Being passed before Parliament members this week is the government’s Data Protection and Digital Information Bill which will include a drafted framework governing consumer-permissioned digital identity verification services used by firms.
Nfcw.com reported the proposals to be brought before Parliament members. The data bill concentrates on provisioning a “strengthened trusted data regime” which is influenced by the EU’s General Data Protection Regulation. The proposal encompasses a register listing accredited DVS providers delivering digital verification services, although companies would be allowed the space and flexibility to consider how to comply with the data rules including around sharing information.
The parliament hearing could also potentially introduce a trust mark to differentiate companies that have implemented validated verification services from the endless pit of non-accredited identity solutions.
The Data Protection and Digital Information Bill was first introduced last summer and paused in September 2022. Guidelines governing how businesses use digital identities do exist in the Trust Framework which uses careful language scrutinising data compliance within the private sector, particularly in relation to collecting identities through the Right to Work and Rent schemes.
Although verification providers do not currently have to be certified for these checks, the Home Office is in the process of making certification a mandatory requirement.