Trust in Digital Identities
The issue of digital identities is a hot topic within the UK technology sector and the government has introduced proposed legislation to tackle some of the issues digital identities present.
What do we mean by Digital Identity?
A digital identity is a digital representation of your identity, like your name and age, which can be used as an alternative to physical ID such as passports or bank statements. Digital identities can also include biometric information, such as your fingerprint or face scan.
The case has been made by the likes of techUK that digital identity safeguards are key to unlocking the full potential inherent in a thriving UK digital economy. This is because online fraud has a detrimental impact on people’s willingness to engage with digital innovation, but adoption of secure, regulated, digital identity solutions can play an important part in reducing online fraud.
New legislation
In March 2023, the Data Protection and Digital Information (No.2) Bill (DPDI Bill No 2) had its first reading in Parliament and the previous Data Protection and Digital Information Bill (DPDI Bill No 1) was withdrawn. Much of the focus on these Bills has been on reform of the data protection legislation, particularly the UK GDPR. However, the DPDI Bill No 2 also sets the legislative basis for:
- a new UK Digital Identity & Attributes Trust Framework (Trust Framework)
- creation and maintenance of a digital verification services (DVS) register for providers conforming to certain accreditation requirements
- an information gateway to allow identity and eligibility checks to be made against data held by public authorities
- designation of a trust mark that can be used by accredited DVS providers registered on the DVS register
The DPDI Bill No.2 is expected to come into force at some point in 2023.
Some benefits and challenges
We’ve been working on a major procurement of a digital credentials solution recently. Digital credentials are awarded to prove someone’s qualification or achievement. In the absence of an established Trust Framework, we’ve found some provider resistance to make commitments about the interoperability of their digital credentials solution with other systems. Establishing a set of rules that must be met to join the DVS register and to enable organisations to use the trust mark should encourage more interoperability within the digital identity market, including in the context of digital credentials.
The digital identities ecosystem is comparatively complex, with a variety of different types of organisations involved. Examples include:
- identity service providers
- attribute service providers
- orchestration service providers
- relying parties
- scheme owners and users
Explaining to users how their data will be used, and by who, in a manner that is easily understood will require skill. It will be important this is done effectively, both to comply with data protection legislation and to ensure public confidence in the new Trust Framework and the trust mark.
A new Office for Digital Identities and Attributes is expected to oversee security and privacy for digital identities and the Trust Framework – tech businesses wanting to participate in the digital identities ecosystem are advised to look out for further developments on this.
Written by Paul Knight and Alexandra Ranaghan
Warning: Undefined array key "author_person" in /home/b4business/public_html/wp-content/themes/b4-2020/functions.php on line 121
Warning: Trying to access array offset on value of type null in /home/b4business/public_html/wp-content/themes/b4-2020/functions.php on line 121
More in Solicitors
Freeths sets 2040 net zero pathway with release of first firm‑wide...
Leading law firm Freeths has just published its first Net Zero Transition Plan, marking a major step forward in the firm’s long-term commitment to responsible business. The plan sets out a clear, science-aligned pathway to achieving net zero across the value chain by 2040, underpinned by newly validated near and long-term targets from the Science […]
TalkTalk Business expands managed services portfolio with addition of Planet IT
Leading law firm Freeths has advised the selling shareholders of Planet IT on the sale of the business to TalkTalk Business, supporting TalkTalk Business’s expansion of its managed services portfolio.
Freeths Spotlight: A Young Apprentice’s Path to a Career in Law
Freeths has been working with an outstanding legal apprentice who has shared her story about carving out a successful career in law via the apprenticeship route. She’s currently part of the team at Freeths in Oxford, and her experience offers a really strong example of the opportunities apprenticeships can provide in the legal sector.
From this author
End of 2025: Business reflections from Mills & Reeve
As we wrap up 2025, it’s a good moment to pause and reflect on what’s been an eventful year for Oxfordshire and to look ahead at what’s on the horizon for 2026.
Innovation gap opening due to varying AI adoption – Mills &...
An innovation and governance gap is opening up between businesses that realise the potential of GenAI and those that see its impact as limited, our new report has found.
According to The Critical AI Window, organisations that don’t find ways to capitalise on the potential of AI to drive innovation and growth run the risk of being left behind. As a result, competitive edge is at risk.
Our report shows that less than a third of businesses (31%) are using GenAI, with only one-fifth (22%) seeing it as high value.
Paul Knight, partner at Mills & Reeve said: “There is a clear divide amongst businesses – between those that have bought into AI and are building systems and processes around it, and those that are still unsure of its impact beyond mid- to low-value tasks, such as reducing administration and improving efficiencies and productivity.
“This divide is opening up an innovation and governance gap, as early innovators seize on the opportunities that AI presents. While our research shows that the number of businesses using GenAI is likely to rise to 72% by 2027, the lag in performance between then and now could become insurmountable.”
The report highlights the biggest concerns felt by businesses over AI adoption. The majority (90%) are concerned about inaccuracy, more than eight in ten are worried about safety risks (85%), such as cyber attacks, with the impact on future employment also a cause for concern. However, despite 83% of respondents stating that are worried about regulatory compliance, only 31% of businesses have a risk mitigation strategy in place.
Paul added: “The explosion of GenAI has seen a raft of regulations introduced across the world, with more likely, and all of them subject to change as AI understanding develops. In the UK, the regulation of AI relies on existing legal frameworks such as intellectual property, data protection and contract law, highlighting the growing need for these frameworks to be adapted to address the novel risks and complexities introduced by AI technologies. All this suggests that there will be no steady state for regulation for some time.”
However, the risk of not complying is significant, both reputationally and financially. Within the EU, under the EU AI Act, for example, violations can cause administrative fines of €35 million or 7% of total global turnover, whichever is greater.
“There is a real need for businesses to set their own guardrails as legislation in the UK catches up. If they don’t fully understand the legal and ethical boundaries – whether around data protection, intellectual property, or equality law – the consequences could be profound. A single misjudgement could expose the organisation to group litigation.”
Mills & Reeve announces record turnover of £181m as new head...
Leading UK law firm Mills & Reeve has announced turnover growth of £13 million over the 2024/25 financial year, resulting in a new high annual turnover of £181 million. Its Oxford office has seen standout success, with 55% fee growth and a new head of office appointed to lead its next chapter.