Unchecked Access to Labour's Digital IDs: A Vulnerable Treasure Trove for Cybercriminals
Rewriting the Article
Joined the fray once more: the digital ID debate – and it ain't going quietly
There's no denying a strong dose of déjà vu washin' over you when the ID discussion hits the table again. That battle – No2ID – was fought, won, and ended in the early 2000s. However, it's time for a rematch, with members of Parliament pressing for the establishment of a digital ID system. Combined with the launch of the new gov.uk wallet and the government's relentless pursuit of the Data (Use and Access) Bill, it's shaping up to be a heated debate.
As we wade deeper into the digital era, a digital ID system may appear to be the logical choice at first glance. Yet, what seems inclusive to some will leave others behind. You see, folks, there are plenty of people in the UK who can't or aren't keen on using digital means to identify themselves. The widening digital divide is already causing problems for many who are trying to access government services: the National Audit Office suggests that around 80% of Universal Credit applicants struggle with online identity verification methods.
And let's not forget about digital poverty. With millions of Brits unable to afford or lacking the skills to get connected, simply put, not everyone can go digital. Ofcom stats show that seven per cent of households in the UK don't have internet access, and that figure escalates to nearly 20% for low-income households and those over 65. Achieving digital inclusion means recognizing the truth that we can't get everyone online – though the Bill doesn't even mention a right to a non-digital ID.
What's the deal with personal privacy & digital IDs?
Before we dive headfirst into building digital ID systems, legislators must take into account the implications for personal privacy and security. A centralized digital ID repository, housing data such as individuals' GP visits, school records, bank statements submitted to the DWP, and tax returns, would be like candy to hackers and foreign adversaries seeking to breach government databases.
The upcoming digital wallet will store government documents that can verify your age, identity, or eligibility for services. While it's been promised the government wallet will be voluntary, there's no legal guarantee or safeguards protecting us from living in a world where digital identification might become mandatory.
Steff Aquarone MP has proposed an amendment to the bill to ensure individuals have the right to use non-digital ID when interacting with both private and public services. Unfortunately, not a single Labour Party member is backing the amendment.
Advocates for digital IDs believe they'll streamline government efficiency by adopting a centralized digital approach to identity and data. However, digital ID schemes aren't a magic bullet to solve government efficiency issues. Liberal democracies like Canada and Denmark run effective public services without a nationwide digital ID program.
Labour didn't make revolutionary promises to launch a digital ID system during their campaign, but they're laying the groundwork for one surreptitiously. The government should see the Data (Use and Access) Bill as a chance to ensure that people always have a choice in how they identify themselves – preventing a digital ID scheme from becoming compulsory.
Jasleen Chaggar is a legal and policy officer at Big Brother Watch
Enrichment Data
The Data (Use and Access) Bill is currently journeying through the UK's Parliament. First introduced in the House of Lords in October 2024, the Bill has gone through several stages, including readings and committee sessions, as of early May 2025. Some modifications have been made, primarily concerning the protection of children's personal data and criminalizing the production of non-consensual 'deepfake' intimate images.
The Bill has three primary objectives as stated by the government:
- Harnessing digital power to boost the economy.
- Ameliorating public services and fostering a modern digital government.
- Making life simpler for people.
Regarding digital IDs and personal privacy, while the Bill focuses on updating data management frameworks, it largely aligns with existing UK GDPR principles to preserve the UK's data protection adequacy standing with the European Commission. This indicates no significant weakening of privacy protections, but the framework enables broader data sharing and utilization, potentially involving data linked to digital identities.
The Bill boasts game-changing potential in tackling financial crime and cybersecurity loopholes by enabling greater data access, which may impact digital ID verification methods. Yet, ongoing discussions about the Bill highlight concerns related to privacy and secure identity verification.
In summary:
- The final stages of the Bill are pending, with developments likely following May 2025.
- It aims to balance economic growth, modernization of public services, and data privacy preservation.
- Additional protections for sensitive personal data, particularly for children, have been enacted.
- New penalties pertaining to the misuse of digital imagery have been established to strengthen privacy enforcement.
- Digital IDs may experience streamlined verification methods but maintain security risks.
- The Bill modernizes data protection without jeopardizing privacy standards, though vigilance is needed to tackle security and verification concerns.*
- The No2ID movement, which aimed to safeguard households from mandatory digital IDs, was a significant political debate in the early 2000s.
- As policy-and-legislation surrounding data-and-cloud-computing and technology evolves, the need for a digital ID system is being pressured by members of Parliament, despite concerns about legal implications and digital poverty.
- Jasleen Chaggar, a legal and policy officer at Big Brother Watch, has proposed an amendment to the Data (Use and Access) Bill to ensure households have the option to use non-digital ID when interacting with public and private services, but it currently lacks support from Labour Party members.
- In the general news, the Data (Use and Access) Bill is currently undergoing its final stages in the UK's Parliament, with a focus on harnessing digital power for economic growth while maintaining the existing data protection adequacy standards.
- Though the Data (Use and Access) Bill may streamline digital ID verification methods and help tackle financial crimes, it is crucial to safeguard personal privacy and ensure households have a choice in how they identify themselves to prevent digital ID schemes from becoming compulsory.
