446 VIEWS
Pinterest LinkedIn LINE

On June 19, the UK’s Data (Use and Access) Act received Royal Assent. Along with placing the underground asset register on a statutory footing and supporting the future of smart data schemes, this is an important milestone in the government’s work to ensure that people and businesses across the UK can access trusted digital identity services when they need them.

Trusted digital identities can improve people’s lives by making transactions easier and safer, from accessing age-restricted products to renting a flat and starting a new job. Because a framework for digital identity standards, governance, and oversight has operated as a pre-legislative pilot since April 2021, digital identities can already be used in some situations.

Part 2 of the Act formally establishes the UK digital identity and attributes trust framework in law. This sets out standards, governance, and oversight in legislation for the first time. Identity providers will consequently be covered by a statutory register and Trust Mark scheme, enabling citizens and businesses to use certified digital ID services across the UK economy with confidence.

What happens next?

Once the King formally approves a bill that has passed all stages of the UK Parliament and grants Royal Assent, it becomes law and an Act of Parliament.

The provisions of the Act must now be formally “commenced” before they have legal effect. This requires a separate parliamentary procedure—secondary legislation known as a commencement order or regulations.

Once the Act comes into force, the government will have new powers and responsibilities, including:

  • Maintaining a statutory register of digital verification service providers on GOV.UK
  • Consultation requirements relating to the trust framework
  • Issuing the official UK digital identity Trust Mark (similar to a quality assurance mark), so people can easily see which services are safe and trustworthy
  • Allowing public authorities to share information with registered service providers
  • Producing an annual report on the operation of Part 2 of the Data (Use and Access) Act

We plan to commence most of the measures relating to digital verification services later this year. This will allow providers to make a smooth transition to the new statutory registration scheme after becoming certified against the trust framework.

Related posts