A distributed system for managing identity, ID, data of registered users, wherein the ID data contains biometric characteristics of a registered user, the ID management system comprising: a client application running on an electronic device associated with the registered user, the client application comprising a graphic user interface, GUI, for interacting with the corresponding registered user; a network of ID processing touchpoints, wherein an ID processing touchpoint is configured to process ID data for the authentication of users, wherein the ID processing touchpoint is configured to issue a status notification associated with the processing and/or use of the ID data by the ID processing touchpoint; an ID server configured to receive and distribute the status notification issued by the ID processing touchpoint to the corresponding client application; wherein each client application is configured, in response to receiving the status notification from the ID server, to issue user alerts on the GUI to notify the registered user on the status of the corresponding ID data at the ID processing touchpoint; wherein the client application is configured to display on the GUI a set of user-selectable options for initiating one or more actions in response to the notification received from the ID server and/or an ID processing touchpoint, wherein the selectable options comprise issuing a breach notification indicating an unauthorised ID transaction at an ID processing touchpoint; wherein upon receiving a selection for issuing a breach notification, the client application is configured to issue a corresponding breach notification, which is communicated to a security server, where it is stored in a registry, the security server being part of the ID management system; wherein the security server, upon receiving the breach notification is configured to initiate a set of breach control actions for assessing and managing the identified ID breach, the breach control actions comprising at least one of investigating the cause of the breach, notifying other ID processing touchpoints of the breach, and deleting the breached ID data from the ID management system and/or other ID processing touchpoints. a client application running on an electronic device associated with the registered user, the client application comprising a graphic user interface, GUI, for interacting with the corresponding registered user; a network of ID processing touchpoints, wherein an ID processing touchpoint is configured to process ID data for the authentication of users, wherein the ID processing touchpoint is configured to issue a status notification associated with the processing and/or use of the ID data by the ID processing touchpoint; an ID server configured to receive and distribute the status notification issued by the ID processing touchpoint to the corresponding client application; wherein each client application is configured, in response to receiving the status notification from the ID server, to issue user alerts on the GUI to notify the registered user on the status of the corresponding ID data at the ID processing touchpoint; wherein the client application is configured to display on the GUI a set of user-selectable options for initiating one or more actions in response to the notification received from the ID server and/or an ID processing touchpoint, wherein the selectable options comprise issuing a breach notification indicating an unauthorised ID transaction at an ID processing touchpoint; wherein upon receiving a selection for issuing a breach notification, the client application is configured to issue a corresponding breach notification, which is communicated to a security server, where it is stored in a registry, the security server being part of the ID management system; wherein the security server, upon receiving the breach notification is configured to initiate a set of breach control actions for assessing and managing the identified ID breach, the breach control actions comprising at least one of investigating the cause of the breach, notifying other ID processing touchpoints of the breach, and deleting the breached ID data from the ID management system and/or other ID processing touchpoints.