Notifications
Clear all
Topic starter
01/08/2026 10:47 pm
TL;DR: Reusable digital IDs are increasingly used for UK right to work and DBS checks, with Yoti reporting 254,200 checks in March 2026 and annualised volume reaching about 3 million, while reuse, biometric binding, and privacy-preserving design are reshaping how identity is verified across employment, age assurance, and AML use cases. The governance challenge is no longer whether digital ID works, but whether relying parties can verify the right person without creating surveillance, weak binding, or inconsistent assurance.
NHIMG editorial — based on content published by Yoti: expanding digital IDs across UK employment checks, DBS, and age assurance
By the numbers:
- In March 2026, Yoti completed 254,200 right to work and DBS checks.
- In 2024-2025, the DBS reported that it issued over 7.3 million DBS certificates.
Questions worth separating out
Q: How should organisations govern reusable digital IDs in regulated checks?
A: Organisations should treat reusable digital IDs as governed assurance artifacts, not as generic convenience tools.
Q: Why do weak biometric controls create identity assurance risk?
A: Weak biometric controls create risk because they can prove device access without proving the enrolled person is the one presenting the credential.
Q: What do security teams get wrong about privacy-preserving identity?
A: They treat privacy as a user-experience layer instead of a core architectural constraint.
Practitioner guidance
- Map assurance levels to each verification use case Define separate assurance thresholds for right to work, DBS, age assurance, and AML flows.
- Validate biometric binding before accepting reusable credentials Test whether the wallet or app enforces unique biometric binding and whether it resists photo, screen, injected image, and device-sharing attacks.
- Minimise shared identity data at the relying party Design the verification flow so the business receives only the attribute needed, such as over-18 status or right-to-work confirmation.
What's in the full article
Yoti's full blog post covers the operational detail this post intentionally leaves for the source:
- How the UK right to work and DBS digital check workflow is being applied in practice across employers and relying parties
- The role of reusable certified digital IDs in reducing repeated proofing steps and supporting higher-volume verification
- How biometric binding, liveness detection, and recovery controls are used to protect identity presentation flows
- Why the article argues that privacy-preserving proof of age can still remain fully digital rather than falling back to analogue checks
UK digital ID checks: what it means for identity governance?
Explore further
01/08/2026 10:56 pm
Reusable identity is becoming a governance pattern, not just a user convenience feature. The article shows that digital ID reuse is expanding across employment, DBS, age assurance, and AML checks. That means identity teams must evaluate issuer trust, presentation freshness, and relying-party assurance together. In practice, reusable credentials need lifecycle governance comparable to other high-value identity artifacts.
A question worth separating out:
Q: Who should be accountable when digital identity verification fails in a payment or signing process?
A: Accountability should sit with the business owner of the transaction process, the identity team responsible for assurance policy, and the compliance function that defines evidentiary requirements. If payments, approvals or signatures fail, the issue is usually shared control design rather than a single tool failure. Clear ownership prevents gaps between fraud, IAM and legal teams.
👉 Read our full editorial: UK digital ID checks are reshaping identity assurance and privacy
