Progressively getting closer to launching its digital identity framework, the UK government has laid out a new draft Code of Practice in Parliament that establishes rules for public authorities sharing data with registered private-sector verification services.
The draft statutory Code of Practice guides public sector bodies on exercising powers under Section 45 of the Data (Use and Access) Act 2025. Known as the “information gateway,” it enables public authorities to securely share data with registered Digital Verification Services.
Public authorities will be able to issue official government credentials directly to citizens for storage in approved private-sector digital wallets. Moreover, verification services will be able to perform targeted attribute checks or status verifications directly against official databases, streamlining processes such as age verification, right-to-work checks, and identity validation.
Public authorities and DVS providers are being encouraged to begin discussions regarding the data-sharing agreements needed to operationalize the new power.
Before taking effect, the draft Code must receive formal approval from both the House of Commons and the House of Lords, with officials aiming to secure parliamentary approval and formally publish the finalised Code by the end of the year.
Subject to parliamentary approval, Section 45 of the Data Act will be officially commenced alongside the publication of the finalised Code.
While the gateway will open for most participating public authorities by the end of the year, major revenue agencies will operate on a delayed timeline.
Commencement of Section 45, along with related provisions in Sections 46, 47, and 48, will be deferred into next year for HM Revenue and Customs, The Welsh Revenue Authority and Revenue Scotland.
Government ministers confirmed that work is ongoing to integrate these revenue bodies into the framework, with a specific implementation timeline to be announced in due course. Further operational guidance and updates are expected in the coming weeks as the draft makes its way through Parliament.
As the UK advances its digital identity framework and private-sector wallet integration under the Data (Use and Access) Act, this move closely aligns with Identity Week Europe’s core focus on Digital ID, Wallets & Payments and cross-ecosystem interoperability. It highlights how sovereign data gateways and public-private collaboration are turning regulatory frameworks into operational, real-world digital identity solutions.
