Digital identity
Digital identity only works if people trust it. And that trust needs to hold in a world where people increasingly live, work and do business across countries. That’s why international standards matter for the UK’s digital verification services (DVS) trust framework. They help ensure digital identity services are …
The Data (Use and Access) Act – among other things – provides a legal footing for what will become the face of the UK’s trusted digital verification ecosystem: the UK CertifID trust mark.
Today, we have published the next iteration of the trust framework, supplementary codes and supporting documents in pre-release. Each publication is marked as the 1.0 version, with the supporting documents version-controlled in this way for the first time. The UK digital verification services (DVS) trust framework is the foundation for building trust in the digital …
Guidance on how the UK digital verification services trust framework interacts with Money Laundering Regulations is now available. Find out more.
In OfDIA, we’re working to prepare for a future where people who want to use digital verification services across national borders have the option to do so in a way which is secure, privacy-preserving and inclusive. That’s why the UK’s …
In December 2024, the then Secretary of State for Science, Innovation and Technology (DSIT) announced that changes would be made to the Mandatory Licence Conditions (MLCs) under the Licensing Act 2003 to allow digital verification services (DVS) to be used …
The majority of the measures in Part 2 of the Data (Use and Access) Act 2025 have come into force today, 1 December 2025.
The GOV.UK register of digital identity and attribute services makes it easy to check and find digital verification services that you can trust. It's a digital service, so we've been making continuous improvements to the register in line with the …
We’ve been asked what a ‘good’ confirmation of user understanding, that meets the requirements of the trust framework, looks like.
Holder service providers must have processes in place to get in touch with users if there’s a change to their account or you’ve received a request to close their account. For gamma (0.4) certification, those processes must be multi-channel.