Quarterly BAS Due (July–September)
Form 1099-NEC & Contractor Payment Reporting Check
Why this matters.
The Data (Use and Access) Act 2025 put the UK’s digital identity system on a statutory footing for the first time, formally establishing “Digital Verification Services” (DVS) and the Digital Identity and Attributes Trust Framework (DIATF) that certified identity providers must meet. Businesses that rely on a third party to check someone’s identity digitally — for right to work checks, age verification, tenant referencing, or onboarding — need to know whether that provider holds DVS certification and carries the trust mark, because using an uncertified provider can leave the business itself carrying the compliance and liability risk if a check later proves inadequate. This matters most for right to work checks: since October 2022, Identity Service Providers certified under the trust framework can carry out Identity Document Validation Technology (IDVT) checks on British and Irish citizens, but employers relying on an uncertified tool have no statutory excuse if it later transpires the check was invalid. The framework sits alongside UK GDPR, since any digital identity check inevitably involves processing personal data — often including passport or biometric data — so businesses also need a lawful basis, proportionate retention period, and appropriate security for whatever identity data their provider collects and shares back with them. With the Office for Digital Identity and Attributes overseeing the certified provider register and government actively encouraging wider adoption of digital identity across age verification, tenancy checks, and employment screening, businesses using — or considering — digital ID tools need a clear picture of whether their current setup is certified and properly governed.
