Fri, 31 Oct 2025

Fri, 31 Oct 2025 Security concerns over system at heart of digital ID

The government is facing questions over whether One Login can be trusted to keep people's personal data secure.

* The system, based on Gov.uk One Login and Gov.uk Wallet, will be mandatory for employment but not for other areas of life.
* More than 12 million people have already signed up to One Login, but concerns have been raised about potential flaws in the design and implementation of the system that could leave it vulnerable to hackers.
* Conservative MP David Davis has called for an "urgent" investigation into the cost of One Login, which he says is certain to rise above the £305m already earmarked for it.
* The National Audit Office has been written to by Davis regarding his concerns about security issues and potential data breaches.
* A whistleblower claims that the government's system does not meet National Cyber Security Centre standards and was breached in a "red team" exercise earlier this year.
* The Department for Science, Innovation and Technology says it is unable to give details of the red team exercise for security reasons but denies claims that its systems were penetrated without detection.
* Liberal Democrat technology spokesman Lord Clement-Jones has questioned whether One Login meets National Cyber Security Centre standards.
* A spokesperson for the DSIT has defended Gov.uk One Login as "continuing to deliver" and said it follows the highest security standards used across government and the private sector.
  >>