Notifications
Clear all
Topic starter
01/08/2026 10:43 pm
TL;DR: UK digital ID policy, age assurance enforcement, and reusable credential adoption are moving identity verification from niche implementation to mainstream governance, according to Yoti. The key issue is not just privacy preserving design, but who controls credential portability, interoperability, and lifecycle trust across public and private ecosystems.
NHIMG editorial — based on content published by Yoti: Digital ID enters the legislative mainstream and age assurance accelerates
By the numbers:
- Yoti has now completed over 8 million age checks globally and is on track to complete over 400 million age checks in 2026.
Questions worth separating out
Q: How should organisations govern reusable digital ID credentials across multiple wallets?
A: They should define trust rules for each wallet, verifier, and certification path before deployment.
Q: Why does privacy-preserving age assurance still need strong identity governance?
A: Because privacy-preserving design reduces data exposure, but it does not remove the need to govern biometric binding, device trust, and credential acceptance.
Q: What should IAM teams decide before allowing digital ID into customer journeys?
A: They should decide which journeys can rely on digital ID, what level of assurance each journey requires, and when a fallback method is mandatory.
Practitioner guidance
- Map your accepting parties and trust boundaries Document which services will accept digital ID, which wallet types they will trust, and what certification evidence is required before a credential is accepted.
- Separate privacy review from assurance review Assess whether biometric binding, liveness, and presentation rules actually satisfy your assurance requirements instead of treating privacy-preserving design as proof of strength.
- Define revocation and re-verification triggers Set rules for when a reused credential must be checked again, especially if device changes, wallet changes, or policy changes affect the original trust decision.
What's in the full article
Yoti's full article covers the operational detail this post intentionally leaves for the source:
- How the ID Checker app handles certified Digital Verification Services age credentials in practice
- The exact user journey for liveness, selfie authentication, and Bluetooth transfer on device
- The adoption numbers behind Yoti app growth, including weekly age checks and UK downloads
- The business case Yoti makes for privacy-preserving age checks in shops and self-checkouts
👉 Read Yoti's analysis of digital ID legislation and age assurance adoption →
Digital ID adoption and age assurance: what changes for IAM teams?
Explore further
01/08/2026 10:53 pm
Digital ID is now an identity governance programme, not a niche verification feature. Once age and identity credentials are reusable across public services and the wider economy, the governing question becomes who can issue, present, verify, and revoke them. That moves the topic from point solution selection into lifecycle and trust orchestration, which is where IAM teams already manage risk across users, apps, and entitlements. Practitioners should treat digital ID as part of the identity stack, not a separate policy debate.
A question worth separating out:
Q: How do organisations avoid fragmentation in digital identity ecosystems?
A: By establishing common certification, verifier eligibility, and lifecycle rules across public and private wallets. Fragmentation appears when each participant defines trust differently, which weakens portability and makes identity assurance harder to operationalise at scale.
👉 Read our full editorial: Digital ID mainstreaming is reshaping identity verification governance
