UK Digital Identity Policy - Issues, Choices and Questions in 850 words

Produced by the Centre for On-Line Safety, Privacy and Identity, City St George’s, University of London, London EC1V 0HB, [email protected] as the report of a Digital ID Roundtable chaired by Professor Edgar Whitley . The forty or so participants included those with up to half a century of experience with researching, developing, implementing, running and/or regulating digital identity services in the UK and overseas.

 Executive Summary for Policymakers

 A national digital identity system has the potential to enhance service efficiency, reduce fraud, and strengthen the UK’s digital infrastructure. However, realising these benefits requires addressing three interconnected challenges: public adoption, trust, and regulatory coherence. Failure to resolve these issues risks low uptake, public resistance, and fragmented implementation. Insights from a cross sector, interdisciplinary roundtable highlight structural, social, political, and technical barriers that are likely to influence the implementation process. This policy brief summarises the key issues that emerged from this roundtable.

 1.       Adoption: Securing Public Uptake in the UK

 Current levels of motivation among citizens are low, driven by unclear benefits and confusion about the purpose of digital identity. Large segments of the population—older adults, those without smartphones or reliable internet access, and nonnative English speakers—remain at risk of digital exclusion.

 Government service delivery is hampered by fragmented systems, inconsistent identifiers, and weak interdepartmental coordination. This complexity is mirrored at the user level, where multiple existing digital credentials create confusion and reduce incentives to adopt any new system.

 Key actions for policymakers:

 ·         Define clear, early use cases that benefit citizens explicitly (e.g., access to public services, age restricted purchases, fraud reduction).

·         Invest in digital inclusion, including device accessibility, language support, and assisted digital services.

·         Adopt a phased or voluntary rollout, allowing public confidence to build gradually. • Prioritise interoperability across government services and with private-sector systems.

·         Strengthen communications strategy, avoiding association with politically sensitive narratives (e.g., immigration control).

2.       Trust: Building Confidence Across Communities

Public trust in government digital initiatives is low due to historical failures, concerns about surveillance, and uncertainty about data access and liability. Marginalised groups express particular concern about how data may be used under shifting political conditions. There is also a risk of misuse by individuals who may exploit the system for coercive control, stalking or other interpersonal harm as well as by other malicious actors.

In addition, concerns about corporate influence and private governance of essential digital infrastructure must be addressed. Citizens require reassurance that data will be handled responsibly, securely, and transparently.

Key actions for policymakers:

·         Develop transparent governance frameworks, clearly specifying who can access data, for what purpose, and under what safeguards.

·         Publish clear information on risks, trade-offs, and limitations to support informed consent.

·         Embed safety-by-design principles, including protection against stalking, coercion, and identity misuse.

·         Engage trusted intermediaries—notably the banking sector—to reinforce confidence.

·         Communicate the risks of inaction, including rising levels of fraud and identity crime.

3.       Regulation and Standards: Providing Clarity and Accountability

 The regulatory environment for digital identity is currently underdeveloped, with limited clarity on standards, oversight responsibilities, and interactions with existing legislation. Policymakers must address cybersecurity risks, single points of failure, gaps in legacy systems, and cross sector coordination challenges.

Uncertainty over whether a new independent regulator is required—and how public and private responsibilities should be divided—limits progress. At the international level, interoperability remains a significant barrier.

Key actions for policymakers:

·         Establish a coherent national standards framework, covering technical, security, and interoperability requirements.

·         Clarify regulatory ownership, including whether new statutory bodies are needed. • Ensure futureproofing, through periodic review mechanisms and adaptive regulation.

·         Develop clear certification pathways and ensure sufficient assessor capability.

·         Promote strategic digital independence, reducing reliance on large private technology providers.

·         Support international alignment, particularly around identity verification and data sharing practices.

4. Proposed Next Steps

To move forward, the discussants proposed several foundational questions that need to be answered before moving forward on the introduction of a Digital ID scheme in the UK:

1         Define the multiple problems Digital ID is intended to solve.

4.       Map existing government identity verification systems to identify gaps and inefficiencies.

5.       Clarify purpose, use cases, and scope of a national Digital ID.

6.       Identify key stakeholders, including private-sector partners such as banks.

7.       Determine governance leadership (e.g., DSIT, Cabinet Office, Home Office).

8.       Consider “machinery of government” changes, such as integrating passport and driving licence authorities.

9.       Revisit the UK Trust Framework as a possible baseline.

10.   Choose between centralised or decentralised architecture.

11.   Consider establishing an independent, cross-party oversight board.

12.   Assess the implications of inaction, including rising fraud and inefficiencies.

Conclusion

A secure, inclusive, and trusted digital identity system is achievable—but only with clear political leadership, transparent governance, and sustained investment in digital inclusion and regulatory reform. Policymakers should prioritise cross sector collaboration, public engagement, and a phased implementation approach that builds confidence over time. By addressing these core challenges now, the UK can develop a robust digital identity ecosystem that enhances national capability, supports economic growth, and protects citizens in an increasingly digital society.