Blog



CMS.DataEngine.CollectionPropertyWrapper`1[CMS.DataEngine.BaseInfo]
Profile Image Verifile
October 21, 2025
Blog Article Image

Legislation in Focus: UK Digital ID (BritCard) and Right to Work Checks

Overview

The UK Government has confirmed a state-issued digital ID that will become mandatory for Right to Work checks by the end of this Parliament. Ministers say a public consultation will open this year, with legislation to follow. The ID will be free, phone-based, and the Government says there will be inclusive alternatives for people without smartphones. The programme sits alongside the GOV.UK Wallet work to make official credentials available digitally (for example, a digital driving licence).

What’s proposed

The digital ID is expected to hold core identity and immigration-status data (name, date of birth, nationality or residency status, and a photograph). For employers, the key change is that proof of Right to Work will need to be provided using the digital ID by 2029. Officials have also indicated it is not an on-demand “show me your papers” system: the mandate is about the way Right to Work is proven, not about carrying ID.

Beyond Right to Work: DBS and wider background checking

Digital identity is already permitted for DBS checks via certified providers under the UK trust framework. As a government digital ID rolls out, expect convergence so a government-issued credential can satisfy the identity step across DBS levels where digital identity is permitted, while conviction content and barred-list decisions remain handled by DBS under existing law.

Other screening touchpoints are likely to follow similar patterns over time (for example, Right to Rent or age-based entitlements), but those depend on future policy decisions and published guidance. At present, the only confirmed mandate is Right to Work by 2029.

What doesn’t change for now

Until the new law and processes go live, employers must keep using the existing Right to Work routes to maintain a statutory excuse: manual document checks where permitted; the Home Office online share-code route for those with an eVisa or online status; and digital checks using a certified provider for British and Irish passport holders. Civil penalties remain up to £45,000 per illegal worker for a first breach and up to £60,000 for repeat breaches (in force since February 2024).

Where IDSPs fit

The UK Digital Identity and Attributes Trust Framework underpins certified providers and the public register of services. Current government messaging and technical work point toward interoperability with that framework rather than an overnight replacement. For employers and screening providers, the practical questions are how the new credential will be presented, verified and evidenced so that the statutory excuse (or DBS compliance) is preserved, and how inclusive fallbacks work for candidates who cannot use smartphones.

Blog-1.png
Timeline

  • 2025 - Government says consultation opens this year; details such as user flows, evidence output, offline and assisted routes will be shaped here.
  • 2026 (expected) - Legislation after consultation, subject to parliamentary time.
  • By 2029 - Digital ID mandatory for Right to Work; transitional rules will manage the switch-over.

Sector angles worth watching

  • Recruitment and staffing: high-volume onboarding stands to gain from standardised checks, but assisted and offline options will be critical to avoid excluding candidates during peak hiring.
  • Health, education and regulated roles: digital ID needs to dovetail with DBS/PVG so identity, status and safeguarding checks remain seamless.
  • Hospitality, agriculture and logistics: seasonal and shift-based workforces need low-friction flows plus reliable fallbacks to avoid delays.

Risks and the public debate

Ministers present digital ID as a way to curb illegal working, reduce forged documents and modernise services. Opposition has also grown: a petition has passed 2.8 million signatures; critics raise privacy and exclusion risks; industry warns digital ID alone is not a “silver bullet” without stronger enforcement. Devolved-nation dynamics matter too: Scotland is scaling ScotAccount and its First Minister has opposed a mandatory UK-wide scheme, so interoperability and policy alignment will be live issues through consultation.

Blog-2.png
Open questions to watch

  • What is the “evidence of a valid check” under the new model (and how is it stored)?
  • How will offline/assisted routes work for people without smartphones, and who can provide them?
  • How will devolved services (e.g., ScotAccount) interoperate with a UK-wide Right to Work requirement?
  • Will Government preserve open participation by private-sector IDSPs, or centralise checks entirely? (Industry groups caution against a single-channel model.)

Global perspective: how other digital ID systems compare

What tends to work

Countries that get digital ID right usually combine a single, authoritative credential with real-world convenience (multiple ways to prove identity, not just a smartphone), clear and limited data sharing, and an open ecosystem so government and trusted private providers can both participate. Inclusive design and assisted, offline routes are essential to prevent exclusion.

Snapshot examples

Estonia
A long-running model built on a state
e-ID card with mobile options (Mobile-ID, Smart-ID). It underpins everyday services and legally robust digital signatures. Choice of channels and strong public trust have produced high adoption. The UK proposal is initially phone-centric for Right to Work, but the Government has promised inclusive alternatives; Estonia shows why those alternatives matter.

Singapore
Singpass is deeply embedded across government and business services, with high usage and a wide relying-party network. The lesson is clarity of use cases and tight integration with both public and private sectors.

European Union
The EU is rolling out an EU Digital Identity Wallet under the updated eIDAS Regulation. It emphasises cross-border acceptance and privacy-preserving credential sharing (e.g., showing only what’s necessary). Compared with the UK, the EU model focuses on a wallet standard used across many countries, not a single national credential.

Switzerland
After rejecting a privately run scheme in 2021, voters narrowly approved a voluntary, state-run e-ID in 2025. Switzerland’s emphasis is on public trust and voluntariness, whereas the UK intends to mandate digital ID specifically for proving Right to Work by 2029.
eid.admin.ch

Belgium and the Netherlands
Belgium’s “itsme” app (operated under national trust rules) and the Netherlands’ DigiD show how strong adoption follows when digital ID becomes the simplest way to reach many services, without forcing a single technology path. These also illustrate the value of keeping private-sector participation open.

Germany
Germany’s national eID has existed for years but activation has lagged, with research citing complex setup and limited everyday use. The main takeaway is that user experience and breadth of services determine whether people actually switch.

India
Aadhaar is the world’s largest digital ID. It delivers massive volumes of authentication for public and private services, but court rulings set limits (especially for private-sector mandating), and civil-society groups continue to highlight risks of exclusion and the need for redress. The UK can borrow the scale lessons while avoiding the pitfalls by designing strong safeguards and assisted routes.

United Arab Emirates
Emirates ID is a mandatory, universal card used across government and private services. It shows the efficiency of a single, authoritative credential but it’s a different policy choice from the UK’s “mandatory for Right to Work, with alternatives and no on-demand carry requirement.”

Blog-3.png
What this means for the UK proposal

  • Mandate scope: the UK is proposing a mandate for Right to Work by 2029, not a general “show on demand” ID.
  • Inclusion: successful programmes keep assisted and offline channels first-class; UK policy says alternatives will exist but these must be designed well.
  • Ecosystem: the trust-framework/IDSP world you use today should interoperate with a government credential; countries with open ecosystems see faster adoption.
  • Privacy by design: selective disclosure and clear evidence outputs help employers stay compliant while minimising data handling.
  • User experience: activation and day-one usefulness drive uptake. Germany’s experience shows the cost of friction, while Singapore/Estonia show the benefit of convenience.

Practical actions for employers now

  1. Map your current Right to Work journey (manual, online/share-code, IDSP) and note pain points and fraud controls; this will inform your consultation response and transition plan.
  2. Speak to your IDSP about integration with a government digital ID, assurance levels, evidence outputs (to retain a statutory excuse), and inclusive fallback routes.
  3. Build inclusion into your process. Plan assisted channels and non-smartphone flows to avoid discrimination and unintended exclusion as the system phases in.
  4. Align your DBS identity-check procedures to the 2025 guidance and track how a government credential could satisfy the identity step where permitted.
  5. Refresh DPIAs and retention schedules. Even if wallet-based credentials reduce the documents you hold, robust audit trails of checks remain essential.

Naming note

Government material refers to a “digital ID” and to GOV.UK Wallet; “BritCard” is a media nickname in current reporting rather than an official product name.

Read More
CMS.DataEngine.CollectionPropertyWrapper`1[CMS.DataEngine.BaseInfo]
Profile Image Verifile
October 21, 2025
Blog Article Image

Verification Chronicles – The Supermarket Slip-up

Let’s be honest: applying for a job is not the most thrilling of tasks. It might start with a CV and a cover letter, or perhaps a long-winded application form, wading through question after question, designed to capture seemingly “boring” or “bland” routine information such as the applicant’s name, address, and what their passport number is.

Yet, for the employer, this process is essential. Beyond the routine details, the application process also serves as the first opportunity to catch or filter out any potential risky hires, or to assess at the earliest possible stage whether to progress an application forward or not. If the decision is made not to proceed there and then, it saves time for both the applicant and the employer, and both parties continue on their separate ways.

But what happens when a serious applicant declaration slips through the net?

This instalment of the Verification Chronicles shares a rather unbelievable recent case we encountered where failures within the hiring process, coupled with an unfortunate and rare accuracy lapse at the data source’s end, led to a convicted sex offender being employed as a supermarket delivery driver.

We’ll call him Alex.

Blog-1-1.png
He’d applied for a job as a supermarket delivery driver. The kind of everyday role that keeps people’s groceries, and lives, moving. His application form was ordinary enough: name, address, contact details, and that familiar question about criminal convictions. To his credit, Alex ticked yes. He had a record. And he said so.

That honesty should have been the very thing to pause the process. Yet, somewhere between form and follow-up, it wasn’t. The declaration went unnoticed.

So, Alex was invited to interview.

At that stage, another chance presented itself. A chance to ask questions, to discuss the disclosure, to show diligence. But once again, the detail slipped quietly past. Perhaps the interviewer didn’t spot it, perhaps they didn’t know how to handle it. Either way, the conversation moved on, and by the end of it, Alex had been offered the job.

By late March 2025, the supermarket had gone through what most would consider a solid vetting process. A basic criminal record check was submitted, and the result returned clear. A neat green traffic-light symbol on the report – one of thousands we see every week – confirming there were no convictions held on record.

That was that. Or so it seemed.

A few months later, the client came back to us. Alarmed, confused, and searching for answers.

They’d just discovered that Alex was, in fact, a convicted sex offender, serving a suspended sentence, and listed on the Sex Offenders Register. Understandably, they couldn’t reconcile that with the clear DBS result they’d received only weeks earlier. Something didn’t add up.

We investigated immediately. The DBS confirmed that Alex had indeed been convicted the previous October, but the conviction hadn’t been entered onto the Police National Computer (PNC) until May 2025. That’s seven months later.

Convictions are added to the PNC as they are reported by the courts. There was no good reason why months passed without Alex’s conviction appearing. Delays like this, though rare, can have serious consequences when roles involve public contact and trust.

When his check was processed in March, the PNC record still hadn’t been updated, meaning the DBS result reflected what the system knew at the time: nothing. The data was clean because the database was late.

Blog-2-1.pngIt’s a rare occurrence, but a sobering one.
Convictions are supposed to be logged promptly by police forces and then uploaded to the PNC so the DBS can reference them. In this case, human error – or administrative delay – caused a serious disconnect. The system did what it was built to do; it’s the data feeding into it that failed.

We rely on source-verified data because it is, ordinarily, the gold standard. Accurate, objective, and trustworthy. But what happens when the source itself falters?

The employer, meanwhile, had done what they believed was right. They’d screened their hire, obtained a clear result, and carried on with business. They could never have known that a gap existed between reality and record. The revelation that followed must have been deeply unsettling: the person driving their customers’ groceries home each day was someone legally barred from contact with children.

It’s an outcome no employer ever expects and one no verification provider ever wants to see.

In reflecting on this case, it’s easy to point fingers. But the truth is more complicated. Mistakes like this often come from several small oversights aligning in the wrong order: a missed declaration, an unchecked interview note, a lagging database entry. Each alone might seem minor; together, they create risk.

Technology can help. Imagine if, when Alex ticked yes to that conviction question, the recruitment platform (ATS) automatically flagged his application for manual review or even locked further progress until someone had verified the detail. A visual red flag, a momentary pause, could have prevented all that followed.

Blog-3-1.pngStories like Alex’s remind us why verification isn’t simply about running checks. It’s about understanding them. We can’t always control the accuracy of every external data source, but we can control how attentively we handle what we see, and how we design systems to catch what humans sometimes miss.

For us, this case reaffirmed what our work stands for: that safeguarding trust requires vigilance at every stage, from the first ticked box to the final hiring decision. Because in our world, even one small oversight can change everything.

We’ve talked in the past about how HR and recruitment teams have a responsibility to champion and promote a culture of compliance, and the importance of quality and accuracy within the hiring process. These attributes should be non-negotiable.

On the other hand, however, stories like this speak to, and reinforce, Verifile’s mission: to make the world a more honest and safer place. Achieving that requires everyone on the HR and recruiting side to play their part, from start to finish.

Read More
CMS.DataEngine.CollectionPropertyWrapper`1[CMS.DataEngine.BaseInfo]
Profile Image Verifile
August 18, 2025
Blog Article Image

The Employee Journey: Values at Every Touchpoint

I’ve been thinking about how our values show up across the entire employee journey at Verifile. It’s one thing to talk about values, but it’s another to make sure they’re present in every interaction and experience. Our five values - Put People First, Be Curious, Own It, Succeed Together, and Delight Your Customer - guide us in how we design every stage of that journey.

Blog-1.pngFor values to really take root, they need to be part of everything we do as people join and grow here. Here’s how we try to make that happen:

Careers Website: We put our values front and centre, so candidates know exactly what we stand for before they apply. It helps ensure alignment right from the start.

Recruitment: We actively look for cultural fit during hiring, making sure candidates share our values and will bring them to life in their roles.

Onboarding and Settling In: New employees learn about our values early on, seeing how they connect to their everyday work and what’s expected.

Performance Coaching: Values are part of our coaching conversations. We talk about how people are living our values, where they’re doing well, and where there’s room to grow.

Learning & Development: We focus on building skills and behaviours that match our values, providing clear guidance on how to succeed while staying true to what matters here.

Benefits & Recognition: Our benefits and recognition programs reflect our values, supporting employees professionally and personally, and celebrating those who truly live our values.

Blog-2.pngProcesses: We’re reviewing every process in the employee lifecycle to consider how the experience reflects our values and where we can do even better.

We know this is an ongoing journey, not something we ever tick off as "done." But by weaving our values into each stage, we’re building a culture that supports our people and helps Verifile grow stronger.

Blog-3.pngBuilding a Resilient, Values-Driven Culture

Company values aren’t just a tick box or engagement tool. They’re the foundation of a resilient, high-performing organisation. By embedding our values in everything we do, we’re building a culture of accountability, trust, and innovation. A culture that supports our people and drives success. We know we’re not perfect and that this is a journey, but we’re committed to learning and improving every step of the way. We’d love to hear how others are making their values real too!

Fiona Buchanan
Chief People Officer

This reflection is part of our ongoing
conversations about living our values at Verifile.

Read More