Commenting on the Committee’s findings on digital identity, Derek Gordon, VP, Identity & Access Management Practice at NCC Group, said:
“The Committee’s findings underline a critical point: digital identity adoption depends on trust being earned, not imposed.
“Digital identity systems can deliver real benefits for citizens and businesses alike, including more secure and efficient verification, but only if security, privacy and transparency are embedded from the outset. Public confidence is difficult to build and easy to lose, particularly where people are unclear about how their data will be used, protected and governed over time.
"The focus now should be on a phased, secure-by-design approach that combines strong technical safeguards with clear oversight, ongoing assurance and meaningful public engagement. That includes ensuring systems are resilient against evolving threats such as fraud, API abuse and biometric spoofing, while also making sure digital identity remains inclusive and accessible for those who cannot follow standard digital routes.
“The UK has the opportunity to build a trusted digital identity ecosystem that improves verification while reducing fraud and unnecessary data exposure, but success will depend on getting the implementation, governance and user trust right from the beginning.”
