*Please note that these thought leadership pieces represent the views of the contributing companies and do not necessarily reflect techUK’s own position.
The conversation around digital IDs in the UK is gaining pace. The government is exploring the introduction of a mandatory national digital ID, with some even pushing for physical national ID cards. The upcoming GOV.UK Wallet app will enable over 40 million drivers and over 50 million passport holders to store government-issued credentials.
Whilst this is generating debate, it’s important to recognise that the UK already has a secure, privacy-focused digital ID system in place. This is with the Digital Identity and Attributes Trust Framework, known also as DIATF.
This framework isn’t a competing model to the government’s digital ID plans. Rather, it’s a complementary one, offering UK adults choice. DIATF-certified digital IDs are already helping people verify their age and identity in a way that’s safe, decentralised and completely voluntary.
What is DIATF?
DIATF is the UK government’s official trust framework for regulating how digital identity providers operate. It is overseen by the Office for Digital Identities and Attributes (OfDIA), which sits in the Department for Science, Innovation and Technology (DSIT).
DIATF defines how identity services should operate, spanning areas such as data protection, cybersecurity, accessibility and user consent. Providers must undergo independent audits to achieve certification to the framework, demonstrating that they meet high standards of privacy and security.
It ensures users can trust the digital ID services that they choose to use. These services have been live since mid-2022 and are successfully delivering value for individuals and businesses.
What are the features of DIATF-certified digital IDs?
As some of the discussion shifts toward digital ID cards and government-led solutions, it’s vital to understand the key qualities of DIATF-certified digital IDs and why they matter.
A trusted, voluntary foundation
At the heart of the DIATF framework is the principle of voluntary participation. People can choose whether they want to use a DIATF-certified digital ID and decide exactly when they share their information and who they share it with.
The digital IDs that are operational right now are designed to be empowering, not controlling. They’re tools that people are able to opt into when it suits their needs, with full visibility and control over their data.
Built with Privacy by Design principles
DIATF-certified Digital IDs, such as Yoti Digital ID, are built on the principles of Privacy by Design. From the outset, they’re designed to minimise data use and limit unnecessary sharing to put users firmly in control of their data.
When using the Yoti Digital ID app, users can choose to only share the necessary information with the requesting organisation - and this is only done with their consent. There’s no hidden data exchange or logging of where or when the information is used. There’s also no way for providers (or anyone else, including us) to track user behaviour across services.
This approach is fundamentally different from systems that may rely on centralised tracking or building user profiles. User privacy is a foundation for digital IDs under the DIATF framework.
No centralised tracking or data honeypots
Another key strength of our Digital ID is its decentralised architecture. This means that each piece of data is individually stored across multiple, separate locations, rather than in a single central system. In turn, there’s no central database which stores personal identity details or tracks user activity.
As a result, the system is more resilient to breaches and misuse. Without a central repository of sensitive information, there’s no single point of failure. Instead, users retain control of their information, which significantly reduces the risk of large-scale data exposure.
Independently audited for accountability
To become DIATF-certified, providers must undergo rigorous independent audits by accredited assessors. This external validation ensures services meet high standards in areas including security, data protection, user experience and compliance.
DIATF certification requires demonstrating to third-party experts that every part of the digital ID service is robust and trustworthy. It’s this transparency and accountability that gives DIATF-certified digital IDs their credibility, as providers can’t just claim to be secure. They need to prove it.
Live, proven and growing in adoption
Millions of people across the UK are already using digital IDs for a wide range of everyday tasks, including verifying their age online and signing up for financial services.
As regulations are updated, the relevance and value of DIATF-certified digital IDs will only increase. Upcoming changes to the Mandatory Licensing Conditions (MLCs) will allow DIATF-certified digital IDs to be accepted as proof of age when purchasing alcohol. Additionally, changes to Money Laundering Regulations (MLRs) will clarify how digital identity providers, certified under DIATF, satisfy MLR requirements.
How DIATF-certified digital IDs and government-issued digital IDs can work together
Government-issued digital IDs can be a valuable addition to the UK’s already-functioning digital ID ecosystem, as long as they are privacy-preserving and user-centric. These are the same principles that underpin DIATF. They could help streamline access to public services and offer an alternative option for those who want one.
It's worth noting that currently, DIATF-certified digital IDs cannot be used to share identity attributes with government services. However, UK citizens will be able to use their mobile driving licence (mDL) in the GOV.UK wallet to create a derived credential with DIATF-certified identity providers.
For the ecosystem to truly succeed, it’s critical that consumers can choose which digital IDs and age assurance methods they want to use. DIATF-certified digital IDs provide a complementary path forward that puts privacy, flexibility and user choice at its core. The two approaches don’t have to be rivals, instead forming two parts of a modern, multi-provider system that can adapt to diverse user needs.
Trust is key to increased digital ID adoption
Digital IDs depend on trust. Trust that personal data is secure and trust that privacy is protected. DIATF-certified digital IDs earn that trust through independent certification, transparent practices and a clear commitment to user-first design.
As the UK continues to shape its digital ID future, it should look to what’s already working. DIATF shows that secure, privacy-preserving digital IDs are possible, and they’re already helping people every day, and on their own terms.
Author
Robin Tombs
CEO, YOTI
Digital Identity programme activities
Digital identities will provide a gateway for citizens and SMEs into the digital economy. techUK members demonstrate the benefits of digital identity to emerging markets, raise their profile as thought leaders, influence policy outcomes, and strengthen their relationships with potential clients and decision-makers. Visit the programme page here.
Digital ID campaign week 2025! 🔐
Recap on key insights shared during Digital ID Campaign Week.
Our members develop strong networks, build meaningful partnerships and grow their businesses as we all work together to create a thriving environment where industry, government and stakeholders come together to realise the positive outcomes tech can deliver.
Sue leads techUK's Technology and Innovation work.
This includes work programmes on cloud, data protection, data analytics, AI, digital ethics, Digital Identity and Internet of Things as well as emerging and transformative technologies and innovation policy.
In 2025, Sue was honoured with an Order of the British Empire (OBE) for services to the Technology Industry in the New Year Honours List.
She has been recognised as one of the most influential people in UK tech by Computer Weekly's UKtech50 Longlist and in 2021 was inducted into the Computer Weekly Most Influential Women in UK Tech Hall of Fame.
A key influencer in driving forward the data agenda in the UK, Sue was co-chair of the UK government's National Data Strategy Forum until July 2024. As well as being recognised in the UK's Big Data 100 and the Global Top 100 Data Visionaries for 2020 Sue has also been shortlisted for the Milton Keynes Women Leaders Awards and was a judge for the Loebner Prize in AI. In addition to being a regular industry speaker on issues including AI ethics, data protection and cyber security, Sue was recently a judge for the UK Tech 50 and is a regular judge of the annual UK Cloud Awards.
Prior to joining techUK in January 2015 Sue was responsible for Symantec's Government Relations in the UK and Ireland. She has spoken at events including the UK-China Internet Forum in Beijing, UN IGF and European RSA on issues ranging from data usage and privacy, cloud computing and online child safety. Before joining Symantec, Sue was senior policy advisor at the Confederation of British Industry (CBI). Sue has an BA degree on History and American Studies from Leeds University and a Masters Degree on International Relations and Diplomacy from the University of Birmingham. Sue is a keen sportswoman and in 2016 achieved a lifelong ambition to swim the English Channel.
Associate Director - Technology and Innovation, techUK
Laura Foster
Associate Director - Technology and Innovation, techUK
Laura is techUK’s Associate Director for Technology and Innovation.
Laura advocates for better emerging technology policy in the UK, including quantum, future of compute technologies, semiconductors, digital ID and more. Working alongside techUK members and UK Government she champions long-term, cohesive, and sustainable investment that will ensure the UK can commercialise future science and technology research. Laura leads a high-performing team at techUK, as well as publishing several reports on these topics herself, and being a regular speaker at events.
Before joining techUK, Laura worked internationally as a conference researcher and producer exploring adoption of emerging technologies. This included being part of the team at London Tech Week.
Laura has a degree in History (BA Hons) from Durham University and is a Cambridge Policy Fellow. Outside of work she loves reading, writing and supporting rugby team St. Helens, where she is from.
Elis joined techUK in December 2023 as a Programme Manager for Tech and Innovation, focusing on Semiconductors and Digital ID.
He previously worked at an advocacy group for tech startups, with a regional focus on Wales. This involved policy research on innovation, skills and access to finance.
Elis has a Degree in History, and a Masters in Politics and International Relations from the University of Winchester, with a focus on the digitalisation and gamification of armed conflicts.