By 
Kenya has opened talks with French secure identity provider IN Groupe to build a national digital identity authentication platform that would let citizens access government and private sector services through a single, verified digital identity. The discussions, held between ICT and the Digital Economy Cabinet Secretary William Kabogo Gitau and an IN Groupe delegation led by Celine Gouveia, the company's Vice President for Sales and Business Development in Government Programs, mark the clearest signal yet that the ministry wants to consolidate Kenya's fragmented identity infrastructure under one authentication layer.
According to Kabogo, the proposed platform is designed to reduce repeated identity verification and cut down on the unnecessary submission of personal information whenever citizens interact with different services. The two sides agreed to deepen technical and policy collaboration toward what both described as a trusted and interoperable digital identity ecosystem for the country.
The talks come at a delicate moment. Kenya's last two attempts at building a national digital identity system, Huduma Namba and its successor Maisha Namba, have both landed in court, both been accused of inadequate privacy safeguards, and both remain unresolved years after launch. Any new authentication layer will be built on top of that unfinished business, not instead of it.
What Was Actually Discussed
The core proposal is an authentication platform, not a new identity register. Kenya already has multiple identity touchpoints: the National Registration Bureau's ID database, the Maisha Namba ecosystem's Unique Personal Identifier and Digital ID, biometric passport records, and a scatter of sector-specific verification systems run by banks, telcos, and government agencies through eCitizen and other portals. What Kabogo and the IN Groupe delegation discussed was a layer that sits above these systems, letting a citizen prove who they are once and have that proof recognised across public and private services without resubmitting documents or biometric data each time.
The discussions also touched on governance. Kabogo indicated that while individual ministries and agencies would continue to run their own services, his ministry should provide overarching coordination to keep the identity ecosystem consistent across government. That is a notable admission on its own: it implies the current setup, where different arms of government run overlapping identity and verification systems with little central coordination, is part of the problem the new platform is meant to fix.
No contract, procurement timeline, or financial figure has been disclosed. What exists so far is a statement of intent to collaborate on both the technical architecture and the policy framework needed to support it.
Who IN Groupe Is
IN Groupe is not a new entrant to government identity work. The company traces its lineage to France's Imprimerie Nationale, the state printing house founded in 1538, and rebranded as IN Groupe in 2018 to reflect a broader mandate covering physical identity documents, biometric systems, and public key infrastructure. The company maintains partnerships with roughly 30 governments worldwide, with products and services deployed across 130 countries, and already operates a commercial office in Kenya alongside others in the United Arab Emirates, Malaysia, Singapore and India. Exports accounted for more than 55 percent of its 2023 revenue, underlining how central government contracts outside France have become to its business.
On the continent, IN Groupe's track record is mostly in physical document production rather than large-scale digital identity platforms. Its passport booklet references include Gabon, Ivory Coast, Benin, Djibouti, Senegal and Seychelles, and it recently won a tender to produce Seychelles' new biometric passports and issuing system, building on a relationship with that government stretching back more than two decades. The company also markets IN Wallet, a digital platform for storing government-issued credentials, which is closer in concept to what Kenya is now discussing than its passport-printing heritage.
IN Groupe is entering a market already served by established rivals. Idemia, born from the 2017 merger of Safran, Morpho and Oberthur Technologies, is present in 25 African countries and manages the continent's largest biometric database in Nigeria, while Belgium's Semlex has built a controversial footprint issuing national identity documents in several African states, including a large Ivory Coast contract, amid persistent allegations over how those contracts were won. Kenya's decision to talk to IN Groupe rather than deepen ties with an incumbent vendor suggests the ministry is treating this as an open field rather than a renewal of an existing relationship, though it has not said whether a competitive procurement process will follow.
The Weight of Huduma Namba and Maisha Namba
Kenya's history with centralised digital identity is the backdrop every stakeholder will read this announcement against. The government first attempted a unified identity system in 2018 under Huduma Namba, which established the National Integrated Identity Management System, a centralised database intended to consolidate government records on every citizen. In 2020, the High Court of Kenya acknowledged concerns raised by digital rights groups, including risks of data breaches, exclusion and discrimination, and suspended the rollout until the government addressed them. That suspension effectively ended Huduma Namba as originally designed.
In November 2023, the government launched Maisha Namba as its replacement, built around a Unique Personal Identification number and Digital ID alongside a redesigned physical card. The new system fared little better in the courts. The following month, Haki na Sheria Initiative filed a petition against the government challenging the rollout, arguing it violated the constitutional right to privacy and risked discriminating against marginalised communities, with the Katiba Institute filing a separate case on related grounds. The High Court blocked the rollout for lack of a Data Protection Impact Assessment, a decision commentators noted echoed the ruling that had effectively ended Huduma Namba years earlier.
The litigation has continued in phases since. Lawyers for Haki na Sheria argued in court in July 2024 that privacy could not be guaranteed because the Maisha ecosystem would be accessible to private firms not necessarily offering government services, and raised concern that the ten-year expiry on the citizenship document could leave people unable to renew it classified as aliens in their own country. Petitioners also told the court that Maisha Namba data was set to be shared with 450 entities, a figure that has become a reference point in subsequent public debate about the system's data-sharing scope. Expert witnesses, including a Privacy International researcher, testified that the ID system's centralised data repository could potentially function as a surveillance tool.
The government has continued to push the project forward regardless. Officials cleared a backlog of more than 600,000 ID cards in 2024 and continued issuing Maisha Cards to new applicants, with Immigration Principal Secretary Julius Bitok stating the new system would rely on existing biometric data rather than require the mandatory re-registration that undermined Huduma Namba. The government has budgeted roughly KES 6.88 billion for the 2024/2025 fiscal year on digital IDs, passports and birth certificates, on top of earlier allocations. A court order was lifted in August 2024 to avoid halting essential ID services, but the underlying constitutional questions remain unresolved before the courts.
This is the environment into which IN Groupe's proposed authentication platform would be introduced. An authentication layer that sits above Maisha Namba's identity register does not resolve the pending litigation over that register's constitutionality, its data-sharing scope, or its treatment of marginalised communities. If anything, adding a new layer of interoperability across government and private services raises the stakes of getting the underlying data protection questions right, since a breach or overreach at the authentication layer would now touch more systems at once rather than one at a time.
What an Authentication Layer Would Need to Get Right
Three technical and governance questions will determine whether this initiative fares better than its predecessors.
The first is data minimisation in practice, not just in messaging. Kabogo's framing, that the platform should reduce unnecessary submission of personal information, is the correct design principle: a well-built authentication system verifies a claim (this person is over 18, this person is a licensed driver) without necessarily exposing the underlying record every time. Whether IN Groupe's proposed architecture actually implements selective disclosure of this kind, or simply centralises access to fuller identity records behind a single sign-on, will only become clear once technical specifications are public. The Maisha Namba litigation exists precisely because petitioners argued the opposite happened in practice: broad data sharing dressed up as convenience.
The second is interoperability governance. Kabogo's comment that his ministry should coordinate across agencies while each retains control of its own services describes a federated model, which is generally the safer design choice for a country with Kenya's litigation history, since it avoids concentrating all citizen data in one database. But federation only works if there is a binding data-sharing agreement and independent oversight of what gets requested and logged at the authentication layer. Kenya's Office of the Data Protection Commissioner would need a clearly defined role in auditing this system from the design stage, not after deployment, given that the absence of a completed Data Protection Impact Assessment was the specific defect that twice halted prior rollouts.
The third is vendor dependency. IN Groupe's African track record is concentrated in physical document production and passport issuing systems rather than large national authentication platforms of the kind now being discussed. That does not disqualify the company, but it does mean Kenya would be an early reference case for IN Groupe's digital identity ambitions in East Africa, which cuts both ways: the vendor has commercial incentive to make the deployment a showcase, but Kenya would also carry more of the integration risk than it would with a vendor whose authentication platform has already been proven at similar scale elsewhere. Contract terms on data localisation, source code or architecture escrow, and exit provisions would matter more here than in a straightforward document-printing tender.
Where This Leaves the Timeline
No procurement process, budget line, or implementation date has been announced. The talks described so far are exploratory, focused on technical and policy alignment rather than a signed agreement. Given that Maisha Namba's core litigation is still active in the High Court, any authentication platform that depends on the Maisha Namba identity register as its underlying source of truth is, for now, being built on a foundation whose legal status is not fully settled.
For a ministry that has in the past year also lent its endorsement to a privately developed cryptocurrency token with only a loose connection to government digital economy policy, the IN Groupe talks represent a more conventional and arguably more consequential piece of digital public infrastructure. Whether it fares better than Huduma Namba and Maisha Namba will depend less on which vendor Kenya chooses and more on whether the data protection groundwork that was missing the first two times gets done before, rather than after, deployment begins.
Comments