Discussion Papers
Jan 28, 2026
6
Minutes read

Assessing and Optimising MyDigital ID

No items found.
Authors
Salbiah Idris
No items found.
Key Takeaways
Data Sets Overview

Policy takeaways

The analysis points to five closely linked policy considerations that align with the paper's core areas and support the optimisation of MyDigital ID as it matures.

First, legal clarity underpins confidence and continuity. MyDigital ID benefits from operating within existing legal frameworks, but its expanding role makes a clearer articulation of legal status, user rights and accountability increasingly important. Strengthening legal coherence through clearer operational practices now, and through a dedicated statutory framework over time, helps ensure certainty for users, service providers and institutions as reliance on digital identity deepens.

Second, clear institutional roles support effective governance. As MyDigital ID operates across multiple ministries and agencies, governance effectiveness depends on clearly defined functional responsibilities. Reinforcing mandate clarity, reporting lines and coordination arrangements helps preserve accountability and continuity as institutional arrangements evolve.

Third, public trust is reinforced through visible safeguards and accountability. Trust grows when users can see how the system is governed in practice. Clear communication on safeguards, transparent reporting on performance and security, and accessible support and redress mechanisms help sustain confidence in MyDigital ID as usage becomes more frequent and consequential.

Fourth, inclusion must be actively supported and monitored. Multi-channel enrolment and assisted access provide a strong foundation for inclusive participation. As MyDigital ID expands, improving visibility of adoption patterns and participation outcomes helps ensure that access remains equitable and that implementation adjustments can be made where needed.

Fifth, technical resilience is a continuous policy responsibility. Security, reliability, and interoperability are not one-time achievements. Sustained assurance practices, disciplined integration standards and planned operational resourcing are essential to ensure that MyDigital ID remains dependable as a core component of Malaysia’s digital public infrastructure.

Taken together, these considerations reflect a common direction. Optimising MyDigital ID is less about redesign and more about consolidation. Strengthening alignment between law, institutions and operations allows the system to scale securely, inclusively and with public confidence, while continuing to deliver immediate value in its current role.

assessing-and-optimising-mydigital-id-3
Discussion Papers
Peer-reviewed publications designed to share emerging research or early analysis on key issues. Discussion Papers aim to invite feedback, encourage dialogue, and inspire further study or collaboration.
Disclaimer
As we transition to a digital-first communication and continue building our knowledge hub, publications released before October 2025 are preserved in their original format. Publications released from October 2025 onward adopt a new, digitally friendly format for easier online reading. The official versions of earlier publications, including their original language and formatting, remain available in the downloadable PDF.

Malaysia’s MyDigital ID represents an important step in the country’s efforts to develop a trusted, inclusive and secure digital identity ecosystem. Launched in November 2023, MyDigital ID currently serves as a Single Sign-On (SSO) authentication platform, allowing users to access government and private sector digital services using a single credential. It complements MyKad and forms part of the broader MyDIGITAL Blueprint, which seeks to modernise public service delivery, reduce administrative duplication and strengthen national digital infrastructure.

International experience indicates that while authentication platforms can improve access and efficiency, the broader effectiveness of national digital identity systems depends on legal clarity, institutional governance, inclusion and public trust, in addition to technical design. Systems that remain focused primarily on authentication may encounter limitations in adoption, interoperability or legitimacy if these enabling conditions are not progressively addressed. As Malaysia expands the use of MyDigital ID, policy choices over time are likely to influence how the platform develops and how it is perceived by users and service providers.

This discussion paper has three objectives. First, it identifies key determinants shaping the effectiveness of national digital identity systems, drawing on frameworks developed by internationally recognised organisations. Second, it evaluates Malaysia’s MyDigital ID against these determinants through a qualitative and comparative policy analysis. Third, it outlines policy considerations that may support the continued development of MyDigital ID in a manner that is inclusive, trusted and sustainable.

Based on international frameworks and comparative case studies from Estonia, Singapore and India, the analysis identifies five determinants of effectiveness:

i. integrity of registration and credentialing;

ii. functionality and interoperability;

iii. governance, oversight and safeguards;

iv. inclusivity and accessibility; and

v. sustainability and system design.

Across different national contexts, digital identity systems that perform well tend to share several characteristics, including a clear legal basis defining roles and responsibilities, coordinated institutional arrangements, privacy and security safeguards embedded by design, inclusive access models that address digital divides, and interoperable technical architectures that enable safe reuse of identity credentials across services. International experience also highlights that public trust is shaped by governance and accountability mechanisms as much as by technical assurance.

The assessment finds that MyDigital ID demonstrates several strengths at its current SSO stage. Its design incorporates recognised security standards, applies privacy-by-design principles and relies on authoritative verification against government databases. Governance responsibilities are distributed across multiple institutions, and adoption has increased as more digital services are integrated. At the same time, the analysis highlights areas where further clarification or development could strengthen longer-term effectiveness, including the legal basis for digital identity, transparency around oversight and redress mechanisms, inclusion outcomes, and long-term interoperability and sustainability arrangements.

In this context, the paper identifies five policy areas for consideration: strengthening the statutory framework for digital identity, enhancing institutional coordination and accountability, supporting public trust through transparency and engagement, developing a more explicit inclusion and accessibility strategy, and reinforcing technical resilience through open standards, interoperability governance and sustainable funding. These considerations provide a structured framework for evaluating how MyDigital ID can continue to evolve within Malaysia’s broader digital governance landscape.

Read Full Publication

Article highlight

featured report

Conclusion

Download Resources
Files
Datasets
Attributes
Footnotes
References
Photography Credit

Related to this Publication

No results found for this selection
You can  try another search to see more

Want more stories like these in your inbox?

Stay ahead with KRI, sign up for research updates, events, and more

Thanks for subscribing. Your first KRI newsletter will arrive soon—filled with fresh insights and research you can trust.

Oops! Something went wrong while submitting the form.
Follow Us On Our Socials