Government Identity Systems as Critical Competition Infrastructure

1. Introduction

Government identity systems—such as national digital-ID databases, electronic identification credentials, biometric identity systems, authentication infrastructure, and government-backed digital identity platforms—can become critical infrastructure for competition when access to them is necessary to participate in markets.

The competition-law concern is broader than whether the government itself competes with private firms. A government identity system can function as an upstream infrastructure layer upon which banks, telecom operators, payment providers, insurers, healthcare providers, public-service contractors, platforms, and other businesses depend.

If a state-controlled identity infrastructure becomes indispensable, several competition issues arise:

• exclusion of competing identity providers;
• discriminatory access conditions;
• excessive authentication or verification fees;
• preferential treatment for government-linked entities;
• tying identity verification to other government or commercial services;
• restrictions on interoperability;
• control over identity-related data;
• refusal to provide access to private competitors;
• technical standards that favour incumbent providers;
• accumulation of identity, authentication and transaction data;
• switching barriers and lock-in;
• cybersecurity requirements used in ways that unnecessarily exclude rivals; and
• leveraging identity infrastructure into adjacent commercial markets.

The central competition-law question is therefore:

When government identity infrastructure becomes indispensable for commercial activity, can control over that infrastructure confer market power in downstream markets?

2. What Is Government Identity Infrastructure?

Government identity infrastructure may include:

1. National identity databases
   • citizen identity records;
   • resident registers;
   • unique identification numbers.
2. Biometric infrastructure
   • fingerprints;
   • facial recognition;
   • iris recognition;
   • biometric matching systems.
3. Digital-ID credentials
   • government digital identities;
   • electronic certificates;
   • digital identity wallets.
4. Authentication infrastructure
   • government authentication APIs;
   • identity verification gateways;
   • electronic signatures.
5. Identity-data interfaces
   • APIs allowing regulated businesses to verify identity;
   • digital-KYC infrastructure;
   • eligibility verification.
6. Government trust infrastructure
   • certificate authorities;
   • trusted identity providers;
   • public-sector authentication frameworks.

The competition significance increases when these systems are used not merely to access government services but also to obtain bank accounts, mobile connections, payments, insurance, employment, digital platforms or other private-sector services.

3. Why Identity Infrastructure Can Become a Competition Bottleneck

A. Network effects

Identity systems exhibit strong network effects.

The more institutions that accept an identity credential, the more useful that credential becomes. Conversely, a competing identity provider may struggle to enter because businesses have little incentive to integrate a second system.

This can produce:

Government identity → widespread acceptance → more users → greater acceptance → higher entry barriers

The infrastructure may therefore become difficult to challenge even without conventional exclusionary pricing.

4. Essential-Facility Dimension

The strongest competition-law issue arises where government identity infrastructure is effectively indispensable.

A potential analysis can ask:

1. Is the identity infrastructure controlled by a dominant entity?
2. Is access technically or legally necessary to compete?
3. Can an equivalent alternative realistically be created?
4. Is duplication economically or legally feasible?
5. Has access been refused or restricted?
6. Is the restriction objectively justified?
7. Does the restriction eliminate or substantially weaken competition downstream?

This resembles the essential-facilities doctrine, although courts have generally imposed demanding conditions before requiring access to infrastructure.

5. Interoperability as a Competition Issue

Government identity systems can influence competition through technical architecture.

Suppose a government requires financial institutions to authenticate customers through one government-controlled API.

If independent identity providers cannot connect to the system, the government may unintentionally—or deliberately—create a single authentication gateway.

The issue then becomes:

Does the technical architecture itself create an unjustified competitive advantage?

Competition concerns may arise from:

• closed APIs;
• proprietary authentication protocols;
• exclusive certification;
• discriminatory technical standards;
• restricted interoperability;
• excessive certification costs;
• incompatible data formats;
• mandatory government identity integration.

6. Data Advantages

Identity infrastructure can generate extraordinarily valuable datasets.

Depending on the legal system, such infrastructure may contain or connect information concerning:

• identity;
• age;
• residence;
• citizenship or eligibility;
• professional status;
• government-service use;
• authentication history;
• verification events.

Where the identity operator also participates in commercial markets, combining this information with commercial data could create a significant competitive advantage.

This produces a potential data-leveraging theory of harm:

Identity infrastructure → privileged data access → superior commercial intelligence → downstream advantage → weakened competition

Privacy and data-protection law would operate alongside competition law rather than necessarily replacing it.

7. Preferential Access and State-Owned Enterprises

A particularly important problem arises where a government identity system is controlled by a public authority while a government-owned company operates downstream.

For example:

Government identity infrastructure

↓

Government-owned authentication provider

↓

Banking / telecom / payments / platform services

If the government-owned entity receives faster access, lower verification costs, better APIs or privileged data, competitors may argue that the infrastructure operator is facilitating state-enabled competitive discrimination.

8. Government Identity as a Platform

A modern digital-ID system can effectively operate as a platform.

It may have:

• users on one side;
• businesses and government agencies on another;
• identity providers;
• authentication providers;
• certification bodies;
• software developers;
• financial institutions;
• telecom operators.

This creates a multi-sided market.

Competition authorities may therefore need to assess:

• platform access;
• interoperability;
• authentication fees;
• ranking or certification;
• data portability;
• self-preferencing;
• technical discrimination;
• exclusion of competing identity providers.

9. Tying and Bundling

A government can potentially create competition problems if access to identity authentication is tied to another service.

For example:

To obtain access to the national authentication system, a company must purchase an additional government-linked technology service.

Potential theories include:

• tying;
• bundling;
• leveraging;
• discriminatory access;
• foreclosure of competing providers.

The legality depends heavily on the applicable competition regime and the government's statutory authority.

10. Refusal to Deal

A refusal by an identity infrastructure operator to provide access to a competing business may become legally significant where the infrastructure is indispensable.

Relevant questions include:

• Is the infrastructure genuinely indispensable?
• Is there a viable alternative?
• Is access technically possible?
• Is the refusal objectively justified?
• Does refusal eliminate effective competition?
• Would mandated access impair security or privacy?

Security considerations are particularly important in identity infrastructure because governments can legitimately impose rigorous authentication standards.

But security cannot automatically justify every exclusionary condition.

11. Discriminatory Access

A government identity provider could potentially favour certain entities through:

• different authentication prices;
• preferential API access;
• faster certification;
• superior service levels;
• privileged technical support;
• better access to identity attributes;
• exemptions from technical requirements.

Where the operator possesses a dominant position, differential treatment may raise issues analogous to discriminatory-abuse doctrines.

12. Identity Infrastructure and Switching Costs

Once thousands of institutions integrate a particular government identity system, switching becomes expensive.

Businesses may have to:

• rewrite software;
• recertify systems;
• retrain employees;
• migrate authentication records;
• redesign customer onboarding;
• undergo security audits.

Consequently, an identity system can create infrastructure-level lock-in.

Competition authorities should distinguish legitimate security-related standardisation from unnecessary restrictions that make alternative systems commercially unviable.

13. Relevant Market Definition

Several markets may need to be distinguished.

Possible upstream markets

• government digital identity services;
• biometric identity verification;
• digital authentication;
• electronic trust services;
• identity APIs.

Possible downstream markets

• banking;
• mobile telecommunications;
• payments;
• insurance;
• e-commerce;
• digital public services;
• online marketplaces.

A government identity infrastructure may therefore constitute an upstream bottleneck market even though the ultimate competitive harm appears downstream.

14. Competition Theories of Harm

15. Major Case Laws

The following cases provide useful doctrinal analogies for analysing government identity infrastructure.

1. Bronner v Mediaprint (1998) — CJEU

The Court of Justice imposed stringent conditions for treating infrastructure as an essential facility.

The case concerned access to a newspaper-delivery system. The Court required, among other things, that the facility be indispensable and that there be no actual or potential substitute.

Relevance

A government identity system should not automatically be treated as an essential facility merely because it is widely used.

A competition authority should establish genuine indispensability and lack of alternatives.

2. Oscar Bronner GmbH & Co. KG v Mediaprint Zeitungs und Zeitschriftenverlag GmbH & Co KG (1998)

This case is particularly important for the principle that competition law does not generally require a dominant undertaking to share infrastructure with competitors simply because sharing would make competition easier.

Relevance to government identity systems

A private competitor seeking access to a national identity API would need to demonstrate more than commercial convenience.

The analysis would focus on:

• indispensability;
• duplication feasibility;
• elimination of competition; and
• objective justification.

3. IMS Health GmbH & Co OHG v NDC Health GmbH (2004) — CJEU

The IMS Health litigation concerned access to a data structure protected by intellectual-property rights.

The Court identified stringent conditions for compulsory access, including circumstances where refusal could eliminate competition and prevent the emergence of a new product.

Relevance

Identity systems may involve proprietary software, databases, standards and interfaces.

IMS Health demonstrates that compulsory access must be carefully balanced against legitimate property and infrastructure interests.

4. Microsoft Corp v Commission (2007) — General Court

The Microsoft case is one of the most important authorities on interoperability.

The European Commission found that Microsoft's refusal to provide interoperability information could restrict competition in the work-group server market.

Relevance

This provides a strong analogy for identity-system interoperability.

If a dominant government-controlled identity platform prevents rival authentication services from interoperating without adequate justification, competition authorities could examine whether technical interoperability is necessary for effective competition.

5. Slovak Telekom v Commission (2021) — CJEU

The litigation concerned access to telecommunications infrastructure and the conditions under which refusal or restrictive access arrangements could constitute an abuse of dominance.

Relevance

Government identity infrastructure can similarly constitute an upstream network facility.

The case illustrates the importance of examining:

• access obligations;
• infrastructure control;
• foreclosure;
• regulatory frameworks; and
• competitive effects in downstream markets.

6. Magill (RTE and ITP v Commission) (1991) — CJEU

The Magill litigation established an important framework concerning exceptional circumstances in which refusal to license protected information can constitute abusive conduct.

Relevance

Government identity systems may involve controlled identity attributes and datasets.

Where competitors require particular information to provide a new service, Magill provides a useful framework for analysing when refusal to provide access can become competition-law relevant.

7. Commercial Solvents v Commission (1974) — CJEU

The Court considered the use of control over an upstream input to restrict competition in a downstream market.

Relevance

This is highly relevant where a government identity operator controls an upstream authentication input and also participates, directly or indirectly, in downstream markets.

The central concern is leveraging upstream control into downstream foreclosure.

8. Hilti AG v Commission (1991) — General Court

Hilti involved exclusionary practices and tying in relation to products forming part of a broader system.

Relevance

The case illustrates how control over an important component can potentially be leveraged into adjacent markets.

For identity infrastructure, the analogous concern would be:

Identity credential → authentication → mandatory additional service → downstream foreclosure.

16. Public Authority Complication

Government identity systems require a distinction between state regulation and economic activity.

Competition law may apply differently depending on:

• whether the government body is exercising sovereign authority;
• whether it is supplying goods or services;
• whether it operates commercially;
• whether another entity actually controls the infrastructure;
• whether the conduct is attributable to legislation rather than autonomous commercial behaviour.

Therefore, not every anticompetitive consequence of a government identity policy necessarily constitutes an abuse of dominance.

This is an important limitation.

17. Security and Privacy Justifications

Identity infrastructure is unusually sensitive because governments can legitimately invoke:

• national security;
• fraud prevention;
• cybersecurity;
• identity theft prevention;
• privacy;
• authentication integrity;
• public safety.

Competition authorities should therefore distinguish:

Legitimate restriction

A particular security certification is objectively necessary.

Potentially problematic restriction

The same certification is unnecessarily designed so that only one government-linked provider can satisfy it.

The question becomes one of necessity, proportionality and competitive neutrality.

18. Competition-Neutral Design Principles

A government designing identity infrastructure can reduce competition concerns by adopting:

1. Open standards

Use interoperable technical standards rather than proprietary architectures.

2. Non-discriminatory access

Provide comparable access conditions to similarly situated providers.

3. Transparent certification

Publish objective security and technical requirements.

4. API interoperability

Permit compliant competing services to integrate.

5. Data minimisation

Prevent unnecessary accumulation of commercially valuable information.

6. Data portability

Permit lawful transfer of identity credentials and verification information.

7. Functional separation

Separate infrastructure administration from downstream commercial activities.

8. Independent oversight

Subject access and technical rules to independent regulatory review.

9. Competitive procurement

Avoid unnecessarily long exclusive contracts.

10. Periodic review

Reassess whether technological alternatives have emerged.

19. Competition-Law Test

A useful analytical framework is:

Government Identity Infrastructure

↓

Is the operator an undertaking/economic actor?

↓

Relevant market

↓

Market power / dominance

↓

Is the infrastructure indispensable?

↓

Are alternatives realistically available?

↓

Access / interoperability conditions

↓

Discrimination, refusal, tying or leveraging?

↓

Actual or likely foreclosure?

↓

Objective justification?

↓

Proportionality and less-restrictive alternatives

↓

Effect on downstream competition

20. Emerging AI and Digital-Identity Issues

The competition implications become more complex when identity infrastructure is combined with AI.

For example, a government identity platform could become a gateway for:

• AI-based age verification;
• automated KYC;
• biometric authentication;
• AI fraud detection;
• automated eligibility decisions;
• digital wallets;
• cross-platform authentication.

If one provider controls both the identity layer and AI verification layer, it could potentially gain advantages in multiple adjacent markets.

This creates a possible identity–data–AI infrastructure stack:

Identity → authentication → data → AI verification → downstream services

Control at the first layer may therefore affect competition throughout the stack.

21. Key Legal Issues

The principal competition-law questions can be summarized as follows:

A. Dominance

Does control over government identity infrastructure confer substantial market power?

B. Essential facility

Is access indispensable to effective competition?

C. Refusal to deal

Has access been denied without adequate justification?

D. Discrimination

Are competing providers treated differently?

E. Interoperability

Can rival systems technically connect?

F. Data advantage

Does the infrastructure operator obtain competitively significant data unavailable to rivals?

G. Leveraging

Is identity infrastructure power being transferred into downstream markets?

H. Tying

Is access to identity conditional upon purchasing another service?

I. State neutrality

Does government ownership or control confer an artificial competitive advantage?

J. Regulatory capture

Could technical standards or certification requirements unnecessarily protect incumbents?

22. Conclusion

Government identity systems can evolve from ordinary administrative tools into critical competition infrastructure when commercial actors depend upon them for authentication, onboarding, payments, telecommunications, digital services or regulatory compliance.

The principal competition-law challenge is not simply whether a government has created a centralised identity system. Rather, it is whether control over that infrastructure is used—or has the practical effect of being used—to restrict downstream competition.

The most relevant doctrinal tools include:

• essential facilities;
• refusal to deal;
• interoperability;
• discriminatory access;
• tying and bundling;
• leveraging;
• vertical foreclosure;
• data-related market power; and
• competitive neutrality.

The cases of Bronner, IMS Health, Microsoft, Slovak Telekom, Magill, Commercial Solvents and Hilti demonstrate the principal legal principles that can be adapted to this emerging infrastructure problem.

The future competition-law question will increasingly be whether a government identity layer remains a neutral public infrastructure or becomes a strategic bottleneck through which access to multiple private markets can be controlled.