The state is preparing a turnaround in mobile services: alongside an overhaul of the Slovensko v mobile app, a standalone identity application will be created with eID 2.0 and digital onboarding, and practical functionalities for life events will be added. At the same time, MIRI is building a register of data permissions and obligations that connects law with information technology and will simplify the management of access to data. The impetus comes from the time limits of the recovery plan as well as the dissolution of the supplier of the current application.
New strategy: more apps and a modern identity
The state is shifting to a strategy of multiple mobile applications with a separate layer for authentication and authorization. The goal is to reduce dependence on a single supplier, gain flexibility in delivering features, and avoid monoliths. Separating identity from other services mirrors practice in the banking sector and is also intended to serve other state applications via open interfaces.
The identity application is set to bring eID 2.0 with activation and login via contactless NFC. It also envisages digital onboarding – identity verification by photographing the document without the need for NFC – and links between applications or the desktop (app‑to‑app, desktop‑to‑app). For authorization, remote signing will be added, where the certificate can be securely stored on the server or on the mobile device, with NFC remaining as an alternative. Gradually, access to the message inbox on mobile, full-fledged notifications via a central solution, activation of the delivery inbox, retrieval of delivery receipts, mobile forms, and finally a European digital wallet with documents on the mobile will also be added.
Register of data permissions: connecting law and IT
Alongside mobile services, a register of data permissions and obligations is also being created, which is to be the foundation for managing access to public administration data. The state has a lot of data, but it lacks consistent descriptions and clear assignment of the legal bases for their use. The register will build on the registry module of the new metainformation system and will collect information about data, objects, records and attributes, as well as about the statutory authorizations to use them.
The goal is to create a trustworthy reference source for all public administration entities and also those that the law expressly authorizes to access data. It will describe data types and properties, legal purposes and legal bases for their processing, thereby facilitating both auditing and the practical assignment of access. The inspiration is the Czech register of rights and obligations, although the Slovak solution will not be its copy. The first visualizations are already emerging, showing how the data and legal layers will be connected in a single registry.