The United Kingdom has released the final pre-legislative version of its Gamma (0.4) Digital Identity and Attributes Trust Framework on GOV.UK, introducing updated standards for digital identity verification services. Published on June 26, 2025, the framework sets new rules for providers delivering identity checks in areas such as right to work, right to rent, and Disclosure and Barring Service (DBS) applications.
From July 1, 2025, the Gamma framework will serve as the basis for certification of digital verification services (DVS) seeking official government recognition. Providers already certified under the previous Beta (0.3) framework are required to transition to Gamma compliance by March 31, 2026, either through routine surveillance audits or by opting for earlier recertification. Beta certifications remain valid until the end of the transition period.
Key Updates in the Gamma Framework
The new framework introduces separate supplementary codes for specific use cases, which were previously issued as standalone guidance from the Home Office and DBS. These codes define the technical and security requirements for identity verification based on the type of check being performed. For DBS checks, for instance, the supplementary code mandates that basic background checks require identity proofing at GPG 45 medium or higher confidence levels, while standard and enhanced checks demand high or very high levels of confidence, according to GOV.UK guidance.
The framework is part of the UK government’s broader push to modernize digital identity services, aligning with programs such as GOV.UK One Login. It also supports ongoing efforts to improve transparency and oversight of digital identity providers. The Office for Digital Identity and Attributes (OfDIA) has enhanced public visibility into certification status by updating the digital identity services register on GOV.UK, which entered public beta in April 2025.
Certification and Legislative Path Ahead
Under the Gamma framework, service providers must work with UKAS-accredited Conformity Assessment Bodies (CABs) to achieve certification. New entrants into the market will undergo full assessments to meet Gamma standards, while providers already certified under the Beta framework can follow an uplift pathway to maintain their listing on the DVS Register.
Although the Gamma (0.4) framework represents the most advanced iteration of the UK’s digital identity rules to date, it remains pre-legislative and serves as a release candidate ahead of formal legislation that will eventually establish a statutory v1.0 baseline. This means that while the framework sets strong standards, full legal enforceability will come once Parliament enacts the supporting legislation.
The broader context for these changes includes the UK government’s plans for further digital transformation across public services. The Disclosure and Barring Service’s 2025-2028 strategy explicitly aims for “end-to-end digital transformation of services by 2028,” highlighting how identity verification remains central to modernizing service delivery.
Sources: IdentityWeek, Enabling Digital Identity Blog
–
By Cass Kennedy
