Question to the Cabinet Office:

To ask His Majesty's Government whether they will list the name, origin, and provenance of all data fields provided by the Cabinet Office “Gov.UK One Login” to the current “Basic Criminal Records Check Service” regarding an identity verified by (1) passport, and (2) drivers licence; and how long they retain each field after use.

When a person is seeking to use the ‘Request a Disclosure and Barring Service (DBS) basic check’ service online, they must first prove their identity via the GOV.UK One Login system. Once a user has successfully done so, GOV.UK One Login provides relevant data to DBS to confirm that the user is who they say they are. This data includes:

• full name

• date of birth

• all addresses declared by the user, the dates they lived at each address, and the Unique Property Reference Number(s)

• email address

• phone number (if provided)

• the level of identity confidence the user has reached

• an encrypted security key

Where a user uses a passport to verify their identity:

• passport number, ICAO issuer code, and passport expiry date

Where a user uses a driving licence to verify their identity:

• driving licence number, expiry date, issue number and the organisation that issued the drivers licence

Each of the above fields is currently held in GOV.UK One Login for 6 months.

Only the ‘Request a DBS basic check’ service has access to the user’s data. The service only processes the minimum amount of data required to prove the user’s identity.