Digital Identity Verification (DVS) Compliance Check

Why this matters

The Data (Use and Access) Act 2025 put the UK’s digital identity system on a statutory footing for the first time, formally establishing “Digital Verification Services” (DVS) and the Digital Identity and Attributes Trust Framework (DIATF) that certified identity providers must meet. Businesses that rely on a third party to check someone’s identity digitally — for right to work checks, age verification, tenant referencing, or onboarding — need to know whether that provider holds DVS certification and carries the trust mark, because using an uncertified provider can leave the business itself carrying the compliance and liability risk if a check later proves inadequate. This matters most for right to work checks: since October 2022, Identity Service Providers certified under the trust framework can carry out Identity Document Validation Technology (IDVT) checks on British and Irish citizens, but employers relying on an uncertified tool have no statutory excuse if it later transpires the check was invalid. The framework sits alongside UK GDPR, since any digital identity check inevitably involves processing personal data — often including passport or biometric data — so businesses also need a lawful basis, proportionate retention period, and appropriate security for whatever identity data their provider collects and shares back with them. With the Office for Digital Identity and Attributes overseeing the certified provider register and government actively encouraging wider adoption of digital identity across age verification, tenancy checks, and employment screening, businesses using — or considering — digital ID tools need a clear picture of whether their current setup is certified and properly governed.

What you'll need

• Whether your business uses a third-party digital tool to verify anyone's identity, age, or right to work
• Whether you know if that provider is certified under the UK Digital Identity and Attributes Trust Framework (DIATF)
• Awareness of which checks in your business (right to work, age verification, tenant or customer onboarding) rely on digital rather than manual ID checks
• Your current process, if any, for retaining or deleting the identity documents and data a digital check produces

What you'll get

A personalised compliance report covering: a score out of 100, an executive summary, a list of findings ranked by severity, and a prioritised action plan with timeframes.