Sensitivity of Digital ID data, and the potential for catastrophic or malign mis-use, drives ‘ethical by design’ standards that go beyond compliance.