UK Opens Information Gateway for Private Identity Providers to Verify Against Passport and DVLA Data

The UK’s Office for Digital Identities and Attributes (OfDIA) has detailed a new “information gateway” that will allow certified private-sector identity service providers to verify a person’s identity directly against data held by public authorities, including the Passport Office and DVLA.

The gateway, established under Section 45 of the Data (Use and Access) Act 2025, enables registered Digital Verification Service (DVS) providers to request identity and eligibility verification data from government bodies. The mechanism is designed to support fully digital identity verification without requiring individuals to scan physical documents or present them in person.

Public authorities that could share data through the gateway include the Passport Office, DVLA, benefits authorities, immigration services, and local councils responsible for services such as parking permits and Blue Badges. Authorities retain discretion over whether to share data and may provide it via API, digital credential, or both. They are also permitted to charge for data provision. The data shared is accurate only at the time of the request, and authorities disclaim ongoing responsibility for maintaining its accuracy after transmission.

Privacy safeguards require that data is shared only at the explicit request of the individual to whom it relates. DVS providers must be certified against the UK DVS trust framework and registered on the government’s official DVS register before they can access the gateway. The framework requires certification through UKAS-accredited Conformity Assessment Bodies.

OfDIA is currently surveying registered DVS providers to understand demand for different data types and is developing guidance to help both providers and public authorities understand how the gateway will operate in practice. The gateway power will be commenced once a Code of Practice receives approval from both Houses of Parliament, which OfDIA anticipates will happen later in 2026.

The UK has been building the regulatory infrastructure for private-sector digital identity verification over the past year, including Treasury guidance recognizing DVS for anti-money-laundering compliance and OfDIA’s work on cross-border digital identity standards. The information gateway adds a new channel: direct API access to government-held data for certified providers to use during identity verification.

Sources: OfDIA Enabling Digital Identity Blog, Computer Weekly

–

By Cass Kennedy