Contact Us
Book a Demo

Navigating the UK’s New Digital Identity Trust Framework

As a leading provider of reusable digital ID solutions and an accredited member of the UK Government’s Digital Identity and Attributes Trust Framework (DIATF), we’re happy to hear about the new trust framework for digital identity services.

In this article, we explore what this means for organisations and individuals. 

Establishing a Trusted Foundation for Digital IDs

The UK Government recently introduced the Data (Use and Access) Bill in Parliament (being read in the House of Lords at the time of publication, Nov 2024). A critical part of this legislation is establishing a comprehensive trust framework for digital identity services. This framework serves as a foundation to ensure that digital IDs provided in the UK can be reliably used and trusted by both service providers and citizens.

The four main components of this new trust framework are:

  1. UK Digital Identity and Attributes Trust Framework: The government will publish a baseline set of rules that digital ID providers must adhere to, ensuring standardisation across the industry. Providers can also follow “supplementary codes” created for specific use cases to offer additional assurances, like Right to Rent and Right to Work. 
  2. Register of Digital Identity and Attribute Services: A public registry will list all certified digital ID providers, making it easy for users to identify trusted providers like SQR, who meet these robust standards.
  3. Trust Mark: Certified providers can display a unique “trust mark”, giving users confidence in recognising legitimate, compliant digital ID services.
  4. Information Sharing with Consent: The legislation will enable public authorities to share relevant information with registered digital ID providers for secure identity verification and eligibility checks, but only with the individual’s consent.

Assurance Levels Under “GPG 45”

To further enhance trust and adaptability, the framework follows the assurance levels defined by “GPG 45”, the Good Practice Guide used by the UK Government to assess identity verification. This guide outlines four assurance levels—Low, Medium, High, and Very High—each providing a different degree of confidence in identity verification.

– Low Assurance: Suitable for basic services, Low Assurance involves minimal checks for user identity. It’s typically used where low-risk, informal interactions are needed.

– Medium Assurance: A balanced approach, Medium Assurance involves more thorough checks and is ideal for services where moderate levels of security are needed. This level is often used to replace a traditional manual “proof of age” check – where identifying person’s age accurately is sufficient.

– High Assurance: At this level, identity verification is rigorous and highly secure, involving detailed checks and multiple sources of evidence to confirm a person’s identity with a high degree of certainty. High Assurance is often required for sensitive or high-risk transactions, such as legal, financial or regulated sectors where trust and security are paramount.

– Very High Assurance: Designed for the most sensitive use cases, Very High Assurance includes comprehensive identity verification with stringent checks, ensuring maximum certainty in identifying an individual. This level is typically reserved for highly regulated sectors where exceptional reliability and security are critical, such as national security or law enforcement.

With these assurance levels, our digital ID services can be tailored to the unique requirements of each client, offering reliable identity verification while maintaining flexibility.

At SQR we are accredited to the following GPG45 profiles: Low L1B, Medium M1C and High H1B. We are externally accredited by BSI, our certification can be found here.

Benefits for UK Organisations and Individuals

The new trust framework brings several key advantages:

– Security and Assurance: By establishing clear rules and an independent certification process, the framework gives users confidence that digital ID services meet robust security and privacy standards, building trust across the entire digital ID ecosystem.

– Interoperability: The common framework and certification process enhance interoperability between digital ID solutions, reducing friction and making digital IDs more accessible for both organisations and individuals.

– Innovation: The regulated structure of the trust framework encourages ongoing innovation in digital identity solutions that meet evolving client and service user needs.

Preparing for the Future of Digital Identity

As a trusted and accredited provider of reusable digital ID services, we welcome these developments from the UK Government. The new trust framework will help strengthen security, improve interoperability, and promote inclusivity—values central to our mission, to make the world a safer place through efficient and inclusive identity verification. 

We look forward to navigating this new landscape alongside our customers, government partners, and other stakeholders, harnessing secure, efficient, and inclusive digital identity verification for the benefit of all. Stay tuned for updates as this legislation progresses, and we’ll share insights into how these changes impact our industry and your organisation. We look forward to navigating this new landscape alongside our customers, government partners, and other stakeholders, harnessing secure, efficient, and inclusive digital identity verification for the benefit of all. Stay tuned for updates as this legislation progresses, and we’ll share insights into how these changes impact our industry and your organisation.

In this case study, we explore how digital identity verification can successfully address key challenges, demonstrating its impact in transforming public sector processes.

Solving Public Sector Pain Points: 

The need for independent validation of corporate ownership data has never been more pressing. As countries around the world intensify efforts to combat money laundering, tax evasion and financial crimes, understanding Ultimate Beneficial Ownership (UBO) has become a key global priority. Findings by the International Financial Accountability, Transparency and Integrity (FACTI Panel) estimates;

  • $500 billion losses to governments each year from profit-shifting enterprises;
  • $7 trillion in private wealth hidden in haven countries, with 10% of world GDP held offshore;
  • Money laundering of around $1.6 trillion per year, or 2.7% of global GDP.

One of the most effective tools in this battle is the beneficial ownership registry, but ensuring the accuracy and integrity of the information held within often presents a challenge. Certified digital identity solutions could provide the answer. 

What is a Beneficial Ownership Registry?

A beneficial ownership registry is a database that records the individuals who have significant control over, or who stand to benefit from, a legal entity such as a company or trust. The goal is to bring transparency to the ownership structure of companies, making it harder for criminals to hide behind complex corporate arrangements.

According to the Financial Action Task Force (FATF), the global authority on anti-money laundering and combating the financing of terrorism, a UBO is “the natural person(s) who ultimately owns or controls a customer or the natural person on whose behalf a transaction is being conducted.” This definition extends to those who exercise ultimate control over a legal entity, typically individuals who directly or indirectly own more than 25% of a company’s shares or voting rights.

The Challenges of UBO Disclosure

Identifying UBOs is not always straightforward. Ownership can be deliberately obscured through layered holding structures, spread across multiple jurisdictions with differing disclosure rules. This creates a significant challenge for authorities and regulators trying to track the real beneficiaries of a company. The International Monetary Fund (IMF) emphasised this critical risk in their 2022 whitepaper ‘A guide to Beneficial Ownership Transparency’, noting that countries should have mechanisms to ensure the accuracy of the data submitted.

FATF defines accuracy in the context of beneficial ownership information as having been “verified to confirm its accuracy by checking the identity and status of the beneficial owner using reliable, independently sourced or obtained documents, data, or information.” Given the complexities involved, independent validation of beneficial ownership data is critical. Without robust mechanisms, beneficial ownership registries run the risk of being inaccurate or incomplete, which leaves the system vulnerable to financial crime.

A Leading Example

One country that has made significant strides in beneficial ownership verification is Denmark. The Danish system integrates digital identity tools such as ‘MitID’ – a government-issued digital ID – with its beneficial ownership registry. MitID connects to an individual’s civil registration number, as well as their address in the Danish Address Register, enabling authorities to automatically cross-check all of the information submitted against trusted databases. This reduces the risk of both unintentional errors and fraud, ensuring a higher level of data accuracy.

However, while Denmark’s approach provides a model initiative in respect of the country’s resident beneficial owners, it does have limitations. Non-residents are ineligible for a MitID, necessitating an additional identity verification process for this group of beneficial owners. This adds complexity and relies on more traditional, less streamlined methods. 

Fostering an Inclusive Cross-Border Approach

Countries and jurisdictions without government-issued digital identity systems, or with foreign national UBOs, are increasingly turning to private sector digital identity solutions to validate their data. It is crucial however, that only digital identity providers certified to a recognised government standard – such as DIATF in the UK or eIDAS in the EU – are onboarded. This ensures that the verification process meets stringent regulatory and security benchmarks, providing a high level of trust and reliability. Find out how SQR’s certified digital identity solution is being leveraged in this way here.

This type of collaboration between public and private sectors fosters the creation of innovative, tailored solutions that meet the unique needs of each jurisdiction while also leveraging the advantages of reusability. For instance, individuals with a certified digital identity from an approved provider can seamlessly share their pre-verified identity information with the relevant authorities. This approach not only streamlines the verification process but also ensures adherence to stringent government standards, significantly mitigating the risk of fraud and enhancing the integrity of beneficial ownership data.

The Future of UBO Verification

Countries and jurisdictions without government-issued digital identity systems, or with foreign national UBOs, are increasingly turning to private sector digital identity solutions to validate their data. It is crucial however, that only digital identity providers certified to a recognised government standard – such as DIATF in the UK or eIDAS in the EU – are onboarded. This ensures that the verification process meets stringent regulatory and security benchmarks, providing a high level of trust and reliability. Find out how SQR’s certified digital identity solution is being leveraged in this way here.

The use of independent digital identity systems represents a crucial step forward in improving the accuracy and security of beneficial ownership databases. By fostering collaboration between governments and the private sector, countries can implement innovative, scalable solutions that address the growing demands of the global regulatory environment. Ultimately, these advances will empower authorities to better tackle financial crime, increase public trust, and enhance the integrity of beneficial ownership data worldwide.

A secure, efficient and inclusive digital identity system offers a wide range of benefits. By adopting certified digital identity solutions, governments and organisations can streamline operations, build public trust, and create a more secure and transparent digital ecosystem. 

The benefits of secure, efficient and inclusive digital identity

A certified digital identity solution provides a reliable and verifiable source of information, minimising errors often associated with manual verification processes. This is particularly crucial for company beneficial ownership data, where accuracy is paramount to ensure transparency and accountability. By verifying the legitimacy of ownership, digital identity systems ensure that only authorised individuals can access sensitive information or claim beneficial ownership. This significantly reduces fraudulent activity, protecting both individuals and organisations.

Governments around the world face stringent regulatory requirements for transparency, anti-money laundering (AML) and combating the financing of terrorism (CFT). Certified digital verification identity solutions also help meet regulatory obligations, by providing a secure and trusted method for verifying beneficial owners. Automating and standardising the identity verification process further ensures that organisations are compliant with complex regulations, whilst also reducing the risk of non-compliance penalties.

Managing large datasets manually is time-consuming and prone to errors. Thus, automating and streamlining data management and digital identity verification processes reduces administrative burdens and improves operational efficiency. This more accurate processing of ownership and identity data, in turn leads to better decision-making and resource allocation for governments and businesses. With a certified digital identity system, sensitive data related to ownership is better protected against breaches, thanks to robust encryption and authentication processes. These enhanced security measures ensure that sensitive information remains protected, and helps to maintain the integrity of ownership records.

In an increasingly interconnected world, the ability to verify identities across borders is essential for multinational organisations and cross-border transactions. Certified digital identity solutions have the ability to integrate with international databases, ensuring consistency and reliability in identity verification on a global scale. It further plays a key role in enhancing global interoperability, as they enable integration with international databases. This is crucial for verifying identities consistently across borders, supporting multinational entities and cross-border transactions.

Additionally, governments that utilise certified digital identity verification systems can strengthen public confidence by demonstrating their commitment to transparency and safeguarding ownership data integrity. Furthermore, collaboration between governments and certified identity verification service providers fosters innovation. By partnering with cybertech firms, governments leverage advanced technology to develop scalable, compliant, and secure solutions for managing beneficial ownership databases.

This synergy benefits both parties, allowing governments to implement modern solutions while enabling tech firms to design systems aligned with regulatory needs.

Rebecca Glassey, Product & Operations Manager at SQR:

“Certified digital identity solutions are the cornerstone of secure, accurate data management in the modern era. By collaborating closely with government entities, we ensure that our technology not only meets the highest regulatory standards but also delivers the scalability and security that public systems demand. It’s all about providing a seamless and trusted verification process, while reducing the risk of fraud and errors in critical government datasets like beneficial ownership registers.”

Steven Webster, Head of Strategic Partnerships at SQR:

“Our work with government agencies highlights the immense value of public-private collaboration in tackling complex challenges such as identity verification. By partnering with certified Identity Service Providers, governments can adopt cutting-edge technology that ensures transparency and security in managing beneficial ownership data. This level of cooperation fosters innovation and enables both parties to create solutions that are not only efficient but also adaptable to the evolving regulatory landscape.”

For more details on how SQR’s certified digital identity solution is being implemented in collaboration with governments, refer to this SQR article.

Ready to get started?

FAQ
Book a Demo
Contact Us
Book a Demo