UK digital identity and attributes trust framework
Holder service providers must have processes in place to get in touch with users if there’s a change to their account or you’ve received a request to close their account. For gamma (0.4) certification, those processes must be multi-channel.
The United Kingdom Accreditation Service (UKAS) has granted accreditation to Kantara Initiative; making it the first UKAS-accredited conformity assessment body (CAB) certifying under the UK government’s Digital Identity and Attributes Trust Framework.
If a Part or Section in the trust framework applies to your role, then all of the rules in that Part or Section apply to your service. Your service must conform with all of the “must” rules, and service providers can choose whether or not to implement any “could” rules.
Digital verification services sometimes want to use “data brokers” for this purpose and we’ve been asked how they should be treated.
We’ve been asked variously for some kind of document with a gap analysis or assimilation matrix. We don't have one. This is why.
You want to tell people that your service is certified and on the GOV.UK register of digital identity and attribute services. What should you say and what shouldn't you?
This blogpost explains how service providers who are already certified against the trust framework can ‘uplift’ to the new version.
This blogpost explains the new approach to certification of white label services against the gamma (0.4) trust framework.
The final publication of the ‘gamma’ (0.4) UK digital identity and attributes trust framework, and updated supplementary codes are now live on GOV.UK.
We recently launched the second year of the inclusion monitoring report survey for certified digital verification services. It is compulsory for services certified against the UK digital identity and attributes trust framework to complete the survey. The purpose of the …