Digital Identity: A prescription for the UK Government

As the new Labour government prepares for its first full session starting on 2nd Sept, one topic that should be high on the agenda is how to enable the UK's digital infrastructure to better support the goals of economic growth, reduced fraud and increased efficiency of public services.

OneID® sets out its recommendations for strengthening the UK’s digital public infrastructure, building out from the good start made by the Department for Science Innovation and Technology (DSIT).

What is Digital Public Infrastructure?

Digital Public Infrastructure is an approach to solving socio-economic problems at scale, by combining minimalist technology interventions, public-private governance, and vibrant market innovation.”

Common examples include the Internet, mobile networks, GPS, verifiable identity systems, interoperable payments networks, consented data sharing, open loop discovery and fulfilment networks, digital signatures, and beyond.”1

Just as we built roads, highways, and airports in the 20th century, we must now build a digital infrastructure that is open, accessible, and empowers everyone.” Bill Gates2

In many other countries, such as Estonia and India, Digital Public Infrastructure (DPI) has been adopted to give a solid baseline for growth and security. The ‘public’ infrastructure can be privately funded and publicly used, which saves taxpayers the cost of building it. Although DPI helps nations deliver to the UN’s sustainable goals3, it applies equally to any developed nation as an enabler of growth and inclusion. Beyond network infrastructure (mobile, broadband), DPI typically consists of three key layers; payments, identity and data sharing.

Payments

For payments, the UK already has world-leading services, but to maintain that leadership position we need to have a clear vision and strategy, on which HM Treasury is leading, with a National Payment Vision (expected this summer).  It is hoped that this strategy will guide the industry to deliver future payment 'rails' such as account-to-account payments and a digital pound.

Digital Identity

For identity, the Digital Information and Smart Data (DISD) bill should drive the next steps for the ID framework that already exists in beta, the Digital Identity and Attributes Trust Framework (DIATF). There are already 50 companies who have invested in the UK to become certified to the framework's requirements for security, data protection and customer consent for ID services.

This framework is designed to build public trust in identity providers as the UK government underpins that public trust through an independent audit of privacy, cyber-security etc. 

The Tony Blair Institute has called for a centralised ID system, at a cost of £1bn plus £100m running costs pa4. With the existing market of certified ID services under the DIATF, a centralised UK government ID system is just not necessary - the services already exist that can perform the same functions, are more secure and cost-effective for the taxpayer, and are available today.

A vibrant digital ID market is also key to reducing fraud, which is now a national epidemic, with half of all crime being either the stealing of ID data or the misuse of it to commit fraud. There should be a nominated minister for anti-fraud, probably within the Home Office, who can oversee a cross-sector holistic strategy (including big tech) to reduce fraud, including better use of ID services online to enable ‘verified person’ interactions. The Online Safety Act is an element of this, but needs to be accelerated, broader in ambition and connected to the DIATF framework.

There is now a broad consensus that a ubiquitous digital identity scheme is the core foundation to the full development of a digital economy. For example, a McKinsey study5 found that digital ID can enable a 3% GDP uplift (a £61bn gain for the UK, every year) and also concluded that:

  • “Digital ID is a foundational set of enabling technologies that can be pivotal in a wide range of digital interactions between individuals and institutions.
  • Digital ID enables individuals to unlock value and benefit as they interact with firms, governments, and other individuals.
  • In our seven focus countries, extending full digital ID coverage could unlock economic value equivalent to three to 13% of GDP in 2030 — if the digital ID programme enables multiple high-value use cases and attains high levels of usage.
  • For mature economies, many processes are already digital, so the potential for improvement is more limited and largely requires digital ID programmes that enable additional data-sharing features. An average per country benefit of 3% could be possible, assuming high usage rates.”

Data

Finally, for data sharing, the DISD bill also enables new schemes for ‘smart data’ sharing (“the secure sharing of customer data with Authorised Third Parties, upon a customer’s request.”6), which aims to unlock new value for customers. These schemes would follow in the footsteps of Open Banking, which has given citizens the ability to share their data to create benefits and value and enabled a more digital and secure economy. The Department of business and Trade (DBT) has been leading on 'Smart Data' projects across various sectors - the new bill should align these initiatives under a common approach to give interoperability, with a secure digital ID at the heart of data sharing. In addition, giving citizens the tools to share their government-held data with the private sector can also help with financial and digital inclusion.

DPI can be provided by the private sector (as OneID® has done with a UK-wide bank-based ID network) but should operate under the governance rules set by the government to maximise the ‘public value’ that can be created from use of the platforms.7

Enabling this key digital infrastructure will provide the foundations for the growth and security that the UK badly needs.

Recommendations

We have the following recommendations to enable a ‘digital Britain’:

Digital Identity

  • DSIT to support the growing demand for digital identity verification by promoting DIATF and create new uses cases for businesses and individuals (in addition to right to work, right to rent, DBS etc)
  • HM Treasury to update the MLRs to reference the UK’s ID framework (DIATF) to provide clarity for firms under AML obligations that a certified UK digital ID meets Customer Due Diligence requirements for an electronic identity.
  • The Home Office to own and implement a fraud reduction strategy
  • Align One Login with the DIATF framework (define roles played and certify for those roles, adopt the same open standards); one set of standards for the UK that works across all sectors. The merging of GDS into DSIT is a smart move that will help with this alignment.
  • Government service owners should increase engagement with the market of competitive solutions, e.g., via Crown Commercial Services Open Banking DPS.
  • Companies House should engage with the market to see if ID services being built8 are already available, to reduce taxpayer costs.

Payments

  • HM Treasury to publish the National Payments Vision as soon as possible.

Sources

    1. https://cdpi.dev/
    2. https://www.gatesfoundation.org/our-work/programs/global-growth-and-opportunity/digital-public-infrastructure
    3. https://www.undp.org/digital/digital-public-infrastructure
    4. https://assets.ctfassets.net/75ila1cntaeh/407vLufxryl1nq76fYgXFF/e75c03e6e0fc0a6c9e61baf973fcd50f/Tony_Blair_Institute_for_Global_Change__The_Economic_Case_for_a_UK_Digital_ID__July_2024.pdf
    5. https://www.mckinsey.com/capabilities/mckinsey-digital/our-insights/digital-identification-a-key-to-inclusive-growth
    6. https://assets.publishing.service.gov.uk/media/64bfea5290b545000d3e82bd/smart-data-phase-3-smart-data-implementation-guide-july-2023.pdf
    7. https://www.ucl.ac.uk/bartlett/public-purpose/sites/bartlett_public_purpose/files/iipp_wp_2024-05.pdf
    8. https://www.gov.uk/government/publications/companies-house-business-plan-2024-to-2025/companies-house-business-plan-2024-to-2025

Recent posts

Press Release

DIATF recertification: OneID® adds credentials as a reusable identity provider

OneID has been recertified as an Identity Service Provider and Orchestration Service Provider under the ...

Technology

What’s under the OneID® bonnet? Part 3 of 3

What guides us at OneID® to design our solutions the way we have? Why do we care so much about privacy? ...

Webinars

Bank ID — a strong alternative to traditional IDs in eSigning.

As remote contract becomes the norm in business, verifying identities online has become critical to ensu...