By Saman Indrajith

SJB Colombo District MP Mujibur Rahuman on Tuesday raised concerns regarding the Digital National Identity Cards project, warning that it could result in India having access to the biometric data of all Sri Lankans.

Rahuman, speaking during the third reading debate of Budget 2025, under the expenditure heads for the Ministries of Science and Technology and Digital Economy, criticised the government’s handling of the initiative, particularly its ties to an Indian company.

Rahuman said that India had pledged a four-billion-rupee grant for the project, but it had also provided an Indian company to implement the initiative. “What happens is that the money given by India will find its way back to India, along with the biometric data of all 22 million Sri Lankans,” Rahman said.

The digital identity card system, which will feature biometric data, such as fingerprints, iris scans, and facial recognition, was currently being implemented in 19 countries, Rahuman said, adding that those countries have faced data leaks. “Each and every one of those countries had data leaks,” Rahuman said, citing examples of massive national-level data breaches in the US, India, and South Korea.

He said that Sri Lanka was facing difficulties in securing data, citing recent hacks of the National Medicine Regulatory Authority’s website, as well as attacks on the websites of the Police and Government Press.

“How can we, who cannot even protect the police’s official website, ensure this data would not end up in the wrong hands? Who will take responsibility for the security of this data?” Rahuman asked.

The project aims to collect biometric data, including facial recognition, fingerprints, and retinal scans, for all 22 million Sri Lankans. “Without proper security measures in place, why are we collecting this data?”

Rahman warned that in the event of a data breach, it would be disastrous for the country and its citizens.

Rahuman also raised concerns about the tender process for the project. In 2023, tenders were called for the digital identity card project, with Madras Security Printers selected as the final bidder. However, this company was embroiled in controversy over the supply of faulty revenue stickers for liquor bottles, leading to the cancellation of the tender by the previous government. “When a tender is cancelled, a new tender should be called. Has the government called a new tender for this project? As far as we know, no new tender was issued,” he said.

Rahuman also questioned the political influence in respect of the decision, alleging that the government was being pressured to award the contract to an Indian company.

Foreign Minister Vijitha Herath had earlier confirmed that the government promised to award the contract to an Indian company, tying it to the Indian grant. “On one hand, India gives a four-billion-rupee grant for this project; on the other hand, we are hiring an Indian company, ensuring that the grant, along with the biometric data, eventually finds its way back to India,” Rahuman said.