The following Statement was made in the House of Commons on Tuesday 10 March.
“Today the Government are launching a national conversation on how we will build and use digital ID as the means to access public services digitally on a mobile phone or computer.
Public services are meant to be there at the most important moments of your life: free childcare hours to help your children get a good start in life, getting your passport to go on your first holiday, passing your driving test and getting your first driving licence, asking for help if you lose your job, or receiving your state pension in retirement. But today, as the House knows, it is often too hard for people to get what they need when they need it. The current legacy system of call centres, paperwork and the need for people to tell their story multiple times to different parts of government, with hours on hold and not knowing where they are in the process, is not good enough. I want to change that, and this Government will.
In its place, we will build a truly modern Britain where public services work for the citizen, through new digital public services that come together on the GOV.UK app, so that help is there when people need it most. To do that, government needs to build the foundations for these new modern public services, and that is exactly what this digital ID system is for. It will be free to access for anyone who wishes to use it, and it will be built on three core principles. First, it must be useful. It needs to be easier than the old telephone and paper-based systems. Secondly, it must be secure. People will have more control over what data they share, and we expect nothing less than the level of security protections provided by banks for online banking services. Thirdly, it must be for everyone. We will not leave people behind, and the Government will help those who are less confident with technology or do not have other forms of ID, such as a passport.
With a digital ID, citizens will be able to log in to the GOV.UK app and then, crucially, prove who they are. But unlike an ordinary login, the digital ID will work across different departments and services, bringing those all together in one place in the GOV.UK app, so that the public can access all the services they need in one place. This is different from building one giant government IT system—that is not what we are doing. Services will remain on separate IT systems in their relevant departments, and the NHS app and citizens’ health data will always remain separate, but the GOV.UK app and digital ID will, over time, bring all other public services into one app on mobile phones—the front door to modern public services.
This will not be a new experience for citizens. The public already use these systems every day, from banking to shopping. Other countries are already far ahead of us, from Denmark and Estonia to Australia and India. Britain is having to catch up.
It is an issue of convenience and efficiency, but it is also one of fairness and equality. We all know who the status quo often favours: those with the resources, the headspace, and perhaps the pointy elbows or the pushiness to get themselves to the front of the queue or allow them to play the system. But public services are meant to be there when people need them most, and how the legacy system has sometimes treated people in these stressful or difficult situations is quite frankly an outrage, piling them up with bureaucracy and leaving them without the help they need.
Who is it who struggles to fill in the forms correctly or lacks the form of ID required? Who are the one in seven people across the UK who do not have a passport? They are often the strivers who are juggling work and caring responsibilities. This Government believe that everybody deserves a fair shot, and it is up to government to give people support and a leg-up when they need it.
Today we are launching this national conversation to discuss how we will build and use a digital ID. We want to know where frustrations exist with the current legacy system and which services could be made easier via the GOV.UK app. Later today, I will share a prototype of how a digital ID could work that shows how “government by app” could become a reality, joining up different departments and services so that the public do not have to do the work themselves.
In the initial stages, the digital ID system will start by making it easier to complete simple administrative tasks, such as proving one’s right to work when starting a job. Other tasks, such as paying car tax, ordering a passport or sorting childcare entitlements, could become part of the same app. I understand that the idea of a digital ID has sparked significant public interest, so I have instructed my department to ensure that this consultation goes further than any other that the Government have done before.
As part of the public consultation, which is live right now, we will invite a representative sample of the public at large—from all walks of life and all parts of the country—to form a people’s panel. That deliberative democracy process will build on our experience of supporting Parliament’s citizens assembly on net zero in the previous Parliament. Working with over 100 citizens, we will debate the difficult questions, find ways forward and build a system that can secure the trust and support of everyone. To those Members chuntering from a sedentary position about having a conversation with the public, I say, ‘What do you fear?’ This Government are very happy to talk to the public about what we are doing, and I look forward to talking to honourable Members’ constituents if they are selected to be part of the process.
I understand that this will not be for everyone. I hope that the services we build will be so good that most people will wish to use them, but for those who do not, I want to make sure that help is on hand in their local community. That is why the rollout of the digital ID will be accompanied by a digital inclusion drive to help people to access and use the services. I do not come to Parliament today with preconceived answers, and we will of course need to ensure that any future scheme is value for money, but I am interested to hear ideas about how we might use the people and buildings we already support through public expenditure to help local communities. We could use local post offices and postal workers, or libraries and jobcentres, to ensure that the majority of people can, if they need to, access digital assistance to use these services. For those who really do not wish to, traditional routes will of course still be made available.
As right honourable and honourable Members from across the House know, by the end of this Parliament, digital checks to verify someone’s right to work will be mandatory when they start a new job. It is currently a legal requirement for employers to check that a new employee has a legal right to work in the United Kingdom, but the often paper-based approach of photocopying or scanning a passport or a utility bill, without further checks, is vulnerable to fraud and does not create a clear record for enforcement agents of when and where checks have been carried out. That is why the Prime Minister has asked for those existing checks to be conducted digitally by the end of this Parliament. It will still be the employer’s responsibility, but employees will be able to choose between using their government digital ID—as we are setting out today—and using a passport, e-visa or other alternative method. It will be easier and quicker for individuals to demonstrate their right to work. For businesses, it will streamline and reduce the cost of compliance reporting. For the Home Office, it will create a digital audit trail of where checks have been carried out, to support enforcement where checks have not been carried out and to deter those who think that it is too easy to work illegally in the United Kingdom.
This is quite a technical consultation, but it is also a deeply political one. When the public voted for change they also voted for better public services. That is what Labour Governments at their best are all about: building new and innovative public services to support opportunity for all, rather than for just the privileged few—from the NHS in the 1940s, to the Open University in the 1960s and Sure Start centres in the 2000s. Today we are continuing that proud Labour tradition by building modern, digital public services that extend opportunity and support for people when they need it. This stands in stark contrast to political parties that wish to conserve the unacceptable status quo, or that offer to tear everything down and leave people on their own.
We want people across Britain to want this system, we want them to be part of it, and we want them to have the opportunity to shape it. This consultation is that opportunity. I look forward to the involvement of Members from across the House and of our constituents. I thank my honourable friend the Member for Makerfield, Josh Simons, for his work on this issue to date, and the Parliamentary Secretary for the Cabinet Office, my honourable friend the Member for Bury North, Mr Frith, for all the work that he will now do to make this a reality—for which I will take the credit if it goes well, and he the blame if it goes wrong. I commend this Statement to the House”.
My Lords, this Statement was delivered just one week ago and has already run into some serious difficulty. Reports in the press suggest that both the Health Secretary and the Education Secretary have made it clear that their departments will not provide some of the data required for the scheme. If that is correct, it raises a fundamental question: can this policy get off the ground?
The Chief Secretary to the Prime Minister announced that the Government sought to introduce a digital ID system that would allow individuals to log into the GOV.UK app to verify their identity. He said that
“unlike an ordinary login, digital ID will work across different departments … so you can access all of the services you need in one place”.
Yet it now appears that health and education—two of the areas where one might reasonably expect such assistance to be most useful—may not be included at all. The Chief Secretary stated that
“digital ID will, over time, bring all other public services into one app”
on your mobile phone. If that is the ambition, these reports raise serious questions about whether the Government’s own departments are prepared to make that vision a reality.
This proposal raises serious questions about accessibility. Noble Lords will know that when government services move online and on to apps, they do not always become simpler or easier to use. Often, the opposite is true. These systems can take years to refine. The user experience can be poor and tasks that were once straightforward become frustratingly complex. Take, for example, the process of verifying an identity with Companies House through the GOV.UK website. What would once have been completed in minutes can now take much longer, as users work their way through help pages, chatbots, online forms and endless CAPTCHA boxes. The current state of the Government’s digital infrastructure does not inspire great confidence that this scheme will deliver the outcomes Ministers promise.
My Lords, I thank the Minister for this opportunity to respond to last week’s Statement and, indeed, for his personal engagement with us at that time.
The Chief Secretary told the Commons on Tuesday that he was continuing the proud Labour tradition of building public services for the many. He invoked the NHS, the Open University and Sure Start. It was a stirring lineage. But there is history he omitted: Verify, which wasted over £220 million; GOV.UK One Login, for which the Cabinet Office sought up to £400 million; and now this national digital ID, which the OBR estimates will cost £1.8 billion over three years. This, indeed, is Verify 4.0.
The Government have confirmed that possession of a digital identity will not be compulsory. We on these Benches opposed mandatory digital ID at every turn, and I am pleased to say that the Government have listened. My honourable friend Lisa Smart MP pressed the Chief Secretary directly in the Commons last week and received his wholehearted assurance. He continued to claim that using digital ID will be entirely optional. So, I ask the Minister in this House, will the voluntary character of this scheme be placed in the Bill the Government intend to bring forward later this year? How can we trust any Government on how personal data, once surrendered to the state, will actually be used?
Earlier this month, this House considered an amendment to the Crime and Policing Bill, tabled by my noble friend Lady Doocey, which sought to prohibit police from using DVLA driving licence images for facial recognition searches. The DVLA holds over 55 million records. Every driver provided their photograph for one purpose only: to hold a driving licence. They did not consent to their image becoming part of what Liberty has rightly described as the largest biometric database for police access ever created in the United Kingdom. Yet the noble Lord, Lord Hanson of Flint, the Home Office Minister, did not accept the amendment and confirmed at all stages that the express purpose of Clause 138 of the Bill is precisely to permit facial recognition searches of DVLA records. So, within a single parliamentary week, we have a Government launching a national digital identity consultation on the basis of assurances about data use, while declining to place in statute the very protections that would make such assurances meaningful. The question is not whether the Government intend that digital ID will become an instrument of surveillance, but whether a future Government could.
20 of 38 shown
If the ambition is to move large parts of the state on to a single digital platform, the issue of digital exclusion cannot be ignored. We can already see this in practice. Many now struggle to use the NHS app. Increasingly, patients must complete online forms or digital triage systems before they can book a GP appointment, resulting in delays in access to care.
We on these Benches also harbour concerns as to whether the system will truly remain voluntary. The Chief Secretary said:
“For those who really do not wish to, traditional routes will … still be made available”.
This assurance ignores that some people will genuinely struggle to use the new system rather than just being refuseniks. It is also unclear what this means in practice. The Chief Secretary did not guarantee that traditional routes will remain available to the same extent that they are today. People will naturally worry that, over time, this could lead to a real-term reduction in those routes, with fewer alternatives for those who cannot or do not wish to use the digital system.
I ask the Minister for clarity. Can he confirm that this policy will not result in any reduction in access to public services for those who either cannot or do not wish to use the digital ID system? Can he also confirm that the introduction of this scheme will not lead to any reduction in the availability of existing processes in departments or services that adopt this digital ID route?
I turn to the GOV.UK One Login system. How many public services now require systems to use GOV.UK One Login as a mandatory gateway rather than an option? How many of the National Cyber Security Centre’s 39 cyber assessment framework outcomes does One Login currently meet, and which does it not?
Can the Minister also say what whistleblowing concerns have been raised since 2022 about security clearances, administrator access, overseas development and undetected red team intrusions? What security incidents have occurred? Has any personal data been compromised?
These questions were asked in a UQ in January. I am concerned by the lack of detail in the Minister’s response. I hope the Minister can reply more fully this time. If not, I hope he will write to clarify these points.
I appreciate that the Government have opened a public consultation, but these questions are immediately obvious to us—and, I hope, to the Government. I look forward to the Minister’s response.
The Chief Secretary said that he wants security at least as strong as online banking. That is the right aspiration, but, as mentioned by the noble Earl, GOV.UK One Login, the umbrella infrastructure for this system, reportedly satisfied only 21 out of 39 security outcomes required by the National Cyber Security Centre. Whistleblowers have described vulnerabilities that allow unauthorised access to sensitive functions without triggering any alert. How can the Government justify launching a national identity solution on a platform that fails to meet nearly half the NCSC’s mandatory security outcomes?
In part two of the Fisher review, published in January, Jonathan Fisher KC warned that AI-driven impersonation at scale is now a defining crime of our age and that we must implement upstream measures—stopping fraud at the point of identity issuance, not reacting after a digital identity has been stolen. If our foundations currently satisfy barely half the required security outcomes, how do we deliver the upstream protection Mr Fisher demands?
Will the Government commission and publish a full NCSC security audit before a single citizen is enrolled? Will they introduce an offence of digital identity theft that they, along with the previous Conservative Government, have so far resisted? The consultation proposes a universal unique identifier to link citizens across every departmental silo. Without strict legal guardrails, that identifier is the functional infrastructure of the national identity register that Parliament voted to abolish in 2011, and it is precisely the centralised data honeypot that hostile state actors would most wish to compromise. We need not mere parliamentary approval for services added to the app, but a statutory prohibition on bulk data matching across departments.
In summary, I put four questions to the Minister. First, will the voluntary character of this scheme be placed in primary legislation, with an explicit prohibition on any future mandatory requirement without a further Act of Parliament? In that context, and as the noble Earl has mentioned, how mindful are the Government of the possible consequences for digital inclusion? Secondly, the Home Office’s assurances on DVLA facial recognition mirrored word for word those given by the previous Government. Before the Minister can confirm the opposite, what statutory purpose limitation on digital identity data will be placed beyond the reach of secondary legislation? Thirdly, will the Government provide a statutory guarantee that the universal unique identifier cannot be used for bulk data matching across departments without primary legislation? Finally, will the Government publish an independently verified cost-benefit analysis before the Bill is introduced, and explain why £1.8 billion would not deliver greater public benefit directed to the NHS and front-line policing, for instance?
The Chief Secretary asked what it is that critics fear from a public consultation. We do not fear the consultation; what we fear is a fourth cycle of the same expensive failure, grand ambitions and insecure foundations—a creeping identifier that becomes the digital spine of state surveillance. But what we fear above all is a system whose data acquires uses never publicly intended by its creators. We have just watched that happen in this very Chamber with the DVLA database of images. We on these Benches will support voluntary, secure, properly costed modernisation of public services, but we will not accept warm ministerial words as a substitute for hard legislative limits. We need a state that is not merely digital by choice today but constitutionally prohibited from becoming compulsory tomorrow. On the evidence of this and last week’s proceedings, we are very far from that guarantee.