On June 19 2025, the UK’s Data (Use and Access) Act received Royal Assent, marking a pivotal step forward in the country’s digital identity ambitions. Here’s why this legislation matters and what comes next for individuals, businesses, and verification providers.
What the Data (Use and Access) Act Does
A Foundation for Digital Verification Services
Part 2 of the Act legally formalizes Digital Verification Services (DVS), previously operating under a pilot program since April 2021. It establishes a statutory framework, benefiting from trust, oversight, and standards now grounded in law.
Key Powers and Obligations
As the Act becomes legally active, the government will:
- Maintain a statutory register of DVS providers on GOV.UK,
- Enforce consultation requirements regarding the trust framework,
- Issue an official UK digital identity trust mark: a kitemark indicating certified, trustworthy services,
- Empower public authorities to share relevant identity data with registered DVS providers, and
- Publish annual performance reports on Part 2 of the Act.
This transition from pilot to full legislation signals strong governmental support for digital identity infrastructure.
Next Steps and Timeline
While the Act is now law, its powers only take effect after a Commencement Order, a secondary piece of legislation, is issued. Once enacted, the government will begin the statutory registration of providers and roll out the trust mark system.
According to the originators, most DVS-related measures are expected to commence later in 2025, providing a smooth transition for those already certified under the pilot framework.
Trust Framework Goes Gamma (0.4)
Just days later, on June 26 2025, the government released the final gamma (0.4) version of the UK Digital Identity and Attributes Trust Framework, along with updated Supplementary Codes for Right-to-Work, Right-to-Rent, and DBS checks.
Important Highlights:
- Gamma is final and UKAS-certified (United Kingdom Accreditation Service) as of July 1 2025, enabling accredited bodies to begin certification immediately.
- Existing beta (0.3) certifications will remain valid until March 31 2026, or until a provider proactively uplifts to gamma.
- Supplementary Codes for Right-to-Work, Rent, and DBS are formally separated and functionally unchanged, ensuring continuity in service requirements.
- Provisions are in place to support white-label services and component-level certification.
What This Means for Stakeholders
For Users and Businesses
- Increased accessibility and convenience: Soon, individuals and companies can use trusted digital IDs for everyday tasks like age checks, renting, job applications, and more.
- Transparency and verification: The trust mark and public register empower users to choose properly certified services and verify provider legitimacy.
For DVS Providers
- Certification transition: Those certified under beta must upgrade to gamma before March 2026 to remain valid.
- Regulatory clarity: Operating under the formal Act and UKAS-certified framework ensures consistent governance and accountability.
- New market opportunities: The trust mark and statutory register will help certified providers win user and business trust.
For Public Authorities
- Streamlined access: Verified access to DVLA, DWP, and other data sources (within legal bounds) enhances verification workflows.
- Annual reporting: Authorities are now accountable for evaluating and reporting on the performance of digital identity infrastructure.
Why This Matters Beyond the UK
- The UK emerges as a global leader alongside countries like Estonia in deploying secure, government-backed digital identities.
- A regulated trust framework fosters private sector innovation, enabling third-party apps and platforms to integrate verified DVS functionality.
- A robust identity ecosystem strengthens the UK’s digital economy, promoting secure online banking, shared services, and transaction efficiency.
Ready to stay ahead in the evolving world of digital identity? With the UK’s Data (Use and Access) Act paving the way for a trusted and regulated identity ecosystem, now is the time to ensure your business is prepared. Integrity’s cutting-edge identity verification solutions are designed to help you navigate these changes seamlessly, build trust with your users, and unlock new opportunities in a secure digital economy.
Don’t wait—contact us today to future-proof your identity verification processes and lead the way in compliance and innovation. Click the “FREE DEMO” button in the upper right corner and a representative will suggest the proper solution to meet your needs.