How Ghana's National Information Technology Agency Plans To Roll Out Its Digital Wallet Platform
Back in mid-June, Ghana's National Information Technology Agency put out a concept note about a national document wallet. The gist:Ghanaians would eventually keep digital copies of their Ghana Card, driver's licence, and tax records on their phones.
Private companies, not the government, would build the apps for that. The concept note was light on how any of it would actually function.
This week, a presentation deck NITA shared ahead of its Early Market Engagement session filled in a lot of those gaps. It walks through the Ghana Electronic Document Wallet (GEDW). Who signs a document. How a verifier checks it. What stops one company from cornering the market on Ghanaians' personal records.
The Core Idea Hasn't Changed, But the Plumbing Is Clearer
The design is what Tech Labari first described:wallets don't store documents. They hold encrypted references, basically secure pointers. The actual birth certificate or transcript or business registration stays with the agency that issued it.
When a bank or employer needs to verify something, the wallet pulls it live from the source. The citizen's consent is logged at every step.
The deck lays out a six-step flow. An issuer signs a document with a government digital certificate. Its existence gets published as discoverable metadata. The citizen's wallet picks it up. The citizen reviews and manages it. They grant time-bound consent to share it. The requesting institution retrieves and verifies it.
The presentation claims what currently takes days of manual checks could happen in seconds.
A Public Key Infrastructure Already Exists and the Wallet Will Lean on It
One detail in the deck that stands out:how much GEDW depends on infrastructure NITA already runs. Ghana has a national Public Key Infrastructure anchored by an offline root certificate authority.
That root authority delegates trust to a government certificate authority covering ministries and state platforms, plus a separate civil and commercial authority that oversees licensed sub-authorities. Those sub-authorities can issue certificates to banks, fintechs, telecoms, universities, and the wallet providers themselves.
So every credential in a Ghanaian's digital wallet carries a signature chain back to that single root. The presentation pitched this as the difference between trusting a document because the letterhead looks official and trusting it because it's mathematically provable. Tamper-evident. Time-stamped. Non-repudiable.
The Legal Groundwork Is Older Than the Project
NITA pointed out it doesn't need new legislation to make digital signatures legally binding. Ghana's Electronic Transactions Act of 2008 already gives electronic records the same standing as paper. The Data Protection Act of 2012 and the Cybersecurity Act of 2020 are relevant too.
A still-pending Data Harmonisation Bill is the next piece. It would standardise how data gets classified and shared across public and private institutions.
That timing matters. Pilots and licensing don't have to wait for new laws. They just need NITA to finish the technical standards and accreditation rules that turn the existing legal framework into something software can actually use.
Government Regulates. It Doesn't Compete.
Ghana is taking a different path from India's DigiLocker, where the state runs the wallet directly. NITA splits it into roles instead. The agency sets standards, licenses participants, and runs the trust infrastructure. Licensed Electronic Wallet Service Providers (private companies) build and operate the actual wallet apps citizens use.
Those providers compete on design, pricing, and added features like automated KYC checks. The pitch to industry mirrors the pitch to citizens. Users get less paperwork. Companies get a new regulated market:wallet apps, enterprise document services, compliance tooling. All built on infrastructure NITA controls, not any single vendor.
What's Still Open
The presentation closed with eight questions NITA needs the market to help settle. Which documents should go first. What licensing bar for wallet providers. How revenue gets split among issuers, wallets, and the regulator. How the system stays usable for Ghanaians without smartphones or reliable data access.
NITA's own roadmap places the project in phase two of seven, which is early market engagement. Standards development, licensing, and a pilot are still ahead. The agency has been careful to frame this as consultation, not commitment.
Whether that consultation produces a working standard or a well-designed slide deck depends on phases that haven't started.
So why does this matter? A national digital identity layer changes the threat landscape. More sensitive data in circulation. More reliance on cryptographic verification. More surface that needs defending. The PKI at its core is the same kind of material that shows up in Security+ and Network+ training. We will be paying attention to how Ghana chooses to secure it.
