Digital public services are changing how people access government programs, healthcare, education and financial services. From digital identity to secure data exchange, countries are investing in shared digital systems that make public services more accessible and efficient. 

However, expanding digital services brings new responsibilities. Governments must protect personal information, prevent discrimination and ensure that people without reliable internet access or digital skills are not excluded. 

This is where Digital Public Goods (DPGs) and Digital Public Infrastructure (DPI) safeguards play an important role. The DPG Standard establishes expectations for open-source digital solutions, while the Universal DPI Safeguards Framework provides guidance for managing risks across the design, deployment and operation of digital public infrastructure. In this blog, we will look into these approaches that help governments build digital systems that are interoperable, secure and focused on public needs. 

What Are Digital Public Goods and Digital Public Infrastructure? 

Although DPGs and DPI are closely connected, they serve different purposes. 

Digital Public Goods 

Digital Public Goods are open-source software, data, AI models, standards and other digital resources that support sustainable development. They can be adapted and reused by governments, organizations and developers to address common challenges. 

Examples include: 

• MOSIP: An open-source platform for developing digital identity systems. 

• OpenCRVS: An open-source civil registration and vital statistics system. 

• OpenG2P: An open-source platform that helps governments configure and deliver social protection programs. 

These solutions provide reusable technology that countries can adapt to local laws, policies and service delivery requirements. 

Digital Public Infrastructure: The Shared Digital Foundation 

Digital Public Infrastructure refers to the digital systems that enable essential services to operate at scale. Common building blocks include digital identity, payment systems and data exchange. 

For example, a government benefit program may use digital identity to verify an applicant, a payment system to transfer funds and a data exchange mechanism to retrieve relevant information from authorized agencies.  

These components need to work together. Without shared standards and effective governance, government departments may end up with disconnected systems, repeated data collection and inconsistent service delivery. 

DPGs can supply the software and technical components used to build parts of this infrastructure. DPI provides the framework in which these components operate. 

Why Digital Public Infrastructure Needs Stronger Safeguards

Digital systems can improve service delivery, but poor implementation can create serious risks. A digital identity platform may expose sensitive information if access controls are weak. These issues can affect public confidence and limit the benefits of digital transformation. 

Common challenges include: 

• Data privacy: Personal information may be collected or retained beyond what a service requires. 

• Cybersecurity: Weak authentication, outdated software or poor access management can expose systems to attacks. 

• Digital exclusion: People with disabilities, limited connectivity or low digital literacy may struggle to use online services. 

• Algorithmic bias: AI-based decisions may produce unfair outcomes for specific communities. 

• Weak accountability: People may have limited ways to question decisions or report the misuse of their information. 

• Fragmented infrastructure: Systems that cannot exchange data securely may create additional costs and administrative work. 

Safeguards help governments address these issues before they become larger problems. They also encourage public institutions to consider the rights and needs of citizens throughout a system’s lifecycle. 

What Is the DPG Standard? 

The DPG Standard is a set of criteria used to assess whether a digital solution qualifies for recognition as a Digital Public Good. 

It looks beyond the availability of source code. A solution must also demonstrate that it meets defined expectations related to openness, development practices and responsible use.  

Key areas include: 

1. Privacy and Responsible Data Use 

Digital solutions should collect only the information needed for their intended purpose. Users should receive clear information about how their data is collected, used and shared. Consent mechanisms, retention policies and deletion procedures can help establish clear expectations for handling personal information. 

2. Security by Design 

Security controls should form part of the software architecture from the beginning. Encryption, role-based access controls, multi-factor authentication and vulnerability management can reduce exposure to common threats. The appropriate controls depend on the system’s purpose, data sensitivity and operating environment. 

3. Transparent and Responsible AI 

AI-based digital public goods need additional checks because their outputs can influence access to services and other important decisions. 

Developers should document data sources, known limitations and intended uses. Testing across different populations can help identify bias, while monitoring and feedback mechanisms can reveal problems after deployment. 

4. Open Standards and Documentation 

Clear documentation helps governments assess, implement and maintain digital solutions. Open standards can also make it easier to integrate software with existing systems and reduce dependence on a single technology provider. 

What Is the Universal DPI Safeguards Framework? 

The Universal DPI Safeguards Framework provides practical, rights-based guidance for building and operating digital public infrastructure in the public interest. Its major areas of focus include: 

Safety and Human Rights 

Digital infrastructure should protect people from foreseeable harm, including misuse of personal information, unauthorized access and discriminatory outcomes. Governments and implementing organizations need processes to identify risks, respond to incidents and provide appropriate remedies. 

Inclusion and Accessibility 

Digital services should work for people with different abilities, languages, levels of digital literacy and access to technology. This can involve accessible interfaces, support for local languages, assisted service channels and alternatives for people who cannot reliably access online services. 

Governance and Accountability 

Clear responsibilities help institutions determine who manages data, approves access, monitors compliance and responds to complaints. Public authorities should establish suitable oversight mechanisms and ensure that people have ways to raise concerns about decisions affecting them. 

Interoperability and System Resilience 

DPI components need to exchange information through agreed standards while preserving privacy and access restrictions. Systems should also be capable of responding to security incidents, operational failures and changes in policy or technology. 

How the DPG Standard and DPI Safeguards Work Together 

The two approaches address different parts of the same challenge. The DPG Standard focuses on the qualities and practices of individual digital solutions. The Universal DPI Safeguards Framework focuses on the wider conditions needed to deploy and operate digital infrastructure responsibly. 

Their relationship can be understood through four areas. 

Product-Level Protection 

The DPG Standard encourages developers to build privacy, security and responsible-use practices into software. These requirements help establish a baseline for assessing the suitability of a solution. 

System-Level Governance 

The DPI Safeguards Framework extends the focus beyond individual software products. It helps governments consider institutional responsibilities, public participation, risk management and accountability across connected systems. 

Inclusive Service Delivery 

A digital product may meet technical requirements and still be difficult for certain communities to use. DPI safeguards encourage governments to assess accessibility, social impact and potential barriers to participation. 

Continuous Risk Management 

Digital systems change as new features, integrations and user groups are introduced. Both approaches support the need for ongoing assessment, clear documentation and improvements as new risks emerge. 

A Practical Approach for Governments Implementing DPI 

Governments can translate DPG standards and DPI safeguards into a structured implementation process. 

• Step 1: Define the public need.Identify the service problem, intended users and expected outcomes before selecting technology. 

• Step 2: Assess available digital public goods. Review licensing, documentation, interoperability, maintenance requirements and security practices before adopting an open-source solution. 

• Step 3: Map risks early. Identify potential privacy, cybersecurity, exclusion and discrimination risks. Consider how these risks may affect different communities. 

• Step 4: Establish governance responsibilities. Define who owns the system, manages access, oversees data use and responds to incidents or complaints. 

• Step 5: Build safeguards into the architecture. Apply appropriate security controls, privacy protections, accessibility measures and transparent data-handling practices. 

• Step 6: Test with real users and operational scenarios. Evaluate usability, performance and potential harm across different devices, environments and user groups. 

• Step 7: Monitor and improve after launch. Review incidents, gather feedback, update software and reassess risks as the service expands. 

The Role of Technology Partners in Responsible DPI 

Building digital public infrastructure requires more than software development. Governments also need technical expertise in system integration, testing, cybersecurity, deployment and long-term maintenance. For organizations contributing to DPI projects, responsible delivery means considering privacy, accessibility and interoperability throughout the development process. 

At Technoforte, our work across digital public infrastructure and digital public goods includes support for platforms and initiatives such as MOSIP, OpenCRVS and OpenG2P. Our experience in product development, testing and DevOps supports the technical work required to build, integrate and maintain digital solutions. 

Conclusion 

Digital public infrastructure can help governments deliver essential services at greater scale, but its success depends on public trust. The DPG Standard provides criteria for assessing digital solutions, including expectations for openness, privacy and security. The Universal DPI Safeguards Framework helps governments address the wider risks associated with deploying and operating connected digital systems. 

Used together, they provide complementary guidance for building digital services that protect personal information, promote inclusion and support accountable governance. 

Connect with Technoforte to explore how our digital public infrastructure expertise can support the development, integration and delivery of secure, scalable digital solutions. 

Frequently Asked Questions 

What is the difference between DPG and DPI? 

A Digital Public Good is an open digital resource that meets defined criteria for public benefit and responsible use. Digital Public Infrastructure refers to shared digital systems, such as identity, payments and data exchange, that enable essential services at scale. 

What is the DPG Standard? 

The DPG Standard is the set of criteria used to assess whether a digital solution qualifies as a Digital Public Good. It covers areas including open licensing, documentation, privacy, security and responsible development. 

What is the Universal DPI Safeguards Framework? 

It is a rights-based framework that guides governments and other stakeholders in identifying and addressing risks associated with digital public infrastructure across its lifecycle. It covers safety, inclusion, governance and other structural risks. 

How do DPGs support DPI implementation? 

DPGs provide reusable digital components that governments can adapt for local needs. When integrated through appropriate standards and governance, these components can help reduce duplicated development work and support interoperability. 

What role does open-source software play in digital public infrastructure? 

Open-source software allows users to inspect, adapt and reuse code under the terms of its license. It can support local innovation and reduce dependence on proprietary solutions, although successful implementation still requires security reviews, maintenance and sound governance. 

How can governments implement DPI safeguards? 

Governments can begin by identifying risks, establishing governance responsibilities and incorporating privacy, security and accessibility into system design. Regular testing, public feedback and ongoing monitoring help keep safeguards effective after deployment.