The UK authorities’s plan to launch a compulsory digital ID card has been thrown into disarray after whistleblowers raised ‘excessive’ considerations about knowledge safety.
Chatting with ITV News, two senior civil servants, who requested their identities be withheld, warned the outlet that the plans might result in “the worst knowledge breach in UK authorities historical past.”
The brand new investigation pertains to the federal government’s One Login expertise, a system already utilized by tens of millions of individuals for presidency companies and understood to kind the foundations of the incoming Digital ID.
In response to the whistleblowers, One Login failed to satisfy primary cybersecurity requirements and folks with out the mandatory clearance have been capable of entry the inside workings of the system.
Among the many considerations raised to ITV Information by the whistleblowers have been additional points about directors utilizing insecure gadgets, which may very well be weak to hackers.
Sources additionally claimed that safety flaws have been found throughout assessments earlier this yr that exposed the system has the potential to be compromised.
“The vulnerabilities are normal issues it’s essential to not do, however they’ve been carried out,” stated the whistleblower to ITV Information.
They added: “It will not take any artistic considering for a state actor or organised crime to focus on the vulnerabilities in digital id.”
The Normal has approached the UK authorities for additional touch upon the discoveries, however a UK Authorities spokesperson instructed ITV in an announcement: “Defending person knowledge and the integrity of presidency methods is at all times our highest precedence.
“We work constantly to observe, and defend towards, all threats, and work carefully with the Nationwide Cyber Safety Centre which offers recommendation to the programme on a wider vary of cyber safety issues.”
The digital ID proposal is a part of Sir Keir Starmer’s wider plan, unveiled in September 2025, to require digital ID for eligibility to work and to modernise public service transactions.
That is additionally not the primary time that safety points have been raised relating to the chance of malevolent hackers. In October, Conservative MP David Davis told a Parliamentary Debate: “this will likely be worse than the Horizon [Post Office] scandal.”
Right here’s what we all know in regards to the digital ID proposals.
What’s the UK digital ID card?
The prime minister defined that the rollout of digital ID, referred to as the ‘Brit Card’, will assist residents show their authorized proper to stay and work within the UK.
Set to be rolled out earlier than the tip of this Labour government, individuals will likely be required to point out their Brit Card when making use of for housing or once they land a brand new job.
The Tony Blair Institute has touted the brand new digital playing cards as a approach to “shut loopholes that trafficking gangs and unscrupulous employers at present exploit, lowering pull elements driving unlawful migration to Britain and restoring management over borders.”
Blair’s authorities had initially proposed digital ID playing cards, however the coverage was shelved earlier than being not too long ago revived by Starmer, who claims this can counter unlawful migration.
Talking in regards to the information, Starmer stated: “I do know working individuals are fearful in regards to the degree of unlawful migration into this nation. A safe border and managed migration are cheap calls for, and this authorities is listening and delivering.
“Digital ID is a gigantic alternative for the UK. It’ll make it more durable to work illegally on this nation, making our borders safer.
“And it’ll additionally provide extraordinary residents numerous advantages, like having the ability to show your id to entry key companies swiftly – fairly than looking round for an previous utility invoice.”
It’s understood that the ID card will function via One Login expertise, which some individuals are already utilizing to retailer a digital Veteran Card. The login can also be used to handle pensions and a few passport companies.
Prime Minister Sir Keir Starmer says digital ID playing cards will present an ‘monumental alternative’ for the UK (Alamy/PA)
Why is Labour introducing digital ID within the UK?
In response to Labour Collectively, the Brit Card needs to be seen as residents as “proof that they belong.”
The report says, “it could assist higher enforcement of migration guidelines, and shield weak British residents from being wrongly denied their rights.
“It might finish id exclusion, resolving uncertainty and threat for these whose standing is unsure, and offering a fast, safe, privacy-preserving means for everybody to confirm their id and their migration standing when coping with authorities, when taking over a brand new job, or taking up property.”
A number of studies are saying this might assist curb unlawful migration, but it surely’s value noting that it’s not illegal for individuals to request asylum once they come to the UK.
Given that may solely declare asylum if you set foot on UK shores, it’s unlikely that this digital card will deter individuals from coming to the UK within the first place.
It could make it tougher for individuals whose asylum requests have been denied to remain within the UK, but it surely additionally could not deter employers who rent workers members and pay them off the books.
Regardless of this, some Brits seem open to the concept of getting digital ID playing cards.
Who wants the digital ID card?
In response to studies, each working grownup within the UK will likely be required to have a government-issued digital ID card.
It doesn’t matter if you happen to’re born within the UK or abroad, and it’ll be free to all adults eligible to stay and work within the UK.
It’ll doubtless take a while earlier than issues are enacted, but it surely’s at present understood that the Brit Card will likely be made accessible by way of the Gov.uk One Login app.
In response to Labour Right this moment, the rollout might price anyplace between £140m and £400m in taxpayer funds.
We will assume it could most likely work equally to how the NHS COVID app labored, which is downloaded onto smartphones and verified by employers and landlords via an app.
Preliminary imagery shared by Labour Right this moment exhibits an interface that options an individual’s {photograph} alongside approvals confirming “proper to work” and “proper to hire”.
What occurs if you happen to don’t get one?
Presently, there are lots of questions on how this may work in follow.
We don’t know the ultimate particulars but however, there are quite a few loopholes that the federal government might want to handle.
For instance, not everybody has a smartphone within the first place, or is assured in utilizing digital expertise, significantly in the event that they’re aged or disabled.
And what if an individual’s telephone is damaged and even stolen, and they should present a landlord the app, or else they received’t be capable to transfer right into a property on time?
These considerations could result in two-tier entry, the place individuals with professional rights to stay and work within the UK face further challenges, discrimination or allegations that they ‘don’t belong’.
Labour Collectively says it’s essential to “guarantee accessibility for these with low digital abilities and non-smartphone homeowners, together with the availability of in-person assist channels.” However various options like printable QR codes or on-line portals may very well be clunky and counter the purpose of going digital within the first place.
It’s additionally unclear at this level whether or not there could be penalties for not getting a digital ID card or whether or not it’s possible you’ll be refused entry to companies similar to healthcare.
There may be additionally the broader concern about knowledge safety, and at present, there is no such thing as a clear plan in place relating to the consent individuals might have to offer to entry these ID playing cards.
In response to Large Brother Watch: “This method would essentially change the character of our relationship with the state and switch the UK right into a “papers, please” society.”
The organisation additionally factors out that there is no such thing as a clear mandate for such a scheme, and it’s “inconsistent with the values that underpin a free society and poses critical dangers to privateness, safety and equality.”
International locations which have digital ID playing cards
Obligatory ID methods, the place people are required to have a bodily ID card, are comparatively widespread world wide.
Digital variations of this haven’t been extensively rolled out, however international locations are engaged on ID methods that do have digital capabilities.
Ought to the digital ID plan proceed, the UK would be a part of a handful of different international locations that have already got one thing related in place.
In Estonia, it’s obligatory to carry a bodily ID, however this additionally doubles as a digital ID, the place everybody can entry on-line companies too.
It’s additionally a reasonably strong programme of identification, with varied playing cards in place that enable customers to verify their id, their transactions, and share digital signatures.
In response to the UK gov, Estonia’s “digital ID has revolutionised dad and mom’ lives by enabling entry to baby advantages, well being information and functions for nursery locations seamlessly, by no means having to offer the identical data twice.”
One other nation that seems to have a digital ID system is Ethiopia, the place the Fayda system serves as a digital biometric identification system.
You really want this digital ID to open a checking account in Ethiopia, however it’s nonetheless being rolled out throughout the nation.
