Menu

The laws for subscriber identification module (SIM) registration in Nigeria and fourteen other countries are considered the most invasive in the world, according to a new study by Comparitech, an online platform that provides tech research. The study examines privacy in mobile phone usage in 150 countries and how national governments impose SIM-card registration laws to collect data on their citizens.

The report identifies the requirement of biometrics in the registration process as one of the factors that determine the level of intrusiveness of the laws. Nigeria is among countries that currently have biometric registration laws. According to Comparitech, SIM-card registration in Nigeria requires both fingerprints and a facial image.

Other countries with biometric requirement in the registration process are China, Tanzania, Saudi Arabia, Singapore, Tajikistan, Thailand, Uganda, United Arab Emirates, Afghanistan, Bahrain, Bangladesh, Benin, Oman, Pakistan, Peru, and Venezuela.

Tanzania is at the top of the ranking of countries with the worst SIM-card registration laws, scoring 19 points out of the maximum of 21 points. Next on the ranking is Saudi Arabia (17 points), followed by North Korea and Uganda (15 points each). Lebanon, Pakistan, Singapore, and Sri Lanka have a score of 14 points; while Nigeria, Bahrain, Bangladesh, China, Myanmar, Tajikistan, United Arab Emirates scored 13 points.

Other indicators used in the study to determine the level of intrusiveness of SIM-card registration laws include whether the data collected is stored by telecommunication providers or shared with government agencies; the requirement by law enforcement to gain access to the data; for how long the data is stored; and whether or not there are data privacy protection legislations.

Apart from biometrics, photo ID is a requirement to sign up for phone service in some countries. Other requirements are a permanent address, date of birth, nationality and gender.

"In China, anyone registering a new phone number now needs to submit a facial scan. This is also happening in Singapore," said Paul Bischoff, a tech writer at Comparitech.

According to the report, while most countries require mandatory SIM-card registration, this requirement does not exist in about 45 countries and jurisdictions. Countries without mandatory SIM-card registration laws include United Kingdom, United States, Bahamas, Bosnia and Herzegovina, Cabo Verde, Canada, Croatia, Denmark, Finland, Hong Kong, Ireland, Israel, Mexico, Portugal, and Sweden.

Discussing how SIM-card registration threatens people's privacy, Bischoff said, "Creating a database of citizens and their mobile numbers restricts private communications, increases the potential of them being tracked and monitored, enables governments to build in-depth profiles of their citizens, and risks private data falling into the wrong hands."

Comparitech said mandatory SIM-card registrations also poses the risk of identity theft and abuse of data. Criminals can use someone else’s photo and personal information to sign up for a new SIM, potentially causing a lot of trouble for the impersonated individual.

The tech researchers also said without laws to protect registration data, people’s personal details can be shared with other third parties, such as advertisers and tax collection agencies.