UK Digital ID: The People's Panel Closes Today, the Trust Framework Is Live, and the Government Still Has to Earn It

Today is the last day of the UK government's People's Panel for Digital ID. One hundred randomly selected members of the public have spent weeks producing recommendations on a national digital ID scheme that nearly three million others signed a petition to oppose. Whether that panel produces anything useful or gets quietly filed alongside the Betamax instruction manual of government IT projects is another matter.

The political theatre continues. The plumbing, meanwhile, has been getting laid.

The Trust Framework 1.0: What Just Went Live

On 9 June 2026, the Office for Digital Identities and Attributes published the final 1.0 release of the UK Digital Verification Services Trust Framework. This is the certification standard any provider must meet before they can legally carry out right-to-work, right-to-rent, or DBS checks using digital identity. It sets the bar across IT security, fraud prevention, risk management, and issue handling. Providers certified against it get to display the UK CertifID trust mark, a government-endorsed signal that they've cleared the statutory standard.

The framework comes into force once the first conformity assessment body is accredited, expected around 1 September 2026. Providers already certified at the gamma stage move across via a tailored delta uplift rather than a full re-audit, which is at least one sensible decision in an otherwise labyrinthine process.

I spent five years in identity verification. I know what these certification cycles do to a business: they consume six to twelve months of engineering and compliance resource, they cost more than anyone budgets for, and they often land just as the regulatory goalposts shift again. Version 1.0 is not the finish line. It's the gate at the start of the proper race.

The GOV.UK Wallet: Quietly More Interesting Than Anyone's Admitting

The most commercially significant development in this whole saga has been easy to miss. The GOV.UK Wallet is already live. The digital Veteran Card has been in use since October 2025. A digital driving licence has been in private testing since December 2025, with wider public availability expected this year. Certified providers are being enabled to test programmatic verification of digital driving licence credentials during 2026.

Think about what that means for ecommerce and onboarding. Instead of a user photographing a plastic card, uploading it, and waiting for a human review queue to clear, they open the wallet, approve the request, and get a cryptographically signed result in seconds. Deterministic, not a best guess. The whole process, from sending a request to receiving a confirmed result with a digitally signed audit trail, can complete before a candidate's first day.

I built something like this in 2008: a mobile wallet for estate agents doing AML checks. It cost about forty grand, worked beautifully in the demo room, and died because nobody had standardised the back-end data sources. That's the bit the government is finally fixing, slowly, in full public view.

The Policy vs The Ground Reality

The gap between the policy narrative and the business reality is significant.

The government initially said digital ID would be mandatory for right-to-work checks. Then nearly three million people signed a petition against it and the mandatory element was dropped. The messaging pivoted to user convenience and public services access. From October 2026, a new code of practice applies to all employment starting on or after that date: employers must check every worker consistently through one of three permitted routes, a manual document check, the Home Office online service, or a certified Digital Verification Service.

Not mandatory, then. But if you want the statutory excuse protecting you from a civil penalty of up to £60,000 per worker for employing someone without the right to work, you'd better be doing it properly. In practice, certified digital checks are the route that scales.

The government also has form here that no one should ignore. GOV.UK Verify was introduced in 2013 as the definitive solution. It was quietly buried after £220 million of public money and little to show for it. That institutional memory hasn't left the room.

What the Market Is Doing While Westminster Debates

The private sector isn't waiting. This week's UK tech funding roundup, tracked by UKTN for the period 15 to 19 June, covered five deals totalling £111.62 million. One of them was Condukt, described as an always-on, agentic compliance platform delivering real-time business onboarding and automated decisioning across the customer lifecycle. Condukt was also selected for NatWest's 2026 Fintech Programme, running a 12-week cohort on AI shaping customer experience.

That's the pattern: while the Trust Framework certification process grinds through its accreditation cycle, agentic compliance tools are being built and funded right now, ready to sit on top of whatever infrastructure the government eventually delivers. Smart founders aren't waiting for CertifID. They're building the orchestration layer.

Aveni, another programme participant, combines proprietary language models for agentic customer engagement with real-time compliance and conduct risk assurance. DeepFlow is building a cross-silo agentic orchestration layer for financial crime and risk operations. The theme is consistent: human oversight retained, AI doing the repetitive decisioning grunt work at speed.

The Honest Founder's Verdict

The UK CertifID trust mark, the GOV.UK Wallet, the DVS Trust Framework 1.0: taken together, these represent the most coherent attempt Britain has made at digital identity infrastructure since GOV.UK Verify. That is, admittedly, a bit like saying it's the most coherent Bluetooth marketing platform since 2006. The bar is low. The direction is right.

The question for any UK business evaluating this now is whether to build on the government's emerging infrastructure or bolt on a certified private-sector DVS provider and stay nimble. For most businesses, the answer is the latter. The September accreditation deadline is real. The October code of practice change is real. The £60,000 per worker penalty is very real.

The People's Panel closes today. The recommendations will land, be noted, and probably change little. The Trust Framework is live. The wallet is being tested. The agentic compliance layer is being funded.

Somewhere in a government meeting room, someone is already planning Verify 2.0. Let's hope the builders this time have actually tried to hire someone before.