Government response to the consultation on draft legislation to support identity verification (2023)
The Government remains committed to realising the benefits of individuals being able to identify themselves online in order to access public services. There are no plans to introduce mandatory digital identity.
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
Thisresponseispublishedon23May2023
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
ResponsetoconsultationcarriedoutbyCabinetOffice.
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification1
Contents
Executivesummary 5Introductionandcontactdetails 7Complaintsorcomments 7Background 8Summaryofresponses 9Statutoryconsultees 9TheInformationCommissioner’sOffice 9Devolvedadministrations 9HMRCCommissioners 10Governmentresponsetocommentsfromstatutoryconsultees 10Responsesfromcivil societyorganisations 10Governmentresponsetocommentsfromcivil societyorganisations 10DataprotectionanddatasharingundertheDigital EconomyAct2017. 11Responsesfromindividualsandotherorganisations:scaleandmethodologyforanalysis 12Responsestospecificquestions 13Section1:theidentityverificationservicesobjectiveinrelationtothepublicservicedeliverypoweroftheDigital EconomyAct2017. 14Summaryofresponsestoquestion1 14Governmentresponsetoquestion1 14Summaryofresponsestoquestion2 15Governmentresponsetoquestion2 15Summaryofresponsestoquestion3 16Governmentresponsetoquestion3 16Responsestospecificquestions-section2:theidentityverificationservicesobjectiveinrelationtothepublicbodieswhowouldbeabletosharepersonaldata. 16Question4-Towhatextentdoyouagreethatthefollowinggovernmentdepartmentsshouldbecomeapublicbodyeligibletosharedataforpublicservicedeliveryobjectives(thesepublicbodiesarelistedinSchedule4)? 16●CabinetOffice 16●DepartmentforTransport 16●DepartmentforEnvironment,FoodandRuralAffairs 16●DisclosureandBarringService 16Summaryofresponsestoquestion4 16Governmentresponsetoquestion4 17Question5-Towhatextentdoyouagreethatthefollowinggovernmentdepartmentsshouldbeabletosharedatafortheidentityverificationobjective?17●CabinetOffice 17●DepartmentforTransport 17●DepartmentforEnvironment,FoodandRuralAffairs 17
2 Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
●DisclosureandBarringService 17Summaryofresponsestoquestion5 17Governmentresponsetoquestion5 18Question6-Arethereanyotherpublicauthoritiesnotproposedinthisconsultationwhichyouthinkshouldbeabletosharedatafortheidentityverificationobjective?18Summaryofresponsestoquestion6 18Governmentresponsetoquestion6 19Responsestospecificquestions-section3:theidentityverificationservicesobjectiveinrelationtothedataitemstobeprocessed 19Summaryofresponsestoquestion7 19Governmentresponsetoquestion7 19Responsestospecificquestions-section4:viewsonequalityissues 20Summaryofresponsestoquestion8 20Governmentresponsetoquestion8 20Summaryofresponsestoquestion9 21Governmentresponsetoquestion9 21Summaryofresponsestoquestion10 22Governmentresponsetoquestion10 22Summaryofresponsestoquestion11 22Consenttodatasharing 23Bulkdatasharing 23Digital currency 23Conclusionandnextsteps 24AnnexA–Listofrespondentorganisations 25
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification3
4 Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification5
Executivesummary
ThisGovernmentiscommittedtotransformingthedeliveryofpublicservices,sothattheyareeasiertouse,joined-up,secureandprovidebettervalueformoneytothetaxpayer.Ensuringthattheseservicesareavailableonline-toasmanypeopleaspossible-iscentraltotheGovernment'sapproach.Weliveinadigitalage,andpeopleexpecttheironlineinteractionswithgovernmenttobeseamless.
Ashaslongbeenthecase,accessingservicesonlinerequiresuserstoprovewhotheyaredigitally, justasweneedtoprovethat'wearewhowesayweare'whendealingwithgovernmentinperson.Thisiscriticaltomakesurethattheserviceisprovidedtotheindividualwhoshouldreceiveitandtopreventfraud,bothagainstusersandthepublicsector. Aspartofthis,asmallnumberofchecksneedtobemadeagainsttrusteddatasources,suchasvalidatingtheperson'spassportdetails.
FromJanuarytoMarch2023weconsultedondraftregulationstocreateanewobjectiveundertheexistingDigitalEconomyAct2017toenablemoreeffectiveonlineidentityverificationwhenaccessinggovernmentservices.ThisisfullyconsistentwiththepowersunderthisAct,whichwaspassedbyParliamentin2017togivegovernmenttheflexibilitytointroducenewdatasharinggatewaysthataidthedeliveryofkeyservices,astheneedarises,viasecondarylegislationaftercarryingoutconsultation.
Thepublicconsultationalsosetouthowtheproposedobjectivewouldsupportunlockingthefullbenefitsofthenewcross-governmentsystemknownasGOV.UKOneLogin. Thisisreplacingmanylegacygovernmentsystemssothatuserswillbeabletologintoasingleaccount,provetheyarewhotheysaytheyareonceandthenaccessallofthegovernmentservicestheyrequire.
GOV.UKOneLoginisalreadyoperationalandsuccessfullyprovidinguserswithaccesstoaninitialsetofgovernmentservices,butthenewregulationswillenablechecksagainstabroaderrangeoftrusteddatathatisalreadyheldbyparticipatingpublicbodies.Thismeansthatmorepeople,currentlyexcludedfromonlineroutes,willbeabletoaccessservicesdigitally. TheproposedchangewillalsounderpintheabilityofuserstoreusetheiridentityonGOV.UK,onceproven,sothattheycanaccessawholerangeofothergovernmentservicesmoresimplyandefficiently. Governmentwillcontinuetoprovideofflinechannelsforuserstoprovetheiridentity.
Wereceived66,233responsestotheconsultation.Wehavereadthemallandthisdocumentaddressesthepointsraisedbyrespondents.
WethanktheInformationCommissioner’sOfficeandthedevolvedadministrationsfortheirsupportofthedraftregulationsandnotethatsomeotherrespondentsrecognisedthebenefitstoindividualsofimprovedandmoreinclusiveservices.
Mostoftheinterestintheconsultationexpressedstrongconcernsaroundidentitycards,includingincorrectinterpretationsthatachangetotheDigitalEconomyAct2017couldresultincompulsorydigitalidentity. TheGovernmentunderstandsthatthereisn'tpublic
6 Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
supportforidentitycardsintheUK.TheGovernmentremainscommittedtorealisingthebenefitsofindividualsbeingabletoidentifythemselvesonlineinordertoaccesspublicservices.Therearenoplanstointroducemandatorydigitalidentity.
Themajorityofresponsesraisedconcernsarounddataprivacy.Weunderstandthatpeoplerightlywanttoprotecttheirpersonalinformation,andcanconfirmthatthisiscentraltothegovernment'sapproach.TheproposedregulationsonlyrelatetousingdataforthepurposesofidentityverificationandanypublicbodyseekingtousetheregulationswoulddosowithintheclearandrobustframeworkfordatasharingsetoutwithintheDigitalEconomyAct2017andtheUK’srobustdataprotectionlegislation.Thepublicbodieslistedintheconsultationarethosebodiesthateitherholdinformationusedtoverifysomeoneiswhotheysaytheyare,orthatwillenablepeopletoaccesstheirservices.
Whereresponsesdidengagewiththespecificconsultationquestions,therewasarichsetofopinionstoanalysewhichhaveledtothefollowingchangesandprovisionofadditionalinformation.
● Updatingthewordingoftheproposedobjectivetostatethatthephysical,mental,emotional,socialoreconomicwell-beingofindividualswillbeimproved.Thisensuresalignmentwiththeexisting‘multipledisadvantages’objective.● Updatingthedatethattheregulationswillcomeintoforceto21days,ratherthanthedayafterbeingapprovedbyParliament.● UpdatingthePublicSectorEqualityDuty. TheGovernmentremainscommittedtoprovidinganinclusiveandaccessibledigitalidentitysystem,andmakingservicesmoreaccessibletomorepeopleisakeydriverofthischangeinlegislation.Wehavereviewedthepublicsectorequalitydutyassessmentinthelightoffeedback,toencompassGypsy,RomaandTravellercommunities.● CommittedtopublishingfurtherinformationonhowGOV. UKOneLogin,willoperatewithintheregulationsandoveralldataprotectionframework.
TherevisedPublicSectorEqualityDutyassessmentispublishedwiththisgovernmentresponse.
Wewouldliketothankthosewhorepliedtotheconsultation.Wewillcontinuetoworkinclosecollaborationwithrepresentativestakeholdergroupstoenablemorepeopletousemoreservicesonlineandimproveinclusion.
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification7
Introductionandcontactdetails
Thisdocumentisthepost-consultationreportfortheconsultationpaperondraftlegislationtosupportidentityverification.Itwillcover:● thebackgroundtothereport● asummaryoftheresponsestothereport● adetailedresponsetothespecificquestionsraisedinthereport● thenextstepsfollowingthisconsultation.
Furthercopiesofthisreport,theconsultationpaperandalternativeformatscanbeobtainedbycontactingTheDataSharingLegislationteamatdea-data-sharing@digital.cabinet-office.gov.uk
Complaintsorcomments
IfyouhaveanycomplaintsorcommentsabouttheconsultationprocessyoushouldcontacttheCabinetOfficeatdea-data-sharing@digital.cabinet-office.gov.uk
8 Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
Background
Theconsultationpaperondraftlegislationtosupportdigitalidentityverificationwaspublishedon4January2023.ItinvitedcommentsontheCabinetOffice’sdraftregulationstoenabledatasharingbetweenspecifiedpublicauthoritiestosupportdeliveryofidentityverificationservicestoindividualsorhouseholds.
TheconsultationpapersetoutproposalstocreateanewobjectiveinregulationsunderChapter1ofPart5oftheDigitalEconomyAct2017.TheproposedobjectivewillenabledatasharingbyspecifiedpublicauthoritiescurrentlyincludedinSchedule4oftheActtodeliverdigitalidentityverificationservicestocitizens.Theproposalalsoincludes4newpublicbodiestobeaddedtoSchedule4andforthemtobeabletosharedataforthepurposesofidentityverificationservices.
Theproposedlegislationwillallowspecifiedpublicbodiestoprocessanindividual'srelevantdata(suchasdrivinglicenceinformation)whenitisnecessaryforthatindividualtoprovetheiridentityinordertoaccessagovernmentservice.
TheconsultationwasliveontheGOV.UKwebsiteforallUKcitizenstoreviewandrespondto.Inaccordancewithconsultationprinciplesandtoensuretransparencyandconsistencyofapproach,allconsultationsarehousedontheGovernment’ssinglewebplatform-GOV.UK.TheconsultationwashighlightedbyanewsstoryontheGOV.UKwebsiteandafurtherblogpost,Helpingmorepeopletoprovetheiridentityonline,waspublishedon24February2023. Peoplewereabletorespondbyanonlinesurvey,emailorpost.
Thepublicconsultationisonepartofthewiderengagementprocessforconsideringthenewregulationswhicharedraftedtohelpdeliverdigitalgovernmentservicestothosewhochoosetousethem.Thishasalsoincludedworkingcloselywithgroupsthatrepresentandadvocateonbehalfofcitizenswhodonothaveaccesstotheinternet,tocapturetheviewsofthoselessabletoengagewithgovernmentdigitally. Weheld4roundtablediscussionsinFebruary2023whichwereattendedby25attendeesfrom20representativeorganisations,includingtheInformationCommissioner’sOfficeandsomecivilsocietygroups.
Theconsultationperiodclosedat11:45pmon1March2023andthisreportsummarisestheresponses,includinghowtheyinfluencedthefinalshapeofthedraftregulations.
Respondentsalsocommentedontheimpactassessmentforpeoplewithprotectedcharacteristics.Wehaveupdatedtheassessmentinlinewiththecommentsreceivedandpublishitalongsidethisgovernmentresponse.AlistofrespondingorganisationsisatAnnexA.
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification9
Summaryofresponses
Theconsultationonidentityverificationservicesreceived66,233responses.Oftheseresponses,99%camefromindividualsand1%fromorganisationsrepresentingtheviewsofmanyotherpeople.Thevastmajorityofresponses(45,249,68%)camethroughtheonlinesurvey, but20,963(32%)werereceivedviatheemailaddressprovidedintheconsultation.Afurther21responseswerereceivedbypost.Asmallnumberofemailedresponsesprovidedaquestion-by-questionresponse,butalmostall(20,929)gaveanoverallopiniononourproposals.
Identitycards
Manyoftheindividualswhorespondedtotheconsultationsaidtheywereagainstdigitalidentityinprincipleandagainstidentitycardsinparticular. Theconsultationondraftregulationstohelpmorepeopleprovetheiridentityonlinedidnotincludeproposalsthatwouldintroduceidentitycardsormakedigitalidentitiescompulsory.Governmentunderstandsthatthereisn'tpublicsupportforidentitycardsintheUKandremainscommittedtorealisingthebenefitsofdigitalidentitywithoutcreatingidentitycards.Thegovernment’spositiononphysicalidentitycardsremainsunchanged.Therearenoplanstointroducemandatorydigitalidentity.
Statutoryconsultees
TheDigitalEconomyAct2017,supportedbytheunderpinningCodeofPractice,requiresconsultationwithcertainauthoritiessuchasthedevolvedadministrations,InformationCommissionerandtheCommissionersforHisMajesty’sRevenueandCustoms(HMRC).
TheInformationCommissioner’sOffice
TheInformationCommissioner’sOfficedidnotrespondformallytothepublicconsultation.ThiswasbecausetheInformationCommissioner'sOfficeregardsthelegislationtobelimitedinscopeandclearinitsexplanationforhowitwillbeused.
Devolvedadministrations
TheScottishGovernmentnotesthatthedesignoftheobjectiveisveryspecifictoidentityverificationandsupportsaddingScottishMinistersandScottishLocalAuthoritiestothenewobjective.TheScottishGovernmentsupportsthisapproach,onthebasisthatthisisusedtohelptoensurethatusersinScotlandhaveabetterexperienceinthewaythattheyaccessdigitalidentityservicesrunbyScottishandUKGovernments.TheScottish
10 Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
Governmentconsiderstheaimofdoingthiswouldbetodeliveranefficientandaccessibleservicethatpotentiallyavoidstheneedforausertorepeatedlyverifytheiridentity;andgivesusersgreatercontrolovertheirowninformationandattributes,inordertoaccesstheonlineservicesandbenefitstheyareentitledto.
TheWelshGovernmentalsosupportstheproposedregulations,highlightingthatrolloutofeffectivedigitalidentityverificationservices,basedonverifieddataheldbypublicauthorities,shouldhelpimproveaccesstopublicservicesbyindividuals.TheWelshGovernmentalsoconsidersthattherolloutwillalsoreducetheneedforindividualstoprovetheiridentitymultipletimestodifferentorganisations,andprovidemoreseamlessaccesstopublicservices.However, theWelshGovernmentalsoidentifiedthatpublicauthoritiesshouldtakestepstoensurecitizensfullyunderstandwhattheirdataisbeingusedfor, andthebenefitsderivediftheydochoosetoengagewithidentityverificationservices.
AlthoughthedatasharingpowersoftheDigitalEconomyAct2017donotcurrentlyextendtoNorthernIreland,theUKGovernmenthasconsultedonthedraftregulationsandremainsincloseliaisononhowtheymayapplythereinthefuture.
HMRCCommissioners
HMRCCommissionersarecontentwiththedraftregulations.
Governmentresponsetocommentsfromstatutoryconsultees
GovernmentwelcomesconfirmationfromtheInformationCommissioner’sOfficeanddevolvedadministrationsthatthedraftregulationsareclearandspecifictoonlineidentityverificationservices.GovernmentalsonotesthattheHMRCCommissionersarecontentwithdraftregulations.
Responsesfromcivil societyorganisations
Wereceivedresponsesfrom5civilsocietyorganisationsassetoutinAnnexA.Commentsfocusedonqueryingthebenefitstoindividualsandtheperceivedlackofdatasafeguardingdetailsincludedintheregulations,aswellastheoperationofthegovernmentidentityverificationsystem,knownasGOV.UKOneLogin.
Governmentresponsetocommentsfromcivilsocietyorganisations
Governmentnotesthatthebenefitstoindividualscanbewiderthanthosespecifiedinclause3bofthedraftregulationsandwillthereforeamendtheclausetoaddphysicalandsocialwell-beingaspartoftheobjective.Theamendedwordingspecifiesimprovingphysical,mental,emotional,socialoreconomicwell-beingreflectsthewordingintheexisting"multipledisadvantages''specifiedobjectiveinthepublicservicedeliverypowers
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification11
oftheDigitalEconomyAct2017whichtargetsassistancetoindividualsorhouseholdswhoareaffectedbymultipledisadvantages.Specifiedobjectivesunderthepublicservicedeliverypowermustbenefiteitherindividualsorhouseholds.Asthedraftregulationsprimarilybenefitindividuals,theydonotincludereferencestohouseholds.
DataprotectionanddatasharingundertheDigitalEconomyAct2017.
Onthelevelofdetailofhowpersonaldatawillbesafeguardedinthedraftregulations,datasharingpowersundertheDigitalEconomyAct2017operatewithinverytightconstraintsoftheoverarchingdataprotectionlegislation,UKGDPR,theHumanRightsAct1998,theInformationCommissioner'sOfficeDataSharingCodeofPractice,theCodeofPracticeforpublicauthoritiesdisclosinginformationunderChapters1,3and4(PublicserviceDelivery, DebtandFraud)ofPart5oftheDigitalEconomyAct2017.TheInformationCommissioner’sOfficereportedonthestrengthoftheoverarchingframeworkintheauditreviewpublishedinMarch2023,concludingasfollows:
TheInformationCommissioner'sOffice
DatasharingundertheDigitalEconomyActprovidesasupportiveframeworkthatincludesrobustsafeguardstosharedataresponsiblyforinitiativesbenefitingthepublic.
DatasharingunderthepublicservicedeliverypowersoftheDigitalEconomyAct2017ispermissive,thatis,thepublicbodyhasthediscretiontodecidewhethertodisclosedataornot.Onlythepublicbodiesspecifiedintheregulationswouldbeabletoprocessdataforthespecifiedpurposeofidentityverificationservices.Thepublicbodieslistedintheconsultationarethosebodiesthateitherholdinformationusedtoverifysomeoneiswhotheysaytheyare,orthatwillenablepeopletoaccesstheirservices.Somepublicbodieswilldoboth,i.e.theyholdinformation,butalsowillneedtoverifyanindividualiswhotheysaytheyarebeforetheycanaccessaservice.Anydatasharingarrangementestablishedbetweenthespecifiedpublicbodieswillberequiredtofactorthenecessarydataflowsandensuretheymeetdataprotectionprinciplesofproportionalityanddataminimisation.
Beingsupportedbybettercross-departmentaldatasharingwillmeangovernmentidentityverificationserviceswillbeasinclusiveandaccessibleaspossibleforpeoplewhostruggletousetraditionalproofsofidentitysuchaspassportsanddrivinglicences.However, useofthisnewobjectivedoesnotchangeorunderminetheexistingdataprotectionlaws,requirementsorregulations.Alldatasharingundertheregulationsmustcomplywithexistingdataprotectionlegislation.Allpartiestothedatasharingmustensurethatpersonaldataisheldsecurely,totheappropriatesecurityandinformationmanagementstandards,maintainedtotheappropriatequality,usedonlyforthespecifiedpurposeofidentityverificationservices,keptonlyaslongasisrequiredforthespecifiedpurposeofidentityverificationservicesandthensecurelydeleted.Governmentthereforedoesnotbelievethereisaneedtoincludemoredetailinthesecondaryregulationsthemselves.
12 Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
However, theGovernmentrecognisesthatspecifiedpublicbodiesaswellascitizensthemselveswouldvaluemorepublishedinformationonhowanysystemwhichhelpspeopleprovewhotheyareonlinewilloperatewithinthedataprotectionlegislation.Anygovernmentidentityverificationservicethatusestheseregulationswillthereforepublishclearinformationontheuseofandaccesstopersonaldata,startingwithGOV.UKOneLogin.Inparticular, informationwillsetoutwhichdepartmentalservicesareusingidentityverificationservicestosupportdeliveryandwhichdepartmentswillprovidedatatohelptheCabinetOfficeestablishaverifiedidentity. TheGovernmentwillalsoamendthedraftregulationssothattheywillcomeintoforce21daysratherthanthedayafterbeingapprovedbyParliament.
WealsoreceivedajointresponsefromtheLocalGovernmentAssociation,SOLACEandSOCITMonbehalfoflocalcouncils.Localcouncilsagreedthatdatasharingforidentityverificationwillprovideabenefitforindividualsifitisimplementedinclusivelyandwithlocalgovernmentintegratedfromtheearliestpossiblepoint-asbothadataholderandaserviceproviderandwiththeminimumburdenonlocalcouncils.GovernmentalsowelcomescommentsmadebylocalcouncilsrelatingtointegrationwithGOV.UKOneLogin,whichwillbeaddressedinfurtherinformationonhowGOV.UKOneLogin,willoperatewithintheregulationsandoveralldataprotectionframework.
Responsesfromindividualsandotherorganisations:scaleandmethodologyforanalysis
TheconsultationwasondraftregulationsforadatasharingobjectivetosupportthewaytheGovernmentwoulddeliveronlineidentityverificationservices,whichisaGovernmentpriorityassetoutinMission2ofTransformingforadigitalfuture2022-2025:roadmapfordigitalanddata.Thequestionsprovidedrespondentswiththeopportunitytoexpresstheirviewsontheconditionsthatattachtotheregulationsandthepotentialsocietalimpacts.Theyprovidedanopportunitytoexpressagreementordisagreementandtoraiseanyperceivedimpacts,benefitsordisadvantagestoindividuals.
However, thereisclearevidencethat,ofthosewhorespondedtotheconsultation,eitherbytheonlinesurveyorbyemail,manyappeartohavebeensignificantlyinfluencedbycommentariesagainstimplementingcompulsorycitizendigitalidentityinprincipleanddatasharingtosupportit.Forexample,wenotedthat75%oftheemailsreceivedusedoneofasmallnumberoftemplatesandasmallproportionoftheseemails(4%)intemplateformatwereagainstidentityverificationservicesinprinciple,andwererespondingtoamuchbroaderissuearounddigitalidentityanddatasharingthanwasinscopeofthisconsultation.
Themajorityofindividualswhorespondedtotheconsultationcommentedonwiderissuesratherthanaddressingthespecificquestionsonthedatasharingregulationsthatwereasked.Forexample,responsesincludedcommentsthatidentityverificationserviceswouldmeancitizenswouldnotbeabletousecash,thattheywouldsupportasocialcredit
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification13
system,thattheywouldleadtoanidentitycardbeingintroduced,orthatdigitalidentitiesaregoingtobemademandatoryforallpeople.Asthesewidermatterswerenotpartoftheconsultation,wedeterminedtheseresponsesonwiderissuestobeoutofscopeforanalysis.
Ouranalysismethodologywastocountaquestionresponseasagainstidentityverificationservicesinprincipleiftheircommentsindicatedthattheywereagainstanyformofcompulsorycitizendigitalidentityorthedatasharingtosupportit,oriftheiroppositionwasbasedonclaimswhichwerenotsubstantiatedbythefactssetoutintheconsultation.Forthepurposesofstatisticalanalysisofthespecificquestionsintheconsultation,wehavenotincludedtheseresponsesastheywoulddistorttheanalysisofresponsesfromthosewhodid.Furthermorewerejectedasmallnumberofresponseswhichwereoffensiveandwereprofane.
Overall,upto20%ofquestionresponseswereoutofscope,dependingonthequestion.Weremovedresponsesindividuallyperquestionandnotentireconsultationresponsesfromindividualsororganisations.Nevertheless,outsidethecontextofproducingthestatisticalanalysis,wehavetakentheseresponsesintoaccountaspartofthisconsultationexercise.Inpracticethisapproachlimitedtheresponsesthatwerefullyoutofscope,anderredonthesideofcautioninincludingasmanyvalidresponsesaspossible.Thishasmeantthatmanycommentaryrelatedresponseshavebeenincludedintheanalysiswithaconsequentialuplifttonegativedisagreeingresponses.Manyofthecommentaryrelatedresponsesengagedinmoredetailonatleastonequestionandweincludedtheminourdetailedanalysisofquestions.Percentagesmaynottotal100%duetorounding.
Governmentwillcontinuetoworktoaddressthetypesofconcernsrespondentsraisedinfuturepolicydecisionsandcommunications,forexample,asweprovidemoreinformationonhowthegovernmentsolution,GOV.UKOneLogin,willoperatewithintheregulations.
Responsestospecificquestions
Whereresponsesdidengagewiththespecificconsultationquestions,therewasarichsetofopinionstoanalyse.Manyoftheresponsesweredrivenbyanti-digitalcommentarieswithoutengagingwiththespecificquestions.Thecommonreasonswerearoundanunderlyingmistrustofgovernmentuseofpersonaldata,dataaccuracyleadingtopoordecisionmakingandsecurityofsystemsagainstcyberattacks.Thevastmajorityofrespondentsconsideredthatanindividual’sdataprivacywasmoreimportantthanthebenefitsofimprovedpublicservices.Thesearecommonthemesacrossresponsestoallquestionsandwehavenotrepeatedthemeachtimethroughoutthisgovernmentresponse.Asaresult,someoftheanalysisstatisticsappeartobeoverwhelminglyskewedtowardsthemajoritywhousedtheconsultationasavehicletoexpresstheseopinions.
Whilethereappearstobeabroadersentimentaboutgovernmentuseofpersonaldatathatgoesbeyondtheproposedregulations,Governmentisneverthelesscommittedtoensuringthatmaximisingpublicservicedeliveryisbalancedbycompliancewithdataprotection,strongsafeguardstoprotectpersonaldataprivacyandrobustcybersecurity.
14 Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
Digitaltransformationandtheuseofonlinemethodstohelppeopleprovewhotheyarewillmakeaccessingpublicservicesfarquickerandsimpler. TheGovernmenthasestablishedtheCentralDigitalandDataOfficetodrivethistransformationforwardacrossgovernmentdepartments.
Section1:theidentityverificationservicesobjectiveinrelationtothepublicservicedeliverypoweroftheDigital EconomyAct2017.
Question1- Thefirstconditionfornewobjectivesundersection35oftheDigitalEconomyAct2017isthatthedatasharingshouldeither;
a)improveortargetapublicserviceprovidedtoindividualsorhouseholds;or
b)provideabenefit(whetherfinancialorotherwise)toindividualsorhouseholds.
Towhatextentdoyouagreethattheproposednewobjectivemeetsatleastoneofthosepartsofthefirstcondition?
Summaryofresponsestoquestion1
Wedeterminedthat16%ofresponsestothisquestionwereoutofscope.
Oftheresponsesthatwereinscope,amajorityof73%disagreedorstronglydisagreedthattheproposedobjectivewouldimproveortargetaservicetoindividuals,orwouldprovidethemwithabenefit.Themainreasonsforthiswereconcernsarounderosionofdataprivacyandprotection,datasecurityagainstcyberattacksandageneralmistrustingovernmentuseofpersonaldataforwiderpolicyissues.Forthemajorityofrespondents,theseconcernsoutweighedanyimprovementsinpublicservicedelivery.2%agreedorstronglyagreed,respondentsrecognisedthateffectiveservicestohelppeopleprovewhotheyareonline,basedonverifieddataalreadyheldbypublicauthorities,wouldhelpimproveseamlessaccesstopublicservicesbyindividuals.Respondentsfurtherhighlightedthateffectiveservicestohelppeopleprovewhotheyareonlinewouldbenefitindividualsbyenablingfasteraccesstoservices.Afurtherserviceimprovementnotedwasthatserviceswouldbeabletocarryoutidentitychecks-andthusprovidethebenefitsofserviceoutcomestoindividuals-morequickly.Theremaining24%neitheragreednordisagreed,ordidnotknow.
Governmentresponsetoquestion1Governmentrecognisesconcernsbythemajorityofrespondentsondataprivacyandsecurity, andwishestoreassurethatanydatasharingtakingplaceunderthesenewregulationswillbesecureandsafeguarduser'sdataprivacyassetoutaboveindataprotectionlegislationandtheDigitalEconomyAct2017inparticular. Datasharingunder
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification15
theproposedregulationswouldadheretotheprincipleofusingtheminimumamountofdatatohelppeopleprovewhotheyare,thusensuringthatlessdataisprocessedoverall.Thisactivityfurtherminimisestherisksposedbydatasharing.
Tofurtherprovideconfidenceastothesafetyandprivacyofdatasharingundertheproposedlegislation,anyservicewhichhelpspeopleprovewhotheyareonlinewillpublishinformationontheuseofpersonaldata,startingwithGOV.UKOneLogin.
Governmentwelcomesrecognitionbyasmallproportionofrespondentsthatserviceswhichhelppeopleprovewhotheyarewoulddeliverbetter,joined-upserviceswithbenefitstoindividuals.
Question2- Thesecondconditionisthatdatasharingshouldimprovethewell-beingofindividualsorhouseholds.
Towhatextentdoyouagreethattheproposednewobjectivemeetsthissecondcondition?
Summaryofresponsestoquestion2
Wedeterminedthat12%ofresponsestothisquestionwereoutofscope.
Oftheresponsesthatwereinscope,amajorityof76%responsesdisagreedorstronglydisagreedthattheproposedobjectivewouldimprovethewell-beingofindividualsorhouseholds.Themainreasonsforthiswereconcernsarounderosionofdataprivacyandprotection,datasecurityagainstcyberattacksandageneralmistrustingovernmentuseofpersonaldataforwiderpolicyissues.Forthemajorityofrespondents,theseconcernsoutweighedanyimprovementsinpublicservicedelivery.Ofthose2%whoagreedorstronglyagreed,respondentsrecognisedthateffectiveservicestohelppeopleprovewhotheyareonlinebasedonverifieddataalreadyheldbypublicauthoritieswouldreducetheneedforindividualstoprovewhotheyaremultipletimestodifferentdepartmentsorservices,thussavingthemtimeandreducingfrustrationinhavingtoprovidethesameinformationtodifferentdepartmentsandservices.Theremaining22%neitheragreednordisagreed,ordidnotknow.
Governmentresponsetoquestion2
Asabove,Governmentnotesconcernsbythemajorityofrespondentsondataprivacyandsecurityandwishestoreassurerespondentsthatanydatasharingtakingplaceunderthesenewregulationswillbesecure.Governmentalsowelcomesrecognitionthatservicestohelppeopleprovewhotheyarewouldhelpimproveindividualshealthandwell-being.
16 Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
Question3- Thethirdconditionisthatthedatasharingshouldsupportthedelivery,administration,monitoringorenforcementofaserviceprovidedbyaparticularpublicauthority(orauthorities).
Summaryofresponsestoquestion3Wedeterminedthat13%ofresponsestothisquestionwereoutofscope.Oftheresponsesthatwereinscope,amajorityof75%disagreedorstronglydisagreedthattheproposedobjectivewouldsupportthedeliveryofadministration,monitoringorenforcementofaserviceprovidedbyaparticularpublicauthority(orauthorities).Themainreasonswereconcernsthatdataprotectionwouldbeputatriskbydatasharingandworriesthatdatasharingwouldbeusedtofacilitategovernmentmonitoringandenforcementofindividualsratherthanthedeliveryofpublicservices.Ofthose3%whoagreedorstronglyagreed,respondentsrecognisedthatservicestohelppeopleprovewhotheyareonlinewouldimproveserviceresponsivenessandsavepeople’stimebecauseofdirectaccesstoverifieddataalreadyheldbypublicauthorities.Theremaining22%neitheragreednordisagreed,ordidnotknow.
Governmentresponsetoquestion3Governmentnotesconcernsondataprotection,asabove,andconfirmsthatmonitoringandenforcementofhowwellpublicservicesaredeliveredbypublicbodiesdoesnotincludemonitoringofanycitizen’sindividualactivity.Governmentalsowelcomesrecognitionthatservicestohelppeopleprovewhotheyareonlinewouldsupportimprovedpublicservicedeliveryandimprovetheirwell-being.
Responsestospecificquestions-section2:theidentityverificationservicesobjectiveinrelationtothepublicbodieswhowouldbeabletosharepersonal data.
Question4- Towhatextentdoyouagreethatthefollowinggovernmentdepartmentsshouldbecomeapublicbodyeligibletosharedataforpublicservicedeliveryobjectives(thesepublicbodiesarelistedinSchedule4)?
● CabinetOffice● DepartmentforTransport● DepartmentforEnvironment,FoodandRuralAffairs● DisclosureandBarringService
Summaryofresponsestoquestion4
Wedeterminedthat14%ofresponsestothisquestionwereoutofscope.
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification17
Oftheresponsesthatwereinscope,amajorityof89%disagreedorstronglydisagreedthattheCabinetOffice,DepartmentforTransport,DepartmentforEnvironment,FoodandRuralAffairsortheDisclosureandBarringServiceshouldbeabletosharedatatoimproveortargetpublicservicesunderspecifiedobjectives.Themainreasonsforthiswereconcernsarounderosionofdataprivacyandprotection,datasecurityagainstcyberattacksandageneralmistrustingovernmentuseofpersonaldataforwiderpolicyissues.Ofthose6%whoagreedorstronglyagreed,respondentsrecognisedthatthedepartmentslisteddeliverservicestothepublicandshouldbeabletosharepersonaldatatoimprovethoseservices,subjecttoprivacysafeguards.Theremaining4%neitheragreednordisagreed,ordidnotknow.
Governmentresponsetoquestion4
GovernmentnotesconcernsfromthemajorityofrespondentsondataprivacyandwelcomesrecognitionfromasmallproportionofrespondentsthattheCabinetOffice,DepartmentforTransport,DepartmentforEnvironment,FoodandRuralAffairsortheDisclosureandBarringServiceidentityverificationservicesshouldbeabletosharepersonaldatatoimprovetheirservices,subjecttosafeguards.
Question5- Towhatextentdoyouagreethatthefollowinggovernmentdepartmentsshouldbeabletosharedatafortheidentityverificationobjective?
● CabinetOffice● DepartmentforTransport● DepartmentforEnvironment,FoodandRuralAffairs● DisclosureandBarringService
Summaryofresponsestoquestion5
Wedeterminedthat14%ofresponsestothisquestionwereoutofscope.
Oftheresponsesthatwereinscope,themajority(93%)ofresponsesdisagreedorstronglydisagreedthattheCabinetOffice,DepartmentforTransport,DepartmentforEnvironment,FoodandRuralAffairsortheDisclosureandBarringServiceshouldbeabletosharedataforidentityverificationservices.Themainreasonsforthiswereconcernsarounderosionofdataprivacyandprotection,datasecurityagainstcyberattacksandageneralmistrustingovernmentuseofpersonaldataforwiderpolicyissues.Someconsideredthatpublicbodiesalreadyholdsufficientpersonaldataaboutthepublic.Somerespondentswouldwelcomefurtherinformationonwhichdepartmentswoulduseidentityverificationservicesandwhichwouldholddatakeytoverifyingaperson’sidentity.Inparticular, somerespondentsdidnotacknowledgethattheDepartmentforEnvironment,FoodandRuralAffairsdeliveredpublicservices.ViewsontheneedfortheDisclosureandBarringServiceweremixed.
18 Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
Ofthose4%whoagreedorstronglyagreedfeltthatidentityverificationservicesshouldbeavailabletotheCabinetOffice,DepartmentforTransport,DepartmentforEnvironment,FoodandRuralAffairsortheDisclosureandBarringServicetoimproveandtargetidentitytheirservices.RespondentsacknowledgedthattheCabinetOfficewouldneedtoaccesscross-governmentdatasetstodeliveridentityverificationservicesandthattheDepartmentforTransport,asthesponsoringdepartmentfortheDriverandVehicleLicensingAgency,holdskeydrivinglicencedatathatwouldsupportanidentityverificationservice.SomealsoacknowledgedthattheroleoftheDisclosureandBarringServiceinhelpingtomakerecruitmentsaferinpublicserviceswaskeytoidentityverificationservices.Theremaining4%neitheragreednordisagreed,ordidnotknow.
Governmentresponsetoquestion5
Governmentrecognisesthestrongdesireformoreinformationonhowpublicbodieswoulduseidentityverificationservicesandwillthereforepublishclearinformationonuseof,andaccesstopersonaldatafortheservice,startingwithGOV.UKOneLogin.Inparticular,informationwillsetoutwhichdepartmentalservicesareusingidentityverificationservicestosupportdeliveryandwhichwillprovidedatatohelpdepartmentsestablishwhoapersonis. TheGovernmentalsowelcomesrecognitionthattheCabinetOffice,DepartmentforTransport,DepartmentforEnvironment,FoodandRuralAffairsortheDisclosureandBarringServiceshouldbeabletousethedatatheyalreadyholdtoimproveandtargetidentityverificationservices,subjecttosafeguards.
DepartmentforEnvironment,FoodandRuralAffairs(DEFRA)
DEFRAoffersanumberofpublicservicestargetedatimprovingandprotectingtheenvironment,growingagreeneconomy, sustainingthrivingruralcommunitiesandsupportingfood,farmingandfishingindustries.Someoftheserequireidentityverificationservices.Governmentanticipatesthatapproximately400,000peoplewilluseGOV.UKOneLogintoaccessDEFRAservices.
Question6- Arethereanyotherpublicauthoritiesnotproposedinthisconsultationwhichyouthinkshouldbeabletosharedatafortheidentityverificationobjective?
Summaryofresponsestoquestion6
Somerespondents,includingtheLocalGovernmentAssociation,SOLACEandSOCITMsuggestedthathealthandadultsocialcarebodiesshouldbeabletosharedataforidentityverificationservices,althoughthesebodiesarenotcurrentlyinthescopeoftheDigitalEconomyAct2017fordatasharingpurposes.Therewerenoothersuggestionsforfurther
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification19
publicbodiesnotcurrentlylistedinSchedule4totheDigitalEconomyAct2017tobeaddedforidentityverificationservices.
Governmentresponsetoquestion6HealthandadultsocialcarebodiesarenotcurrentlyincludedinthescopeofDigitalEconomyAct2017.Onthebasisofresponses,therefore,weconsiderthatthecorrectpublicbodiesareincludedinthescopeofthedraftregulations.
Responsestospecificquestions-section3:theidentityverificationservicesobjectiveinrelationtothedataitemstobeprocessed
Question7- Towhatextentdoyouagreethatthedataitems,knownasdataattributes,asdescribedunderthisproposedobjectiveareconsistentwith,andappropriatefor, thedeliveryoftheobjective?
Summaryofresponsestoquestion7
Wedeterminedthat11%ofresponsestothisquestionwereoutofscope.
Oftheresponsesthatwereinscope,themajority(87%)ofresponsesdisagreedorstronglydisagreedthatthedataitemsdescribedwereconsistentwithidentityverificationservices.Themainreasonwasconcernsaboutthetransparencyofthedataitemslistedinthepublicconsultation,particularlyspecialcategorydataandtransactionaldatalikeincome.Ofthose3%whoagreedorstronglyagreed,respondentsrecognisedthatthedataitemswererelevanttodeliveringeffectiveidentityverificationservices.Theremaining10%neitheragreednordisagreed,ordidnotknow.
Governmentresponsetoquestion7
Governmentwelcomesrecognitionthatthedataitemslistedintheconsultationareconsistentwithidentityverificationservices,forexample,namesandaddressesthatareheldbysomepublicbodieswhendeliveringservices.However,theGovernmentalsonotesconcernsaroundtransparencyinusingspecificdataitemsandwilladdresstheseconcernsinpublishedinformationtosupportoperationoftheregulationswithintheunderpinningdatasharingprotectionlegislation.
20 Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
Responsestospecificquestions-section4:viewsonequalityissues
Question8- Towhatextentdoyouconsidertheproposedsharingofdatafortheidentityverificationobjectivewillleadtoanyindividualand/orhouseholdlosinganybenefit?
Summaryofresponsestoquestion8
Wedeterminedthat12%ofresponsestothisquestionwereoutofscope.
Oftheresponsesthatwereinscope,aminority(25%)respondedwithdisagree/stronglydisagree,indicatingthattheyexpectnoindividualtoincurlossofbenefitofeasieraccesstoservicesasaresultofidentityverificationservices.Themainreasonscitedwerethatimprovedaccesstogovernmentservicescanonlybenefitindividualsandhouseholdsprovidedtheappropriateprivacycontrolsareinplace;thatwiderpublicsectordatasharingwillimprovedigitalinclusiontothosecurrentlyexcludedfromeasyaccesstobenefitsbynothavingconventionalidentitydocumentslikepassportsordrivinglicences;thatusingtrusteddatafromauthoritativesourceswouldpreventidentitiesbeinghijacked;andwouldpreventfraudfromenteringgovernmentservicesattheearliestopportunity.Some58%agreedorstronglyagreed,indicatingviewsthattheyperceivetherewillbealossofbenefitifidentityverificationservicesareimplemented.Themainreasonscitedwereconcernthatuseofdigitalidentitiescouldleadtodiscriminationagainstmarginalisedcommunities,andthatthosewhochoosenottouse,orwhoarenotabletouse,anonlineverificationsystemmayloseoutonbenefitsifonlineservicesweretoreplaceotherformsofidentityverification.Respondentshighlightedthatsomeofthemostvulnerablemembersofsocietyhavethelowestlevelsofcomputeraccess.
Theremaining17%neitheragreednordisagreed,ordidnotknow.
Governmentresponsetoquestion8
TheGovernmentwelcomesrecognitionfromsomethatimprovedaccesstogovernmentservicescanbenefitindividuals,providedtheappropriateprivacycontrolsareinplaceandthatsharingdatawillhelppreventhijackedidentitiesbyusingtrusteddatafromauthoritativesourceswhenprovingidentity. However, Governmentalsonotesconcernsthatsomemarginalisedgroupsmaybeunableorreluctanttouseonlinepublicservices.Governmentwillcontinuetoofferofflinechannelsforthoseuserslessabletoengagewithgovernmentservicestoprovetheiridentity.
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification21
Question9- Towhatextentdoyouconsidertheproposedsharingofdatafortheidentityverificationobjectivewillleadtoanindividualand/orhouseholdlosingaccesstoaservice?
Summaryofresponsestoquestion9
Wedeterminedthat17%ofquestionstothisquestionwereoutofscope.
Oftheresponsesthatwereinscope,aminority(29%)respondedpositivelywithdisagree/stronglydisagree,indicatingthattheyexpectnoindividualorhouseholdtoloseaccesstoaserviceasaresultofidentityverificationservices.Themainreasonscitedwerethatimprovedaccesstogovernmentservicescanonlybenefitindividualsandhouseholdsprovidedtheappropriateprivacycontrolsareinplace;thatwiderpublicsectordatasharingwillimprovedigitalinclusiontothosecurrentlyexcludedfromeasyaccesstoservicesbynothavingconventionalverificationdocumentslikepassportsordrivinglicences;wouldpreventfraudfromenteringgovernmentprovidedservicesattheearliestopportunity;andwouldsupporteaseofaccesstoawiderrangeofpublicservices,ensuringthatindividualscanmoreeasilyinteractwithgovernmenttoaccesstheservicestheymaybeentitledto.
Some54%agreedorstronglyagreed,indicatingviewsthattheyperceivetherewillbealossofaccesstoservicesifidentityverificationservicesareimplemented.Themainreasonscitedwereconcernthatuseofdigitalidentitiesforaccessinggovernmentservicescouldleadtodiscriminationagainstmarginalisedcommunities;thosewhochoosenot,orwhoarenotbeabletouseanonlineverificationsystemmaybedelayedinaccessingservicesifonlinechannelsweretoreplaceotherformsofidentityverification.Respondentshighlightedthatsomeofthemostvulnerablemembersofsocietyhavethelowestlevelsofcomputeraccess.Furthermore,Governmentwillcontinuetoofferofflinechannelsforthoseuserslessabletoengagewithgovernmentservicestoprovetheiridentity.
Theremaining17%neitheragreednordisagreed,ordidnotknow.
Governmentresponsetoquestion9
TheGovernmentwelcomesrecognitionthatimprovedaccesstogovernmentservicescanbenefitindividuals,providedtheappropriateprivacycontrolsareinplaceandthatnoindividualshouldloseaccesstoaserviceasaresultofidentityverificationservice.GovernmentalsonotesthepotentialfordiscriminationagainstmarginalisedgroupsinsocietyandhasreviewedthePublicSectorEqualityDutyassessment.
Question10- Doyouthinktheproposeddatasharingforidentityverificationserviceswillnegativelyimpactonpeoplewhoshareanyoftheprotected
22 Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
characteristicsundertheEqualityAct2010(i.e.age,disability, genderreassignment,marriageandcivilpartnership,pregnancyandmaternity, race,religionorbelief,sexandsexualorientation)?
Summaryofresponsestoquestion10
Wedeterminedthat12%ofresponsestothisquestionwereoutofscope.Oftheresponsesthatwereinscope,amajority(83%)indicatedthatdatasharingtosupportidentityverificationserviceswouldnegativelyimpactonpeoplewhoshareanyoftheprotectedcharacteristicsundertheEqualityAct2010.Examplescitedweremarginalised,vulnerableandminoritygroupswhoaremorelikelytohavereducedaccesstoonlineservices,forexample,peoplewithdisabilities,onalowincomeorthosewithlowdigitalliteracylevelsorlimitedinternetaccess).SomerespondentsparticularlyhighlightedthatmigrantsandpeopleinGypsy,RomaandTravellercommunitiesmaybeparticularlyimpacted.8%ofrespondentsdidnotperceivetheimplementationoftheproposedidentityverificationserviceswouldleadtoanynegativeimpactsonpeoplewhoshareanyoftheprotectedcharacteristicsundertheEqualityAct2010.Respondentshighlightedthatinclusiveidentityverificationserviceswouldassistthosewhomayhavedifficultyinprovingtheiridentityandthereforepreventdiscriminationattheearliestopportunity.Theremaining9%neitheragreednordisagreed,ordidnotknow.
Governmentresponsetoquestion10
GovernmentcarriedoutanassessmentunderthePublicSectorEqualityDuty(PSED)andfoundnonegativeimpactsonthosewithprotectedcharacteristicsundertheEqualityAct2010.IntheNationalDataStrategypublishedin2020,theGovernmentalsorecognisesthatwideruseofdatahasgreatpotentialintacklingdigitalexclusionandcreatingafairsocietyforall.Foridentityverificationservices,thiswouldincludebeingabletoaccesswidergovernmentdatasets-beyondpassportanddrivinglicencedata-tohelpauserprovetheiridentity,ratherthanrelyingonpaperdocuments.
TheGovernmentremainscommittedtoprovidinganinclusiveandaccessiblesystemthathelpspeopleprovetheyarewhotheysaytheyare.GovernmenthasreviewedthePSEDassessmenttoincludeconsiderationofGypsy, RomaandTravellercommunities,whichwehavepublishedwiththisgovernmentresponse.Furthermore,Governmentwillcontinuetoofferofflinechannelsforthoseuserslessabletoengagewithgovernmentservicestoprovetheiridentity.
Question11- Doyouhavefurthercommentsonthisproposedobjective?
Summaryofresponsestoquestion11
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification23
Respondentsmadeanumberoffurthercommentsonidentityverificationservices,thebroadthemesofwhicharesetoutbelow.
Consenttodatasharing
Respondentscommentedthatpublicbodiesshouldnotsharethepersonaldatatheyholdforanypurposeswithoutpriorconsentdatafromtheindividual.
Inrelationtoidentityverificationservicesproposedbythegovernment,theproposedregulationswillenablespecifiedpublicbodiestoprocessanindividual'sdata(suchasdrivinglicenceinformation)whenitisnecessaryforthemtoprovewhotheyareinordertoaccessagovernmentservice.Onlytheminimumnumberofdatacheckswillbeusedtoverifywhoapersonis.Provingwhoyouareonlinewillnotbecompulsory;insteadpeoplewillhavemorechoiceastohowtheyprovethingsaboutthemselves.
Thelawfulbasisforprocessing(i.e.sharing)personaldatawillbedeterminedbytheresponsibledatacontrollers,butforpublicservicesthiswouldtypicallybethatitwillbenecessaryfortheperformanceofataskcarriedoutinthepublicinterestorintheexerciseofofficialauthority(Article6(1)(e)UKGDPR).Section35oftheDigitalEconomyAct2017providesalegalunderpinningforrelyingonthatbasiswherethedataisbeingsharedtoachieveaspecifiedobjectiveforthepurposesofimprovingandtargetingapublicserviceandprovidingabenefittoindividualsandhouseholds.
Bulkdatasharing
Respondentscommentedthattheregulationsappearedtogiverisetodatasharinginbulk.However, theproposedregulationswillnotenablebulkdatasharing;rather, theyseektoallowdatasharingbetweenspecifiedpublicauthorities,limitedbytheminimumnumberofdatacheckstoverifywhoapersonisandonlyforthepurposesofidentityverification.
Digitalcurrency
Theconsultationondraftregulationstohelpmorepeopleprovewhotheyareonlinedidnotincludeproposalsthatwouldimpactontheabilityforindividualsorhouseholdstousecashortosupportadigitalcurrency.However, thereisanotherpublicconsultationopenuntil7June2023launchedbytheBankofEnglandandHMTreasurycalledthedigitalpound:Anewformofmoneyforhouseholdsandbusinesses?thatislookingforviewsonintroducingadigitalpound.DetailsofhowtorespondtothatconsultationareincludedonGOV. UK.
24 Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
Conclusionandnextsteps
TheUKGovernmentwilltakeforwardtheregulationsoutlinedaboveandintheconsultationdocumentassoonasparliamentarytimeallows.
Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification25
AnnexA–Listofrespondentorganisations
CivilSocietyorganisationswhorespondedtotheconsultationwere:
● AmberhawkTrainingLtd● BigBrotherWatch● Medconfidential● NO2ID● PrivacyInternational
Otherorganisationswhorespondedtotheconsultationincluded:
● Area51Ltd● CambridgeMontessoriLtd● ChristianVoice● DECaDE-CentrefortheDecentralisedEconomy● FeedbackCIC● GoodThingsFoundation● HeritageParty● KingdomJusticeMovement● LettingFocus● LocalGovernmentAssociation● LowCarbonAlliance● Mastercard● MydexCommunityInterestCompany● NorthernHeart● OpenIdentityExchange● OptionsforChangeCharity● PaymentsAssociation● PowysCountyCouncil● RollsRoycePLC● SocietyforInnovation,TechnologyandModernisation(SOCITM)● SocietyofLocalAuthorityChiefExecutives(SOLACE)● Veriff● VeritasLaw● WorkersPartyofBritain● WorldInnovationFoundation● XSCGroup● YDKTechnologiesLtd
26 Governmentresponsetotheconsultationondraftlegislationtosupportidentityverification
Thisdocumentisavailableinlargeprint,audio andbrailleonrequest.Pleasecontactdea-data-sharing@digital.cabinet-office.gov.uk
©Crowncopyright2018
ThispublicationislicensedunderthetermsoftheOpenGovernmentLicencev3.0exceptwhereotherwisestated.Toviewthislicence,visitnationalarchives.gov.uk/doc/open-government-licence/version/3orwritetotheInformationPolicyTeam,TheNationalArchives,Kew,LondonTW94DU,oremail:psi@nationalarchives.gsi.gov.uk.
Wherewehaveidentifiedanythirdpartycopyrightinformationyouwillneedtoobtainpermissionfromthecopyrightholdersconcerned.
Anyenquiriesregardingthispublicationshouldbesenttousatdea-data-sharing@digital.cabinet-office.gov.uk
Thispublicationisavailableatwww.gov.uk/government/publications
Printedonpapercontaining75%recycledfibrecontentminimum.