June 6th, UKData (Use and Access) Acthas received Royal Assent.Putting the Subsurface Asset Register on Legal Basis and Supporting the Future of Smart Data SchemesTogether, this marks an important milestone in the Government's efforts to ensure that individuals and businesses across the UK can access trusted digital identity services when they need them.
Trusted digital identities can improve people's lives by making transactions easier and more secure, from accessing age-restricted products to renting an apartment to starting a new job. As a framework for standards, governance and oversight for digital identities operates in a pre-legislative pilot since April 2021,You can already use digital identity in some places.
Part 2 of the Act formalises the UK Digital Identity Trust Framework, providing for the first time in law clarity of standards, governance and oversight which will subject identity providers to a statutory register and Trust Mark regime, giving citizens and businesses confidence that authenticated digital identity services can be used across the UK economy.
What happens next?
When the King formally approves a bill that has passed all stages of the British Parliament and gives it Royal Assent, it becomes law and becomes an Act of Parliament.
Currently, provisions in a law must be formally "implemented" to have legal effect, which requires another parliamentary procedure – secondary legislation called an implementing order or regulation.
Once the law comes into force, the government will have new powers and responsibilities, including:
- On GOV.UKStatutory register of digital authentication service providersMaintenance of
- Consultation requirements for the Trust Framework
- To make it easier for people to check which services are safe and trustworthy, the UK Digital Identity OfficialTrust MarkIssuance of a mark of quality assurance
- Allowing public authorities to share information with registered service providers
- Preparation of an annual report on the operation of Part 2 of the Data (Access and Use) Act
The bulk of the measures for digital certificate services are due to come into force later this year, allowing for a smooth transition for businesses to the new statutory register once they have been certified against the trust framework.