By UK Gov Unveils Plan for Nationwide Digital Identity Scheme
(by Connor Jones | IT Pro UK) – The UK government has revealed its plans to introduce new legislation to securely handle the introduction of digital identities for use throughout modern society.
Announcing the news on Thursday following a consultation period, the Department for Culture, Media, and Sport (DCMS) said it sees digital identities being used in place of physical documents like passports and driving licences.
Online verification that requires scans of such physical documents will soon offer the opportunity to use a digital identity instead. The digital equivalent can also be used to buy age-restricted items in retail stores, such as alcohol.
The digital identities will not replace physical documents, the DCMS said, but can be used if anyone wants to – there will be no obligation to create a digital identity in the UK.
A new governing body for the technology will be formed, called the Office for Digital Identities and Attributes (ODIA), and companies that are tasked with handling the personal information associated with the digital identities will need to apply for a new, to-be-created trustmark to show they have the adequate protections in place.
“The ODIA will have the power to issue an easily recognised trustmark to certified digital identity organisations, to prove they meet the security and privacy standards needed to handle people’s data in a safe and consistent way,” said the DCMS.
“The ODIA will ensure trust-marked organisations adhere to the highest standards of security and privacy.”
The DCMS said it will bring the legislation forward when parliamentary time allows it to. In order for it to be implemented into law, a legal gateway that allows organisations to securely carry out verification checks needs to be established and proper checks will need to be made to ensure the digital identities are legally equal to physical documents.
Such digital identities will be accessible via mobile apps and websites, and are thought to help tackle the “record high” levels of fraud in the UK with an estimated 5 million cases in the year ending September 2021, the DCMS said.
Centralised vs decentralised identities
The proposed rollout will operate on a centralised model – it will see designated third-party organisations manage the digital identities of many people in the UK. This goes against the model suggested by Microsoft, which also published its views on the topic of digital identities on Thursday.
Microsoft said simply digitising a physical document like a driving licence and using it as a like-for-like replacement allows companies to see more information than perhaps may be necessary. Instead, it proposed a decentralised model which sees the individual own their identity fully and also the power to reveal or revoke parts of the digital document as needed. Read Full Article >
