Digital ID

Lord Collins of Highbury Excerpts

Monday 19th January 2026 Lords Chamber

[Baroness Finn (Con)]

My Lords, following yet another U-turn from this Government, I—and, I am sure, other noble Lords—have a number of questions. First, can the Minister tell the House the Government’s current projected cost of this digital ID programme and whether the £1.8 billion figure previously cited remains the Government’s own estimate? Can he also tell us how many public services now require citizens to use GOV.UK One Login as a mandatory gateway, rather than as an option? Which of those services are legally required to operate only with the DIATF-compliant identity assurance? How many of the National Cyber Security Centre’s 39 cyber assessment framework outcomes does One Login currently meet, and which does it not? What whistleblowing concerns have been raised since 2022 about security clearances, administrator access, overseas development and undetected red team intrusions? What security incidents have occurred, and has any personal data been compromised?

[The Deputy Leader of the House of Lords (Lord Collins of Highbury) (Lab)]

I thank the noble Baroness for those questions. On costs, the Government do not recognise what the OBR reported as an accurate cost for the programme, because the scope of the scheme, and therefore its cost, has not yet been decided. The design and delivery will be subject to a public consultation, following which we will have a clearer idea.

The noble Baroness asked about the GOV.UK One Login, a subject she has previously raised with my noble friend. It follows the high standards of security for government and private sector services, and about 9 million to 10 million people have been using it. The programme adheres to the National Cyber Security Centre’s advice to ensure that its data is protected, fraud is detected and threats are monitored and responded to. More specifically, we are aware—I think this is the point that the noble Baroness is making—that the nature of cyber threats is changing and that there is an increase in the number of attacks against the United Kingdom. The Government are committed to improving resilience among operators of essential services, including through legislation currently before the Commons that will update the UK’s regulatory framework.

[Lord Clement-Jones (LD)]

My Lords, the Liberal Democrats strongly opposed the previous proposal as a serious threat to privacy, civil liberties and social inclusion, so we welcome the Prime Minister’s U-turn in saying that digital ID, after all, will be voluntary. Can the Minister therefore confirm that no citizen will face any disadvantage, delay or reduced access to public services if they choose not to adopt it? Further, given that GOV.UK, which is the foundation of this system, has met only 21 of the 39 NCSC cyber assessment framework outcomes—the noble Baroness referred to that, and I was assured by Ministers that the outcomes will be met by this April—will the Minister halt expansion until independent assurance confirms that it meets all mandatory security standards?

[Lord Collins of Highbury (Lab)]

I do not want to repeat what I said to the noble Baroness, but I assure the noble Lord that we are absolutely focused on those standards and on better understanding new threats, which is why legislation is being considered by the other place. After all, we are talking about how people can access government services properly without complicated hurdles to go through constantly. Having one access is important, so the scheme will be available at no cost to the individual and to all British citizens and legal residents from the age of 16, subject to the consultation. It will be introduced after the technical build and primary legislation are delivered in around 2028, and underpinned by robust privacy, resilience and security measures. I stress that all citizens, in time, will be able to get the new digital ID, but it is not compulsory. We will consult on minimum wage.

We are ensuring that it is inclusive and that, whatever the Government do, we maintain inclusivity. Rolling out a free national digital ID will be accompanied by a massive inclusion drive across the United Kingdom. This is an opportunity to empower the vulnerable and the left-behind in our society. Inclusion will be at the heart of the design and delivery, and no one will be disadvantaged as a consequence of the scheme.

[Lord Harper (Con)]

My Lords, the Minister fell into the same trap as his colleague at the other end of the Parliamentary Estate by saying that the digital ID would be free. He may quibble with the OBR’s assessment of a £1.8 billion cost, but it is not going to be free, is it? Why do the Government think that a government-designed ID system is going to be better than just setting some standards and allowing the private sector to provide solutions that people can use instead?

[Lord Collins of Highbury (Lab)]

I repeat that the cost has not been determined yet, because the scope and design of the scheme have not been agreed. That will be subject to consultation. Any cost in this spending review period will be met within existing settlements. The purpose of this scheme is to ensure that all services that the Government provide in the United Kingdom are properly accessible in this new day and age. I do not think that is something we should leave to the private sector. We want to be leading it, so I do not agree with the noble Lord’s assertion.

[Baroness Ludford (LD)]

My Lords, this saga, and particularly reading about the Chief Secretary to the Prime Minister, Darren Jones, in the Times on Saturday, reminds me very much of 20 years ago, when Tony Blair and colleagues tried to introduce an ID card system. The way it was put by Mr Jones was that it is going to offer access to nearly all public services except, crucially, the NHS—that is a big exclusion, so it is not quite as convenient—and that it is a kind of magic bullet that will solve all your problems. It is very reminiscent of what happened 20 years ago. Have the Government learned lessons from that fiasco 20 years ago? Can the Minister assure us that there will not be a centralised database? Actually, he cannot, because there will be a centralised database of everyone’s IDs, which will be a honeypot for cyber criminals.

[Lord Collins of Highbury (Lab)]

The world has moved on from 20 years ago. We are talking about recognising the opportunities that this new age presents for us—certainly in the provision of public services. Darren Jones was absolutely right to focus on that. We are not going to create a central database. There will not be that “honeypot” opportunity, as the noble Baroness put it. We are determined to ensure that those systems can talk and communicate more effectively with each other.

[Lord Brooke of Alverthorpe (Lab)]

My Lords, does my noble friend the Minister not agree that this is a typical example of what is now alleged to be “broken Britain”? We were moving forward in 2010 to deal with the changes that were taking place, and it was abandoned by the alliance. It was thrown out, and here we are again with the same problems facing us. Can he please give us an assurance that what is now before us will be stuck to and will not be withdrawn or watered down?

[Lord Collins of Highbury (Lab)]

I appreciate the comments of my noble friend. We have an absolute determination, and this is what Darren Jones was talking about, to deliver better public services and make them more accessible to all people who have traditionally been excluded and disadvantaged. We are determined to do that. To reassure my noble friend, the whole point is that, fairly soon, we will launch a consultation so that we can hear from all those people who have a concern about public services and how they access them. We are determined to do that, and I am sure that, as a result of that consultation, we will have a better policy and better delivery of public services.