Patient identity has become a critical issue in public health systems, evolving from a back-office function to a frontline trust concern. The rise of digital check-ins, remote care, and cyber threats has tied identity to patient safety, privacy, and service access. This shift is evident in communities like Waikato, where practical challenges—such as patients without ID, whānau members supporting those who can’t consent easily, individuals changing their names, or clinicians verifying records—highlight the need for reliable identity solutions.
Governments are exploring four distinct approaches to address this issue, each with unique trade-offs in equity, cost, resilience, and clinical workflow. These options include centralized digital identity, wallet-based verifiable credentials, smart health cards, and layered identity assurance. While they can be combined, understanding their core philosophies is key to making informed decisions.
Centralized Digital Identity: Control vs. Accessibility
A government-operated identity service offers a single sign-on for citizens across multiple services, allowing individuals to verify their identity to a defined standard. It provides consistent assurance levels and strong audit trails but faces challenges like single points of failure and equity barriers. Verification steps, such as requiring documents or stable addresses, can exclude vulnerable populations. Public sector teams must design multiple entry points and build resilience to mitigate these risks.
For instance, allowing in-person verification or community hubs ensures that digital access isn’t the only option. Additionally, separating identity from permissions ensures that access remains role-based and minimum-necessary.
Wallet-Based Credentials: Speed and Privacy Trade-Offs
Wallet-based verifiable credentials, popularized during the pandemic, allow individuals to hold cryptographically verifiable proofs on their phones, such as vaccination records or eligibility certificates. These credentials offer privacy by design and fast verification but rely heavily on smartphone ownership. Revocation complexity and the need for equitable alternatives, like printed codes, are significant considerations.
While these credentials are effective for rapid eligibility checks, ensuring they work for everyone, including those without smartphones, remains a challenge. This approach aligns with the global shift toward digital credentials but requires careful implementation to avoid exclusion. The rise of digital health solutions has broader implications, as systems must balance innovation with inclusivity, addressing issues like the digital divide to prevent exacerbating health disparities.
Smart health cards, physical tokens with chips or scannable codes, offer a tangible solution for offline capability and inclusion. They are particularly useful for those without smartphones or consistent connectivity. However, they come with logistical challenges, such as lost or stolen cards and the need for rapid re-issuance.
To maximize their effectiveness, cards should store only patient identifiers, not sensitive clinical data. Pairing them with photo verification for high-risk events adds an extra layer of security. A compassionate process for updating name and gender markers ensures that users aren’t forced to disclose personal information unnecessarily.
Layered Identity Assurance: Balancing Pragmatism and Security
The layered “good enough” identity assurance approach acknowledges the complexities of healthcare by accepting varying levels of certainty based on service risk. This method uses multiple checks, such as confirming demographic details, verifying contact methods, and matching records, to ensure identity without relying on a single credential.
This model aligns with clinical judgment, allowing healthcare providers to make risk-based decisions. It ensures equity and access by permitting patients to receive care while identity issues are resolved over time. However, it requires clear guidance to prevent inconsistent practices across different sites and robust documentation for accountability.
Comparing the Approaches: Equity, Security, and Resilience
When evaluating these options, public sector leaders must consider equity, security, and resilience. Smart health cards and layered models generally perform best in equity, provided they include strong replacement and assisted channels. Wallet-based credentials, while efficient, risk excluding those without smartphones.
