete electronic Know Your Customer (eKYC) verification, link their Aadhaar identity, view treatment history, locate empanelled hospitals and access other PM-JAY services directly through WhatsApp.

Users can also register, track and withdraw grievances, request callbacks, view wallet balances, and submit feedback after hospital discharge. According to the Ministry of Health and Family Welfare, the chatbot is intended to improve accessibility, transparency and beneficiary engagement while reducing reliance on physical visits and call centres.

The chatbot also supports feedback collection and grievance management, providing health authorities with additional insight into service delivery while helping monitor PM-JAY implementation across India.

Why does it matter?

The launch reflects India’s continued expansion of digital public services by integrating government programmes into widely used consumer platforms. Delivering PM-JAY services through WhatsApp could make it easier for millions of beneficiaries to access healthcare information and administrative services without visiting government offices or contacting call centres.

The initiative also illustrates how digital public infrastructure is reshaping healthcare delivery. By combining secure digital identity, online service access and feedback mechanisms, the chatbot aims to improve efficiency, transparency and user engagement while supporting better monitoring of one of the world’s largest public health insurance programmes.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our Diplo chatbot!

Spain’s AI sandbox offers early test for biometric AI compliance

Spain’s AI regulatory sandbox is becoming an early test of how high-risk AI systems may prepare for compliance with the EU AI Act, with facial recognition among the technologies examined.

Spanish company Herta said it has completed the sandbox process for its facial-recognition video-surveillance system, BioSurveillance. The company presented the pilot as a step towards AI Act-ready deployments in public settings.

Herta describes BioSurveillance as a real-time video-surveillance system capable of detecting multiple faces, enrolling individuals during operation, identifying previously registered people and managing alerts. Its BioSurveillance NEXT product is designed for simultaneous identification in crowded and changing environments.

Spain’s AI agency, AESIA, says practical guides developed through the national AI regulatory sandbox are intended to help companies that develop or deploy high-risk AI systems prepare for their obligations under the EU AI Act. The guides provide recommendations while harmonised EU standards are still being developed.

However, sandbox participation should not be treated as approval for public facial recognition deployments. Remote biometric identification in publicly accessible spaces remains one of the most sensitive areas under the EU AI Act. It is subject to strict limits, depending on the use case, operator and context.

The case highlights how companies developing biometric AI systems are seeking early compliance pathways, while regulators face pressure to balance innovation, public safety, privacy and fundamental rights.

Why does it matter?

Facial recognition is one of the most contested areas of AI regulation because it combines public-space surveillance, biometric data processing and risks to privacy and fundamental rights. Spain’s sandbox offers an early view of how high-risk AI providers may prepare documentation, testing and compliance processes under the EU AI Act. The case also shows why compliance language must be used carefully: participation in a sandbox may support readiness, but it does not remove the legal restrictions surrounding biometric identification in public spaces.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

EU launches funding for youth-centred social media platforms

The European Commission has launched a €1.48 million call for proposals to support the development and testing of safer, more inclusive social media platforms designed for young people.

The initiative aims to involve young people from diverse backgrounds in designing digital services that prioritise privacy, well-being, accessibility and user safety.

Selected projects will develop or enhance protocol-based social media platforms aligned with EU values, while giving users greater control over their data, content moderation and overall online experience.

The programme also supports market analysis, platform development, adoption strategies and recommendations for the future of social media in the EU.

Why does it matter?

The initiative reflects the EU’s growing emphasis on promoting digital platforms that prioritise user wellbeing, privacy and safety rather than engagement-driven business models. By supporting protocol-based alternatives, the Commission is seeking to encourage a more open and user-centric social media ecosystem.

It also highlights a broader policy shift towards involving young people directly in the design of digital services. Giving users greater control over their data, online experience and content moderation aligns with the EU’s wider objectives on digital rights, platform accountability and safer online environments.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

EU drops browser-based cookie consent proposal from Digital Omnibus

The European Commission had proposed replacing cookie banners with an automated browser-based privacy signal as part of its ‘Digital Omnibus’ package, a move that would have allowed devices to communicate users’ tracking preferences directly to websites. The plan, outlined in Article 88b of the GDPR, was intended to cut red tape and reduce the burden on consumers navigating consent requests across the web.

According to digital rights organisation noyb, cookie banners were not created by data protection law but emerged as a mechanism for the online advertising industry to obtain users’ consent for data sharing with third parties. Studies suggest only 3 to 10 per cent of users actually wish to be tracked, yet so-called dark patterns, such as hidden ‘no’ buttons and pre-ticked boxes, allow the industry to achieve consent rates of up to 90 per cent. Across more than 450 million EU citizens, this results in billions of unnecessary clicks each year.

According to noyb, a lobbying document submitted by Google argued that removing cookie banners would effectively halt all online advertising, citing figures that the European Commission has since described as highly exaggerated. The Commission had made clear that consent would still be possible on a per-website and per-purpose basis, meaning users could grant access to specific outlets while withholding it from others. Google’s paper also claimed that media outlets would be harmed, despite the fact that they are explicitly exempt from the proposed provision.

According to noyb, the lobbying campaign appears to have influenced the legislative process. In the Council’s position paper of 18 June 2026, Article 88b was removed entirely from the Digital Omnibus. Noyb added that Germany, France, and Poland were among the member states supporting the article’s removal following lobbying by the online advertising industry.

The outcome is particularly striking given that many of the same member states have long called on the EU to simplify regulation and cut red tape. noyb, the European digital rights organisation, has described the result as a victory for lobbying over public interest, noting that the majority of EU citizens have consistently expressed frustration with cookie banners.

The European Parliament has not yet taken a position on Article 88b, and negotiations between the Parliament and the Council are ongoing. Noyb has urged the European Parliament to support reinstating Article 88b during the next stage of negotiations.

Why does it matter?

The debate highlights the growing tension between digital simplification efforts, privacy protection and the economic interests of the online advertising ecosystem. Browser-based privacy signals have long been discussed as a way to reduce repetitive consent requests while preserving users’ ability to decide when and how their personal data may be used.

The proposal’s removal also illustrates the influence that industry stakeholders can have during the EU legislative process. Whether Article 88b is reinstated during negotiations with the European Parliament could shape the future of online consent management in Europe, affecting digital advertising, user experience and the practical implementation of data protection rules.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Spain advances law to protect minors in digital environments

Spain’s Minister for Youth and Children, Sira Rego, has said she expects the country’s Law for the Protection of Minors in Digital Environments to be approved by Congress in autumn 2026.

Rego said the bill responds to growing social concern over children’s safety online and the need to regulate digital spaces more effectively.

The bill is currently moving through the Congress of Deputies. Rego said Spain would have a pioneering law to regulate digital environments and that major platforms must take greater responsibility for practices that are especially harmful to children and adolescents.

The proposed law draws on recommendations from a 50-member expert committee convened by the Ministry of Youth and Children. The government says the framework is intended to strengthen the rights of minors in digital spaces, including privacy, reputation, image rights, access to truthful information and responsible technology use.

Measures in the bill include mandatory parental control systems for mobile devices, rules on loot boxes in video games and on platforms, and requirements for schools to regulate the use of mobile phones and digital devices.

The proposal would also introduce criminal law changes covering digital violence. These include penalties restricting aggressors from contacting victims online, offences linked to making pornography indiscriminately available to minors, and criminalisation of sexual or seriously degrading deepfakes.

Large audiovisual service providers and major influencers would also be required to provide reporting channels for inappropriate content, inform users about content that may harm minors, use effective age verification systems and separate pornographic or violent content from other material.

Why does it matter?

Spain’s proposal reflects a wider shift towards stronger child online safety regulation, moving beyond awareness campaigns towards legal duties for platforms, device makers, schools and digital service providers. The bill also shows how child protection debates are expanding from harmful content to design features, age assurance, deepfakes, loot boxes and digital violence. If adopted, it could become one of Europe’s more comprehensive national frameworks for protecting minors online.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Google expands financial ad verification across EU and EEA

Google has announced the expansion of its financial services advertiser verification programme to every country in the EU and European Economic Area, extending requirements aimed at reducing fraudulent financial advertising.

The rollout will cover 24 additional countries and builds on an existing programme already active in six EU member states and the United Kingdom.

Under the programme, advertisers seeking to promote financial products or services must complete an additional verification process showing that the relevant national regulator authorises them. Google said it will check credentials against official registries across the EU and EEA.

The requirements will be introduced in phases. Businesses will have 30 days to complete the process after notification, and unverified advertisers will have their financial services ads restricted until verification is completed.

Google said the additional requirements build on its wider advertiser identity verification programme, which it says already covers more than 98% of ads seen across the EU. The company also said its systems blocked or removed more than 1.6 billion ads in the EU last year.

The expansion comes amid continuing concern over online financial scams, including fraudulent ads that impersonate legitimate financial services providers or promote misleading investment products.

Why does it matter?

Financial scams increasingly rely on digital advertising to reach consumers at scale. Google’s expansion adds another gatekeeping layer for financial advertisers across Europe by linking ad eligibility to authorisation in official regulatory registers. The measure also shows how large platforms are being pushed, by regulators and reputational pressure, to take more responsibility for the trustworthiness of high-risk advertising categories such as finance.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Estonia proposes world-first digital IDs for AI agents

Estonia is moving forward with plans to create official digital identities for AI agents, a move that could make it the first country to establish a formal framework for AI systems acting on behalf of individuals and organisations. The proposal received backing from Prime Minister Kristen Michal following discussions within the Eesti.ai advisory board.

Under the proposed framework, AI agents would be granted limited and clearly defined permissions, enabling them to perform specific tasks such as preparing documents, handling administrative procedures and accessing designated information. Authorities say the framework would ensure that every action remains traceable, auditable and subject to clear human accountability.

Officials argue that digital identities for AI could prevent users from granting excessive access to personal data and services while supporting the growing use of AI across the economy. The initiative builds on Estonia’s long-established digital infrastructure, including digital identities, electronic signatures and secure data-sharing systems.

Alongside the AI identity project, Estonia is exploring a new testing environment for air and water drones in the Baltic Sea region and expanding programmes designed to improve AI literacy. Authorities are also working to strengthen Estonian-language AI models and support organisations in making informed decisions about AI adoption and deployment.

Why does it matter?

As AI agents become increasingly capable of performing administrative, professional and transactional tasks, questions about identity, authorisation and accountability are becoming central governance challenges. Estonia’s proposal seeks to create a formal mechanism for defining what an AI agent is allowed to do, who authorised those actions and who remains responsible for the outcomes.

The initiative also represents a potentially significant evolution of digital identity systems. If successful, Estonia could provide an early model for integrating AI agents into public services and the wider digital economy while preserving transparency, security and trust. The framework may influence future debates on AI governance, digital public infrastructure and the legal status of increasingly autonomous AI systems in other jurisdictions.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our chatbot!

EU agrees tougher child protection rules against AI-generated abuse

The agreement between the European Parliament and the Council updates legislation first adopted in 2011, reflecting the growing role of digital technologies and AI in facilitating abuse.

Under the revised directive, designing, adapting or distributing AI systems intended to generate child sexual abuse material would become a criminal offence. The updated rules would also cover deepfake abuse material, livestreamed child sexual abuse, sexual extortion, and the possession or distribution of instructions on how to commit such crimes.

The agreement also strengthens rules on consent. It clarifies that consent must be given voluntarily, cannot be inferred from silence, lack of resistance or a previous relationship, and can be withdrawn at any time.

Grooming offences would be expanded to cover situations involving coercion, threats or deception, including cases where offenders falsely present themselves as peers of the child.

Victim protection would also be strengthened through access to healthcare, legal aid, helplines, accommodation support and compensation mechanisms. The agreement also extends limitation periods, recognising that many victims need years or decades before reporting abuse.

The revised directive still requires formal adoption by the European Parliament and the Council before entering into force.

Why does it matter?

The agreement shows how EU criminal law is being adapted to AI-enabled and online forms of child sexual abuse. Criminalising AI systems designed to generate abusive material is especially significant because it targets not only harmful content but also the tools used to produce it. The revised directive also strengthens victim support and prosecution timelines, addressing the reality that many survivors report abuse years after it occurred.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Spain reports higher removal of online hate speech content

Spain’s Observatory on Racism and Xenophobia identified 31,003 pieces of hate speech and discriminatory content on social media in May 2026, according to its monthly monitoring report.

The Observatory, known as OBERAXE, said digital platforms removed 65% of notified content, up from 56% in April. TikTok, X and Instagram recorded the highest removal rates, while the Trusted Flagger route continued to perform better than ordinary user reporting.

Trusted Flagger notifications accounted for 53% of removed content, compared with 48% in April. Content reported through ordinary user channels reached a removal rate of 12%, up from 8% the previous month.

The report found that 73% of detected content presented targeted groups as a threat, while dehumanising and severely degrading messages increased sharply compared with April. It also recorded frequent use of aggressive language and growing reliance on images, videos, memes and coded expressions.

People from North Africa remained the main target of online hate speech, followed by African and Afro-descendant people and Roma people. Narratives linked to citizen insecurity accounted for the largest share of detected content, followed by content related to social benefits and access to public resources.

OBERAXE said continued cooperation with digital platforms is essential to improve detection, removal procedures and policies aimed at combating discrimination online.

Why does it matter?

The report shows how hate speech monitoring is becoming part of platform governance and anti-discrimination policy. Spain’s data suggest that trusted reporting channels can improve removal rates, but the scale and persistence of hostile narratives show the limits of reactive moderation. The findings also raise wider questions about transparency, platform accountability and how governments can address online hate while protecting freedom of expression.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!