Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, what assessment she has made of the potential impact of the use of biometric data by private contractors such as Yoti in publicly accessible digital identity systems on levels of public safety.

The government considered the potential public safety implications of digital identity services, including the use of biometric data, when developing the Digital Verification Services (DVS) trust framework. The trust framework – developed by the Office for Digital Identities and Attributes (OfDIA), a part of the Department for Science, Innovation and Technology (DSIT) - sets out requirements governing the provision of digital identity services.

The trust framework sets out rules covering roles, principles, policies, procedures and standards and legislation covering areas such as security, privacy, fraud prevention, governance and reliability. These requirements are intended to support safe and trustworthy provision of digital identity services.

Where a certified service uses biometric technologies, the trust framework includes specific requirements relating to the performance and security of those technologies. Providers are required to test biometric systems against recognised industry standards, to help ensure they are accurate, secure and inclusive.

The trust framework does not replace or supplement existing legal obligations relating to data protection. Service providers are required to comply with the data protection legislation when processing personal data.

Companies who wish to be included in the government’s online register of digital identity and attribute services must have their services independently audited and certified against the trust framework by accredited certification bodies. Yoti has services certified against the trust framework, and recorded on the online register. Certification does not constitute a government endorsement of any particular company or service. However, the trust framework and its certification regime help to provide assurance that certified services meet the government’s standards for security and reliability.