The Data (Use and Access) Bill, known more simply as the “Data Bill”, is a landmark piece of UK legislation that aims to reshape how individuals and businesses interact with digital data. It will introduce provisions for a national digital identity trust framework, helping to foster trust in digital identities by ensuring that businesses adhere to strict standards during digital transactions.
This blog gives an overview of the Data Bill and what this means for digital identities in the UK.
Why has the Government introduced the Data Bill?
The Government has said that the Bill will “unlock the power of data to grow the economy and improve people’s lives.”
This includes the creation and adoption of secure digital identities to help with everyday tasks, including buying age-restricted goods and services, completing employment checks, opening bank accounts and moving house.
Empowering people with secure digital identities will improve efficiencies, create positive customer experiences and reduce fraud. The Government predicts that these new provisions could boost the UK economy by £10 billion thanks to their significant potential to improve public services and drive economic growth in the UK.
The Data Bill had initially been announced in the 2024 King’s Speech as the Digital Information and Smart Data Bill (DISD). The previous Government’s version was known as the Data Protection and Digital Information Bill (DPDI).
What does the Data Bill include?
- establishing a framework for the provision of digital verification services to enable digital identities to be used with the same confidence as paper documents.
- amending the Privacy and Electronic Communications Regulations (PECR) to further deter against fraudulent and unsolicited communications.
- allowing consumers to securely share their personal data with authorised third parties to provide services such as personalised market comparisons and account management.
- making provisions to allow for information sharing during independent research into online safety matters.
- modernising the way births and deaths are registered in England and Wales, enabling the move from a paper-based system to an electronic register.
- facilitating the flow and use of personal data for law enforcement and national security purposes.
- creating a clearer legal basis for political parties and elected representatives to process personal data for the purposes of democratic engagement.
- transforming the Information Commissioner’s Office (ICO).
- improving data laws to increase clarity and encourage the safe development of new technologies.
What are the main digital identity aspects of the Data Bill?
A key part of the Data Bill aims to bring digital identity to more people by establishing the UK’s digital identity trust framework and introducing a digital identity regulator.
The Digital Verification Services
The Data Bill formally sets up a new national digital identity framework for digital identities in the UK, called the ‘Digital Verification Services’ (DVS). The Bill establishes the DVS with a broader, more structured regulatory foundation. Previously, the DVS was informally known as the ‘United Kingdom Digital Identity & Attributes Trust Framework’ or ‘UKDIATF’.
We’re particularly supportive of the DVS which could enable UK residents to use digital identities in an ever-growing range of situations. Instead of using a passport or driving licence every time they need to prove who they are, people will be able to use a trusted and certified digital identity. This will be more convenient and give them greater control, privacy and security over their personal data.
Digital identities can already be used as proof of identity for right to work, right to rent and criminal record checks – something which is proving to be incredibly popular with businesses and individuals. The Bill aims to expand the utility of digital identities to more areas in order to simplify the identity checks involved in everyday activities, such as buying age-restricted goods and accessing essential services online.
We hope that once the Bill becomes law, there is more consistency in where and how digital IDs are accepted. For example, we’ve previously said they should be accepted by other regulatory agencies such as the Financial Conduct Authority (FCA) and the Gambling Commission. We also hope to see other legislation updated, including the Mandatory Licensing Conditions, allowing people to use digital IDs to purchase alcohol in licensed premises.
The Digital Verification Services (DVS) register
The Data Bill will also include the DVS register. This publicly available register will include all certified digital verification services providers, allowing residents and businesses to understand which providers are registered and the different services they offer. All certified providers will be issued with a trust mark, making it easy to identify the trustworthy services.
This will allow people to check a provider’s certificate before choosing which one they want to create their digital ID with.
Digital identity regulator
The previous Government had planned to create the Office for Digital Identity and Attributes (OfDIA) to oversee the digital identity industry. This new body would have sat within the Department for Science, Innovation and Technology (DSIT). We await to see whether the current Government continues in that direction.
If created, it’s likely that this regulatory body would be responsible for ensuring that certified companies abide by the rules of the trust framework, handling consumer complaints, and consulting with industry members to further develop the framework.
Alongside most of the digital identity industry, we’ve been calling for OfDIA to sit as an independent regulatory body that may become a member of the Digital Regulation Cooperation Forum (DRCF). This is in place of it being an entity within DSIT.
This approach would allow the body to sit independently from the Government and foster greater public trust in its impartiality. This is crucial to ensuring the digital identity system remains transparent and accountable. In turn, it’s hoped that this will encourage the adoption of digital identities.
What does the Data Bill mean for digital identities in the UK?
As the risk of fraud continues to increase, businesses are being required to adapt their identity verification practices. As a result, it’s becoming harder for people to securely complete everyday tasks.
The Data Bill aims to make things easier and safer for people in the UK who wish to prove their identity. Once digital identities have the same level of confidence and acceptance as paper documents, more businesses are likely to accept them. As a result, people may be more likely to get a digital identity as they’ll be able to use it in more places.
Digital IDs are already growing in popularity in the UK, but this Bill will be a key driving force behind further adoption and unlocking their true potential.
Digital identities can offer several benefits to both businesses and customers, such as:
- Facilitating data minimisation – when businesses verify their customers’ identities with physical identity documents, they have no choice but to receive all the information on the document. Digital identities allow businesses to request certain identity details. This means they don’t need to store as much information whilst giving customers greater privacy over their personal data.
- Increased efficiency – a seamless digital identity system allows for quicker and more convenient transactions. Customers can easily access services without going through lengthy verification processes. Digital identities can also reduce the costs associated with manual identity verification checks.
- Better protection against fraud – as fraudulent documents become more sophisticated, digital verification can offer businesses a higher level of assurance when verifying customers’ identities.
- Increased inclusion – Digital identity checks can make the identity verification process easier for those people who are unable to access paper documents or complete identity checks in person.
People should always have a choice when it comes to using digital identities. We’re pleased to see that the Bill clearly states digital identities will not be mandatory and adoption is entirely voluntary.
What’s next for the Data Bill?
Now that the Bill has been introduced in the House of Lords, it will undergo scrutiny in both Houses of Parliament. We hope that the Bill will complete its parliamentary journey and receive Royal Assent in the Spring or Summer of 2025.
We expect the regulatory bodies to begin exercising their powers shortly after this, with digital identity providers moving to the ‘Live’ version of the DVS not long after.
Final thoughts
Julie Dawson, Chief Policy & Regulatory Officer at Yoti, said, “We’re delighted to see the Government advance the Data Use & Access Bill (DUA), a significant step forward for digital identities and data innovation in the UK. The establishment of the Digital Verification Service (DVS), which builds on and expands the previous Digital Identity & Attributes Trust Framework into a broader and more structured regulatory foundation, will enhance confidence in digital identities. This will enable individuals and businesses to securely access services, reduce fraud, and strengthen data privacy protections.
Digital IDs have the potential to transform how we complete everyday tasks, such as purchasing age-restricted goods and services, collecting parcels, opening bank accounts, and even moving house. They are already being successfully used for employment checks, and this Bill opens up further opportunities to make life simpler for UK citizens by expanding the practical applications of digital IDs.
However, with countries like Australia and Germany already progressing their digital ID systems, and the US rolling out mobile driving licences, the UK risks falling behind if a comprehensive strategy for digital identities, accredited and listed on the Digital Verification Service, is not developed promptly.
To fully realise the growth benefits and convenience for citizens, it’s crucial that the Government sets a short timeframe to publish the DVS Register and ensures that more departments begin leveraging it for a variety of services.”
Embracing digital identity is crucial for businesses aiming to enhance security, streamline operations, improve customer experiences and stay competitive in a rapidly evolving digital world. To learn more about our Digital IDs, please get in touch.
Please note this blog has been prepared for information purposes only. You should always seek independent legal advice.
