Organizations and Regulations
Decentralized identity stopped being a fringe idea somewhere around 2021, when governments started legislating for it. This page is context rather than API reference: which jurisdictions are building self-sovereign identity (SSI) infrastructure, and where a did:bio identifier fits into that landscape.
The through-line in all of these initiatives is the same one that motivates this platform: letting people prove things about themselves without handing their data to a central authority that becomes a honeypot, a gatekeeper, or both.
Government initiatives at a glance
| Government Initiative | Description |
|---|---|
| Europe - eIDAS 2.0 | Enables European citizens to access online services across the EU through SSI |
| Europe - EUDIW | Secure storage for European citizens to store credentials and attributes |
| Europe - eSSIF-LaB | EU project to promote the adoption of SSI |
| Europe - EBSI | Unified platform involving all 27 EU members for seamless crossborder services |
| Canada - PCTF | Rules, standards, and best practices for VCs across Canada |
| South Korea | Busan Blockchain ID App for smart city facilities |
| China - RealDID | Digital identity service for verifying real-name digital identities |
| Africa - Diwala | Leverages VCs to easily verify credentials |
| New Zealand - DISTF | Framework to promote the use of VCs in daily lives |
eIDAS 2.0, in particular
The most consequential of these is eIDAS 2.0, proposed by the European Commission in 2021. It commits the EU to an SSI model: individuals control their own identity data, every citizen gets a digital wallet (the EUDIW) associated with a DID, and trusted entities issue verifiable credentials whose verification keys are public. For anyone building research infrastructure in or with Europe, this isn't a trend to watch - it's the regulatory environment the infrastructure will operate in.
Where Bio-DID-Seq stands in this
The short version: the platform was built to the same standards these initiatives legislate around, so alignment mostly comes free.
Because did:bio implements the W3C DID specification rather than a proprietary scheme, a research identifier minted here can be verified across national boundaries, recognized by EU wallet infrastructure, and shared under both GDPR and eIDAS 2.0 rules - without a translation layer.
On cryptography, the platform is ahead of most of what it aligns with: ML-DSA-87 signatures and ML-KEM-1024 key encapsulation are the final NIST standards at their highest parameter set, from a FIPS-validated module. Regulators are moving toward mandating post-quantum protection for long lived data; research data is the canonical example of long lived data, so the platform simply started there. (The full reasoning is in Post-Quantum Security.)
Authorization and privacy follow the same pattern. UCAN capabilities give researchers the granular, delegable control these frameworks require, and the GDPR mechanics - minimisation, erasure, consent, audit - are covered concretely in Privacy Controls rather than re-asserted here.