IDDEEA

A recommendation to use digital identity with caution

A digital identity is a collection of data that uniquely identifies an individual or entity in the digital environment. Depending on the country, this identity may comprise usernames, passwords, digital certificates, biometric information, email addresses, social media profiles, and other digital data.

Digital identity provides access to a variety of online services, applications, and resources while also playing an important role in user authentication and authorization. As the number of online services rises, digital identity management is becoming increasingly important to ensure privacy, security, and data protection online.

Each country can have multiple digital identities. It is up to individuals and legal entities to decide which digital identities to trust and for what purposes.

Undoubtedly, being internationally certified and having guaranteed worldwide traceability are the prerequisites for taking into account a legal entity that uses a digital identity. Currently, the Indirect Taxation Authority of BiH, the IDDEEA BiH, and BH Pošta are recognised as qualified certifiers under the current Law on Electronic Signatures in Bosnia and Herzegovina. They have also been certified in line with pertinent international standards, such as the eIDAS regulation, and are registered in the register of certifiers.

As an institution that is internationally certified and competent for identification documents, electronic signatures, and electronic certificates related to identification documents, IDDEEA implemented the BiH Digital Identity for all citizens of Bosnia and Herzegovina in compliance with the Law on Electronic Signatures of BiH, which includes electronic certificates (digital identity is an electronic certificate).

We, therefore, urge you to exercise caution when using digital identities and electronic signatures, whether they pertain to your personal data or the services you provide to third parties. These entities may impersonate themselves, fail to comply with even the most basic requirements, or attempt to defraud both natural and legal persons in the area of interest.