Codify — Article

Northwest Territories allows registrar to use facial recognition for ID checks with strict sharing limits

Bill 11 lets the Registrar use prescribed biometric and signature‑comparison tools for driver ID while tightly restricting onward disclosure and creating controlled data‑share paths for insurers, researchers and vehicle history requests.

The Brief

Bill 11 amends the Motor Vehicles Act to let the Registrar use prescribed technological identity‑verification tools — explicitly including facial recognition software and signature comparisons — when someone applies for, renews, or requests a photo change on a driver’s licence or general ID card. The law bars the Registrar from sharing those tools or the information they produce except under a warrant or court order, but it creates a narrow exception permitting disclosure to police without judicial process when the Registrar reasonably suspects identity theft or impersonation.

Beyond biometrics, the bill restructures access to driving records and vehicle registration history. It formalizes application forms, fees, and information‑sharing agreements for third parties (including insurers, out‑of‑territory registries, and public bodies) and allows public bodies to obtain data for research or statistical purposes only under strict contractual conditions and with a blind on certain sensitive fields (photo, signature, licence status/class, and vehicle ownership).

Those rules aim to balance fraud prevention, administrative efficiency, and privacy protection — but they leave open operational and legal questions that will depend on forthcoming regulations and the Registrar’s implementation choices.

At a Glance

What It Does

The bill authorizes the Registrar, subject to regulations, to use prescribed technological identity‑verification methods (including facial recognition and signature comparison) for licence applications, renewals, and photo changes. It restricts disclosure of those tools and derived information except by warrant or court order, with a narrow exception for police when identity fraud is reasonably suspected, and establishes formal application, fee, and information‑sharing procedures for third‑party access to driving records and registration history.

Who It Affects

Directly affected parties include the Registrar’s office (operational and policy duties), users of territorial driver’s licences and ID cards, insurers and out‑of‑territory vehicle registries that request driving records, public bodies seeking data for research, and police services that may receive biometrics under the fraud exception. Technology vendors and legal/compliance teams working on information‑sharing agreements will also be implicated.

Why It Matters

This is one of the first territorial statutes to expressly authorize facial recognition in routine licensing and to pair that authority with a statutory disclosure regime and contract‑based safeguards for research access. The bill sets regulatory and contractual terms that will determine how broadly biometric verification and registrar data are used across government, insurance and research contexts.

More articles like this one.

A weekly email with all the latest developments on this topic.

Unsubscribe anytime.

What This Bill Actually Does

Bill 11 inserts a new set of definitions and a dedicated Part to govern technological identity verification and controlled sharing of registrar records. It allows the Registrar to apply any “prescribed” technological verification—explicitly naming facial recognition software and signature comparisons—when someone applies for, renews, or asks for a photo change on their driver’s licence or general ID.

The law leaves the technical details to regulations and prescribes application formats and fees for individuals and third parties seeking records.

On disclosure, the Act draws a hard line: data produced by verification tools and the tools themselves cannot be made available to anyone inside or outside the Northwest Territories unless a warrant or court order requires it. The Registrar may, however, provide such information to police without a warrant if the Registrar reasonably believes the person is impersonating someone else or involved in identity theft.

That exception creates a case‑by‑case operational decision for the Registrar and effectively deputizes the Registrar as a gatekeeper in potential criminal matters.The bill revamps third‑party access: individuals (or their agents) get standardized routes to obtain certified copies of their driving records; insurers, out‑of‑territory motor vehicle officials, and certain public officials can apply for records subject to statutory limitations; and a new process lets anyone request a vehicle’s registration history by VIN for a fee, but the Registrar must not disclose current or past owners’ personal information in that context. Public bodies (GNWT or federal) may obtain registrar data for research or statistical purposes only if the Registrar is satisfied that identifiable data are necessary and an information‑sharing agreement with strict conditions (security, destruction of identifiers, prohibition on re‑use) is in effect.

The bill also removes some requirements for certified copies and instead requires the Registrar to provide written confirmation that any copy supplied matches the records.

The Five Things You Need to Know

1

The Registrar may use facial recognition software and signature comparisons to verify identity when an individual applies for, renews, or requests a photograph change on a driver’s licence or general identification card.

2

The Registrar cannot disclose verification technologies or information derived from them to anyone inside or outside the Northwest Territories except under a warrant or court order.

3

The Registrar may disclose biometric or comparison results to a police service without a warrant if the Registrar reasonably believes the person is impersonating someone else or engaged in identity theft or fraud.

4

Public bodies may receive personal information from the Registrar for research or statistical purposes only if the Registrar determines identifiable data are necessary and an information‑sharing agreement containing security, de‑identification and destruction obligations is in effect.

5

A requester can obtain a vehicle’s registration history by VIN, but the Registrar must not disclose current or former owners’ personal information, and certain fields (photograph, signature, licence status, licence class, vehicle ownership) are barred from disclosure under information‑sharing agreements.

Section-by-Section Breakdown

Every bill we cover gets an analysis of its key sections. Expand all ↓

307.91.1

New definitions for biometric and privacy terms

▾

This section adds definitions that shape the rest of the Part: it defines “facial recognition software” as software that measures immutable facial characteristics, imports the Access to Information and Protection of Privacy Act’s definitions of “personal information” and “public body,” and clarifies that equivalent federal public bodies are covered. These definitions anchor the scope of what counts as biometric tech and whose privacy rules apply.

307.93

Registrar may use prescribed identity‑verification technology

▾

This provision authorizes the Registrar, pursuant to regulations, to use any prescribed technological means of identity verification — explicitly including facial recognition and signature comparisons — in three discrete contexts: licence application, licence renewal, and photo changes. The provision leaves the specifics (which technologies are “prescribed,” thresholds for use, and operational procedures) to regulations, making regulatory drafting the key implementation lever.

307.93(2)‑(3)

Disclosure ban with a limited police exception

▾

Subsection (2) imposes a near‑absolute prohibition on making verification tools or derived information available to anyone (inside or outside the territory) unless compelled by a warrant or court order. Subsection (3) creates a carve‑out allowing the Registrar to share such information with a police service without judicial process where the Registrar reasonably suspects impersonation or identity fraud. That design centralizes discretion in the Registrar while creating a narrow investigatory pathway for enforcement authorities.

4 more sections▾
311 (amendments)

Standardized requests for driving records and registration history limits

▾

The Act restructures how driving records and components are requested: individuals (or their agents) must use Registrar‑approved forms and pay prescribed fees; the Registrar must provide certified copies of records it produced, and copies plus written confirmation for external documents. It also adds a standalone process to request a vehicle’s registration history by VIN, listing permitted disclosures about the vehicle (description, registration dates and municipalities, status and functionality) while expressly prohibiting disclosure of current or former owners’ personal information.

311.2

Research and statistical access under contract

▾

This new section permits a GNWT or federal public body to request Registrar data for research or statistical use if the Registrar is satisfied identifiable information is necessary and an information‑sharing agreement is in place. The statute prescribes minimum contractual terms — security/confidentiality, removal or destruction of identifiers, prohibition on subsequent re‑use of identifiable data, and rules on correction/retention/destruction — and requires aggregate or de‑identified disclosure for any subsequent public release.

313 amendments

Copies, certification and written confirmation

▾

The bill removes some references to certified true copies and instead requires the Registrar to provide written confirmation that any copy of a notice or report supplied to a requester matches the record held by the Registrar. That change reduces reliance on a formal certification stamp while preserving a documented attestation from the Registrar that a supplied copy is accurate.

349(x.13)‑(x.14)

Regulation‑making powers for tech and sharing agreements

▾

Two new regulation‑making clauses let the government prescribe the technological means of identity verification and the terms governing information‑sharing agreements under sections 311 and 311.2. Given how many operational details the Act defers to regulation, these provisions will determine permitted technologies, technical standards, data retention, security requirements and the form of contractual arrangements with third parties.

Who Benefits and Who Bears the Cost

Every bill creates winners and losers. Here's who stands to gain and who bears the cost.

Who Benefits

  • Territorial Registrar and licensing staff — gain statutory authority to deploy biometric and signature‑comparison tools to detect fraud and streamline identity checks, reducing reliance on manual verification and contested identity disputes.
  • Researchers and public bodies — can obtain Registrar data for research and statistics under contracted agreements, enabling policy analysis and program evaluation if they meet the statutory de‑identification and security conditions.
  • Vehicle purchasers and industry actors — gain a formal, fee‑based route to obtain a vehicle’s registration history by VIN, improving transparency about a vehicle’s past status (active, unfit, rebuilt, destroyed) and functional history.
  • Insurers and out‑of‑territory registrars — retain access to driving records through a clarified application process, which may speed claims handling and inter‑jurisdictional licensing tasks when the Registrar supplies certified copies and confirmations.

Who Bears the Cost

  • Registrar’s office and GNWT IT/administration — must procure, configure and secure biometric systems, negotiate and monitor information‑sharing agreements, and absorb compliance and oversight workloads.
  • Technology vendors and integrators — face procurement requirements, security standards and likely certification hurdles set in regulation, along with liability scrutiny around accuracy and bias.
  • Public bodies and researchers — must draft, negotiate and comply with information‑sharing agreements (including security, de‑identification and destruction clauses), and may need to redesign projects to rely on aggregate or de‑identified data.
  • Insurers and third‑party requesters — must follow new forms, pay fees, and possibly enter into agreements or accept limited fields of disclosure (some sensitive fields will be withheld), which could complicate underwriting or claims investigations.
  • Law enforcement agencies — gain a narrow path to obtain biometric results without a warrant in identity‑fraud cases, but the bill’s warrant requirement in other circumstances restricts routine access and may force changes to investigative procedures.

Key Issues

The Core Tension

The bill balances two legitimate goals — preventing identity fraud and enabling useful, controlled access to registrar data for governance and research — against the risk of intrusive biometric surveillance and privacy erosion; it therefore hands significant discretionary power to the Registrar and to future regulations, making the trade‑off between efficiency and privacy largely an implementation question rather than a statutory one.

The bill tries to thread a needle between enabling modern identity checks and protecting privacy, but it delegates a lot to regulation. The statute authorizes “prescribed” technologies without setting technical standards or accuracy thresholds; regulators will need to define which biometric algorithms and vendors are acceptable, how to test for and mitigate demographic bias, and how long biometric or comparison results can be retained.

Without concrete accuracy and audit requirements in the Act itself, the quality and fairness of verification will depend heavily on regulatory detail and procurement practices.

The warrant‑only disclosure rule is strict, but the Registrar’s ability to hand over verification outputs to police without judicial oversight when there is a “reasonable belief” of identity fraud raises practical and legal questions. That standard is fact‑dependent and will place the Registrar in a quasi‑investigatory role: inconsistent application could produce unequal outcomes and legal challenges.

Similarly, the information‑sharing regime imposes contractual safeguards, yet enforcement relies on the Registrar detecting non‑compliance; the Act grants the Registrar power to stop disclosures, but it does not set out an independent audit or penalty regime for breaches by receiving public bodies.

Operational ambiguities remain. The statute permits disclosure of “information about the motor vehicle’s functionality,” a phrase that could be read narrowly or broadly and will affect what details appear in vehicle histories.

Fees, the structure of forms, timelines for responses, and how the Registrar documents “reasonable belief” are all left for subordinate instruments. Those implementation gaps create transition and legal risk for insurers, researchers, and police that will have to be resolved in policy, regulation and procurement.

There's more to this law than the bill.

Codify Laws traces every connection across the legislative lifecycle.

Bill↓Regulations↓Statute↓Proclamation↓In-Force Date
Try Codify Laws →