John Peart

John works in the Office for Digital Identities and Attributes, leading the Market Oversight and Integrity team.

His team is responsible for building and maintaining the infrastructure that makes it possible to use trusted digital identities in the UK, including the UK digital identity and attributes certification scheme and the GOV.UK register of digital identity and attributes services.

“Must” and “could” in the trust framework and whether the rules apply to your service

John Peart, 3 November 2025 - Certification, Digital identity, UK digital identity and attributes trust framework

If a Part or Section in the trust framework applies to your role, then all of the rules in that Part or Section apply to your service. Your service must conform with all of the “must” rules, and service providers can choose whether or not to implement any “could” rules.

Using data brokers as authoritative sources under GPG 45

John Peart, 10 September 2025 - Digital identity, UK digital identity and attributes trust framework

Digital verification services sometimes want to use “data brokers” for this purpose and we’ve been asked how they should be treated.

You should plan to renew your certification sooner than you think

John Peart, 5 September 2025 - Certification, Digital identity, Register of digital identity and attribute services

You can avoid your service falling off the GOV.UK register by asking your conformity assessment body to complete your recertification process up to 60 days early. You won't lose the remaining time on your current certificate if you do this, and it will help you to avoid any unnecessary disruption.