A perspective for governments.
Public policy choices that decide whether a country's digital signature takes off.
In almost every country where digital signatures became part of everyday life, there were public policy decisions behind it. Not just a law, but a set of choices about who supervises, who issues, who pays, what is accepted and how it connects with the rest of the world. This article lays out those decisions for those who have to make them or influence them.
Ten decisions
- A neutral, tiered legal framework. One that does not pick technologies, but states clearly what effect each signature level has.
- A technically capable supervisor. Independent, adequately resourced, and empowered to accredit, audit and sanction.
- A public root and trusted list. So that any validator, inside or outside the country, knows which providers are authorized.
- Signatures for everyone. Included in the national identity or available at no cost for personal use.
- Remote signing enabled. With clear custody and authentication requirements, so that signatures can reach the phone.
- The State as first user. Every public agency accepts any valid signature of the required level, not just one provider's.
- Open standards. In formats, protocols and interfaces, to avoid being locked into a single provider.
- Public procurement without lock in. Contracts that require export, interoperability and an orderly exit.
- International recognition. Bilateral and regional agreements, built on frameworks such as UNCITRAL's.
- Inclusion and measurement. Assisted channels and a public adoption dashboard.
The State in three roles
| Role | What it decides | Risk if neglected |
|---|---|---|
| Regulator | Laws, levels, supervision. | Ambiguous rules that no one dares to use. |
| Provider | National identity, root, its own services. | Competing with the market, or depending on a single provider. |
| User | Which signatures it accepts and for which procedures. | An infrastructure that exists but goes unused. |
Signatures as infrastructure
The vision of digital public infrastructure, promoted by organizations such as the World Bank, helps clarify the State's role: build or regulate basic building blocks, such as identity and signatures, on open standards, and let the public and private sectors build services on top. The State does not have to do everything, but it does have to make sure the pieces fit together.
Digital signatures take off when the State combines a neutral, tiered framework, a strong supervisor, verifiable public trust, signatures accessible to everyone, acceptance in its own procedures, open standards, procurement without lock in, international recognition and inclusion. It regulates, it provides and, above all, it uses.
Sources
- UNCITRAL Model Law on Electronic Signatures, 2001
- UNCITRAL Model Law on the Use and Cross border Recognition of Identity Management and Trust Services, 2022
- World Bank, Digital Public Infrastructure and Development: A World Bank Group Approach, 2025
- G20 Framework for Systems of Digital Public Infrastructure, Bengaluru, 2023
- OECD, Recommendation on the Governance of Digital Identity, 2023