Guidance

Data (Use and Access) Bill factsheet: making lives easier

Published 24 October 2024

To make sure people know which digital identity providers are secure and trustworthy, digital identities can become certified against robust government rules on privacy, security and inclusion. This is set to be backed by new laws introduced on 23rd October 2024 in the Data (Use and Access) Bill.

From next year, these services will be given a “trust mark” to show that they meet the latest guidelines – this is a process that will be managed by the new Office for Digital Identities and Attributes (OfDIA).

Digital identities: explainer

• A digital identity is a digital representation of a person or things about them. It lets people prove these things without presenting physical documents and all of the information they contain.
• Hundreds of thousands of people are already using digital identity products every month, whether that’s to collect parcels, prove their right to work when securing a job or renting a flat.

What digital identity providers need to do to meet the government’s standards

• They will have to become certified against the “trust framework”, which sets out stringent rules on handling data privacy, security, inclusion and more.
• These rules include:
  • Not “profiling” users for third-party marketing purposes
  • Not creating large datasets that could risk revealing sensitive data about users
  • Explicitly confirming that users understand how their data is being shared, whenever this happens.

Read the UK digital identity and attributes “trust framework” that is currently being trialled.

Will the government provide mandatory digital identity cards

• No, there are no plans to introduce national digital ID cards.
• Using a digital identity will be voluntary. People will be in control of their data and who it is shared with.
• People will still be able to prove their identity using physical documents if they choose.
• If people choose to use digital identity products or services, we’re making sure they know which ones meet the government’s high standards.

Who will use digital identities

• Digital identities will not be mandatory. We are making it clear which digital identity products and services are secure and reliable, so you can make more informed decisions about which ones to trust with your personal data.

Will this all put my data at risk?

• No, the work the government is doing will help to make existing and future digital identity tools more secure.
• As well as following stringent security guidelines, digital identity tools that are certified with the scheme cannot create large datasets that could risk revealing sensitive data about users, helping to keep any information shared safe.

Does using a digital identity mean I have to share more personal data than normal?

• No, digital identities can mean you share less personal data. Think about the routine task of picking up a parcel, where you will sometimes have to show your driving license or passport.  
•  If you show something like a driving licence, this shares your full name, date of birth and address with a third party. They might even take a photo or scan it.
• Digital identity products can preserve your privacy by only sharing the data that is absolutely needed to complete the transaction in hand.

How to tell a digital identity product meets the government’s standards

• For now, you can check which products are certified against our “trust framework” and are overseen by Office for Digital Identity and Attributes (OfDIA) by looking at this register. Currently, 49 companies are signed up.

• From next year, services on the register will begin to display a “trust mark” issued by OfDIA. We will show you what this looks like soon, so you know what to look out for.

Paying for digital identity services

• There are 49 private companies certified against the current ‘trust framework’. They are already undertaking hundreds of thousands of Right to Work, Right to Rent, and Disclosure and Barring Service (DBS) checks every month.

• In these cases, employers and landlords pay for the services which are quicker, more efficient and more secure than other ways of verifying identity of new staff or renters.

• We estimate that supporting the digital identity sector could generate £4.3 billion for the UK economy over the next decade.