TL;DR: UK digital ID policy, age assurance enforcement, and reusable credential adoption are moving identity verification from niche implementation to mainstream governance, according to Yoti. The key issue is not just privacy preserving design, but who controls credential portability, interoperability, and lifecycle trust across public and private ecosystems.
Editorial analysis by NHI Mgmt Group, based on content published by Yoti: “Thoughts from our CEO: New UK legislation and Yoti milestones”.
By the numbers:
- Yoti says it has completed over 8 million age checks globally and is on track to complete over 400 million age checks in 2026.
- Yoti says that when a threshold of 21 years is used, over 95% of the world’s adults can prove they are over 18, while less than 1% of those aged 14 to 17 pass for 21.
Key questions
Q: How should organisations govern reusable digital identity across multiple services?
A: Treat reusable digital identity as a governed trust decision, not a convenience feature.
Q: Why do digital ID wallets create interoperability risk for IAM teams?
A: Because interoperability is not only a technical format question.
Q: What is the biggest governance gap in privacy-preserving age assurance?
A: The gap is often verifier policy, not the age check itself.
Practitioner guidance
- Define wallet acceptance policy Specify which certified digital ID wallets, issuers, and credential types your organisation will accept in identity and age assurance journeys.
- Separate disclosure from verification Require the minimum credential needed for the transaction and document what the verifier is allowed to see, store, and audit.
- Set lifecycle rules for reusable credentials Write issuance, revocation, and offboarding rules for credentials that may be reused across multiple relying parties and channels.
Bottom line: Digital ID adoption is turning identity verification into a governance problem about portability, assurance, and ecosystem control.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Digital ID mainstreaming turns identity verification into ecosystem governance: Once credentials move across public services, private wallets, and merchant checkouts, the control surface is no longer a single app or a single verifier. The hard problem becomes who sets the acceptance boundary, how portability is certified, and which trust decisions remain consistent across channels. Practitioners should treat this as an identity ecosystem design issue, not a user-interface upgrade.
A question worth separating out:
Q: Should identity teams treat digital ID as a policy issue or an IAM issue?
A: Both. Policy determines where digital ID is mandated or allowed, while IAM determines how credentials are issued, bound, accepted, and retired. If teams only focus on legislation, they miss the operational controls that make the trust model work in practice.
👉 Read our full editorial: Digital ID mainstreaming is reshaping identity verification governance