This page is the public marker for an ongoing investigation from the RD-Nordic-Identity workstream. The work looks at what changes when biometric identification moves from a narrow verification tool into wider AI-enabled infrastructure: large-scale sensitive data collection, normalised face and identity checks, and the practical consequences when legal, organisational, and technical guardrails lag behind deployment.
The first investigation thread focuses on Persona as a case study. The point is not to make a broad accusation against one company, but to examine a fast-moving identity verification market through a concrete example. The question is whether early AI-era identity companies, their customers, and the public institutions around them fully understand the responsibility that comes with biometric systems.
Ongoing investigation
The evidence package is being developed before the full article is published. The first public article in this wider programme is Why Privacy Choices Are Harder Than They Look, which introduces the behavioural lens used in this investigation.