Digital ID

Baroness Finn Excerpts

Monday 19th January 2026 Lords Chamber

We will be consulting imminently, in a range of ways, on how we design this scheme. We want to hear from people, businesses and stakeholder groups across the United Kingdom about what approach works for them. A new digital ID will put power back in people’s hands, helping to make services more personal, joined-up and effective, and ensuring that everyone can access the support that they need, when they need it. I am proud that this Labour Government are building this vital public infrastructure to make government work better for everyone”.

[Baroness Finn (Con)]

My Lords, following yet another U-turn from this Government, I—and, I am sure, other noble Lords—have a number of questions. First, can the Minister tell the House the Government’s current projected cost of this digital ID programme and whether the £1.8 billion figure previously cited remains the Government’s own estimate? Can he also tell us how many public services now require citizens to use GOV.UK One Login as a mandatory gateway, rather than as an option? Which of those services are legally required to operate only with the DIATF-compliant identity assurance? How many of the National Cyber Security Centre’s 39 cyber assessment framework outcomes does One Login currently meet, and which does it not? What whistleblowing concerns have been raised since 2022 about security clearances, administrator access, overseas development and undetected red team intrusions? What security incidents have occurred, and has any personal data been compromised?

[The Deputy Leader of the House of Lords (Lord Collins of Highbury) (Lab)]

I thank the noble Baroness for those questions. On costs, the Government do not recognise what the OBR reported as an accurate cost for the programme, because the scope of the scheme, and therefore its cost, has not yet been decided. The design and delivery will be subject to a public consultation, following which we will have a clearer idea.

The noble Baroness asked about the GOV.UK One Login, a subject she has previously raised with my noble friend. It follows the high standards of security for government and private sector services, and about 9 million to 10 million people have been using it. The programme adheres to the National Cyber Security Centre’s advice to ensure that its data is protected, fraud is detected and threats are monitored and responded to. More specifically, we are aware—I think this is the point that the noble Baroness is making—that the nature of cyber threats is changing and that there is an increase in the number of attacks against the United Kingdom. The Government are committed to improving resilience among operators of essential services, including through legislation currently before the Commons that will update the UK’s regulatory framework.