- No regulatory impact assessment published for biometric mandate
- Operators would bear full infrastructure and operational costs
- Centralised biometric databases create POPIA compliance risks
Operators Reject Biometric Mandate as Unworkable
The Association of Comms and Technology (ACT), representing major South African mobile operators, has formally opposed ICASA's draft regulations requiring biometric verification for SIM registration. ACT CEO Nomvuyiso Batyi argues the rules impose disproportionate infrastructure costs on operators without a clear regulatory impact assessment, effectively mandating a national biometric database build-out at industry expense.
Beyond cost, the submission highlights fundamental privacy and security risks in centralising sensitive biometric data across multiple private entities. ACT contends the draft lacks adequate safeguards for data protection, breach liability, and cross-border data flow compliance, exposing both operators and subscribers to significant legal vulnerability under POPIA.
- No regulatory impact assessment published for biometric mandate
- Operators would bear full infrastructure and operational costs
- Centralised biometric databases create POPIA compliance risks
- Draft lacks breach liability and data retention frameworks
Digital Identity Frameworks Offer Viable Alternative
ACT proposes leveraging South Africa's emerging digital identity ecosystem — including the Department of Home Affairs' ABIS and bank-verified KYC rails — as a more secure, cost-effective foundation for SIM registration. This approach shifts biometric capture to trusted state and financial institutions with existing legal mandates and security certifications, rather than replicating capability across every telco retail point.
The industry body argues this model aligns with global best practice where telecoms verify against authoritative identity sources rather than originating biometric enrolment. It would also accelerate financial inclusion by linking SIM registration to verifiable digital credentials usable across public and private services.
- Leverage Home Affairs ABIS and bank KYC infrastructure
- Aligns with GSMA digital identity verification guidelines
- Reduces duplicate biometric enrolment across sectors
- Supports interoperable digital credentials for citizens
SME Resellers Face Disproportionate Compliance Burden
The draft rules threaten to exclude informal and township-based SIM resellers — a critical distribution channel for prepaid connectivity — who lack capital for biometric scanners, secure connectivity, and POPIA-compliant data handling. ACT warns this could concentrate SIM distribution in formal retail chains, reducing access in underserved areas and eliminating micro-enterprise income streams.
For SMEs providing connectivity-dependent services (fintech, logistics, gig platforms), unreliable SIM onboarding due to channel contraction increases customer acquisition costs and KYC failure rates. The regulatory uncertainty also delays product launches requiring verified user identities.
- Informal resellers cannot afford biometric hardware and compliance
- Risk of distribution concentration in formal retail only
- Higher KYC failure rates for SME digital services
- Regulatory uncertainty delays identity-dependent product launches
Next Steps: Engage ICASA Consultation Process
ACT has requested ICASA extend the consultation period and publish a full socio-economic impact assessment before finalising rules. Operators and affected SMEs should submit written representations highlighting operational realities, cost models, and alternative verification architectures. The outcome will shape whether South Africa adopts a fragmented, operator-built biometric regime or a unified digital identity approach.
Job seekers in telecoms compliance, digital identity, and regulatory affairs should monitor this process — the final framework will drive demand for POPIA-aligned system integrators, biometric middleware specialists, and KYC product managers across telcos, banks, and fintechs.
- Submit written representations to ICASA before deadline
- Demand published socio-economic impact assessment
- Advocate for digital identity interoperability standards
- Monitor hiring trends in regulatory tech and KYC roles
This Connect analysis references reporting or documentation from TechCentral. We add our own South African business context rather than republishing the original article.
View original source60 currently score 70 or higher for confidence. logistics leads the seven-day service signal set. Procurement and tender sources are excluded.
Open today's Connect Brief