What is the Trust Framework?
The Digital Identity and Attributes Trust Framework is a set of rules and standards designed to establish trust in digital identity products in the UK. Organizations that undertake formal assessment can gain a trustmark (certification) to show they can handle people’s identity data in a safe and consistent way. The Framework currently offers use cases in just three market sectors: Right to Work, Right to Rent, and DBS (Disclosure and Barring Service; Criminal Background Check).
What is the process of the Trust Framework Certification?
As part of the accreditation, digital identity service providers (IDSPs) are tested on the following:
- How IDSPs handle and protect people’s data
- Which security and encryption standards IDSPs followed
- How IDSPs’ user accounts are managed
- Steps IDSPs take to protect against fraud and misuse
- How IDSPs manage complaints and disputes
Which industries are entitled to apply for a Trust Framework Certification?
The Framework currently offers use cases in just three market sectors: Right to Work, Right to Rent, and DBS (Disclosure and Barring Service; Criminal Background Check). However, there are likely to be waves of new use cases in the travel, hospitality, gambling, and banking sector in the future.
Is the Digital Identity and Attributes Trust Framework compulsory for organizations to undertake?
As of October 2022, the UK government appears to be merely encouraging businesses to implement accredited digital verification solutions by sharing the potential business and customer benefits.
For example, the Home Office is only recommending that landlords, their agents, and/or employers use a Framework-certified identity service provider for Right to Work and Right to Rent checks. DBS checks, however, are required to be undertaken by accredited identity service providers.
It is worth noting, however, that based upon outcomes and further legislation, government recommendations could very well turn into government requirements.
