Since the outbreak of the ongoing conflict in Yemen, which the United Nations has described as one of the world’s most severe and complex humanitarian crises, the existence of accurate and reliable databases has become a critical necessity to ensure the effective delivery of aid to those most in need. Within this context, the use of biometric technologies in registration and identity verification processes for humanitarian beneficiaries has emerged as a significant development, as documented in MidEast Policy Brief on Humanitarian Biometrics in Yemen.
A study conducted by the Peace Research Institute Oslo (PRIO), in its analytical paper titled Piloting Humanitarian Biometrics in Yemen: Aid Transparency versus Violation of Privacy, suggests that humanitarian organizations, most notably the United Nations World Food Programme (WFP), adopted biometric registration systems in Yemen in response to the complexities of identity verification in an environment characterized by large-scale displacement and the widespread absence of reliable official documentation among significant portions of the population. The study highlighted a central tension surrounding the use of biometric data in Yemen: on one hand, biometric systems are viewed as a mechanism for enhancing transparency and efficiency in aid distribution while reducing manipulation and duplicate registration; on the other hand, they raise serious concerns regarding privacy protection and the security of personal data belonging to vulnerable populations in an exceptionally complex conflict environment.
In addition, another analysis issued by the Norwegian Centre for Humanitarian Studies emphasizes that the introduction of biometric systems in Yemen became intertwined with local political dynamics. In areas controlled by the Houthis in northern Yemen, biometric registration initiatives encountered resistance and restrictions, reflecting the extent to which data governance itself has become embedded within broader struggles over power and authority.
According to the PRIO Middle East Policy Brief, which published the report Piloting Humanitarian Biometrics in Yemen, the World Food Programme (WFP) and other humanitarian actors began implementing biometric systems, including fingerprint and iris recognition technologies, in order to register aid recipients and verify their identities before distributing food and cash assistance. These measures formed part of broader efforts aimed at increasing transparency and efficiency in aid distribution while minimizing opportunities for fraud and duplicate registrations.
Over recent years, the internationally recognized Yemeni government has also undertaken publicly announced executive measures to introduce and expand a smart national identity card system equipped with electronic chips and biometric features within the institutional framework of the state.
This transformation began toward the end of 2023, when Yemen’s Ministry of Interior launched the smart-chip national ID system in Aden. The initiative was officially announced through ministry statements and subsequently reported by credible local media outlets, which indicated that the project aligned with government efforts to establish a modern informational infrastructure capable of linking citizens to a unified civil registry while improving identity verification systems.
Subsequently, executive and administrative measures were introduced to enforce the new system. In mid-2024, the Ministry of Interior issued mandatory directives requiring all public institutions, private entities, and banks to adopt the smart ID card in official, commercial, and service-related transactions, while gradually phasing out the use of traditional identity cards. According to ministry statements circulated through reliable news agencies, institutions failing to comply with these directives could face legal accountability.
Within this context, a fundamental question emerges: where do Yemenis’ data ultimately reside? Yemen still lacks a comprehensive legal framework governing the protection of personal data, including biometric information. Neither the constitution nor modern legislation currently regulates the collection, storage, sharing, or oversight of such data.
According to an independent legal analysis conducted by Markaz Himayah, Yemen does not possess an enforceable data protection law comparable to frameworks such as the European Union’s GDPR or similar international standards. Existing legislation contains only general references to document confidentiality and the right to access information, without establishing mechanisms for the protection of digital or biometric data. This legal vacuum effectively means that any data collected through the smart identity system remains outside a clearly defined legislative framework capable of imposing transparency obligations, usage restrictions, or access limitations on the authorities managing such information.
To date, there has been no official declaration by the Ministry of Interior or relevant authorities clarifying whether biometric data are centrally stored on domestic or foreign servers, nor identifying the entities capable of accessing them. Yemen’s limited technological infrastructure, including the absence of advanced and secure national data centers capable of protecting citizens’ information, further reinforces the possibility that external providers or unstable infrastructures may be involved—partially or entirely—in managing these databases. Under current conditions, the Yemeni state lacks the technical capacity required to independently operate a fully secure centralized data system.
The sensitivity of biometric data stems from the fact that such identifiers cannot be altered if compromised. Characteristics such as fingerprints or facial recognition patterns remain permanently linked to individuals, rendering any leakage or misuse exceptionally dangerous in the absence of robust safeguards or clear legal oversight. The fragility of the Yemeni state therefore risks placing the management of these data beyond the boundaries of national sovereignty, creating what may be described as a “digital sovereignty threat,” whereby the personal data of Yemeni citizens exist outside the legal control of the state and even beyond the control of the individuals to whom they belong.
The study Piloting Humanitarian Biometrics in Yemen further explains that handling biometric data within a complex conflict setting constitutes a profound challenge, given the deeply personal and sensitive nature of such information and the possibility that it could be exploited for purposes unrelated to the protection or welfare of beneficiaries if improperly managed or shared. This implies that any authority administering biometric databases should operate within strong protection frameworks—frameworks that remain largely absent in Yemen today.
The research paper also outlines how the World Food Programme (WFP) utilizes biometric registration systems to verify aid recipients and confirm their eligibility as part of broader efforts aimed at improving transparency and reducing fraud in large-scale humanitarian distribution programs. According to the same analysis, significant disagreements persist between international humanitarian organizations on one side and local authorities, particularly the Houthis, on the other regarding who ultimately controls biometric data. This demonstrates that such data are stored within a deeply political environment capable of reshaping their legal and security implications, thereby necessitating a more critical understanding of what “data control” truly means within conflict settings.
A review of international research literature reveals that the transition toward digital and biometric identity systems represents a highly complex intersection of humanitarianism, politics, and state-building. In the Yemeni case, where ongoing conflict continues to reshape structures of governance and authority, the question of data ownership and control becomes inseparable from broader issues concerning institutional legitimacy and citizen protection.
In other words, the fate of biometric data in Yemen constitutes a field of interaction between the state, society, and international actors. Addressing this issue requires clear public policies, appropriate legislation, and independent oversight mechanisms capable of transforming digital identity systems from potential tools of surveillance and political leverage into instruments that genuinely strengthen citizens’ rights and improve access to essential services.