GOV.UK Verify (RIP) – "finding the right company to verify you" as at 3 July 2016
Updated 3 January 2017 version now available
"Identity provider"
Experian Digidentity Post Office Verizon Morpho (Safran) Barclays GB Group, also known as CitizenSafe Royal Mail PayPal
Identity assurance service
IDaaS Identity Provider service for Verify Identity Assurance (IDA) Service Universal Identity Service SecureIdentity Identity Assurance and Provisioning service ID3global Service, subject to confirmation also known as CitizenSafe IdP service ?
Service trustworthiness approved by tScheme
Yes Yes No, application lapsed Yes No Yes Yes, but low-grade pass No No, never applied
Recommended by GDS ("likely to be able to verify you", variable)
Yes Yes Yes No No No No No No
Currently registering new users
Yes Yes Yes Yes, after a month off Yes Yes Yes Yes No, pulled out
Service governed by the laws of
England, Scotland, Wales, Northern Ireland The Netherlands England & Wales England & Wales England England & Wales or Scotland or Northern Ireland, as appropriate England or Northern Ireland or Scotland England or Northern Ireland or Scotland ?
Control over personal information, identity assurance principle no.6 (p.3): "I can move / remove my data whenever I want"
We will hold your personal information connected with this website for as long as you have an account with our identity service; and then for a period of no longer than 6 years following the closure of the account Your information will be encrypted and stored in accordance with legal requirements for a period of 7 years for audit purposes. After 7 years the data is permanently removed from our systems. Your information will be retained for audit and record keeping purposes for a period of seven years following the date your account is closed. In the event that you no longer receive services from us and we are required to retain your data for longer, we will retain your data in a manner which will mean we are unable to use it further for this service. Morpho may keep records of your activities for seven (7) years after the date on which your identity account is closed, to handle complaints or disputes that may arise. We are required to keep your data while you are registered with us and for a further period of 7 years after your account is closed or expires, subject to our obligations to comply with the record retention requirements under the Data Protection legislation. ... if you should close Your account then the data retained is for audit purposes only and then for no longer than is necessary for the purposes described in this Privacy Policy and as permitted by the Data Protection Act 1998. If you should close your account, then the data retained is for audit purposes only and then for no longer than is necessary for the purposes described below. ?
Personal information may be stored by the "identity provider"
anywhere, unspecified, "we endeavor to take all reasonable steps to protect your personal data" … in accordance with the Dutch Personal Data Protection Act and the UK Data Protection Act inside the EEA outside the EEA outside the EEA but only in compliance with the Data Protection Act outside the EEA inside the EEA inside the EEA ?
Personal information collected may include
your name, date of birth, address and email address, plus other information depending on the details that you choose to enter Name, forename and middle name, Title, Gender, Date of birth, Current and previous addresses, Telephone numbers, e-mail addresses, Passport Number, Driving Licence number, Credit Card number (only the last four numbers are kept), Photos of you that you provide in our app (‘Selfie’) Name, Title, Gender, Date of birth, Current and previous address(es), Mobile phone number, E-mail address, Passport details, Driving licence details, Debit or credit card number, Digital selfie of you title, forename, middle name or initial, surname, date of birth, any other names you are known by, gender, time at address, current address, previous addresses, plus home telephone number, mobile telephone number and email address. Verizon may also request your passport details (including photograph), and driving licence details (including photograph) full name, date and place of birth, postal address, email address, telephone number, user ID, gender, date, time and duration of a communication, IP address, Operating System, Browser, passport details, Driving License details, Marriage Certificate details, Birth Certificate details, Poll Card details, bank account number name, address (with 3 years of history), email, mobile phone number, gender, details of your passport, driving licence and bank account, IP address, browser type and version, device type, operating system and version, locale, a unique visitor cookie, user ID, time, URL + We may receive information about you if you use any of the other websites we operate or the other services we provide. We also work closely with third parties to provide aspects of the Identity Service (including sub-contractors, analytics providers, search information providers and credit reference agencies) and we may receive information about you from them. title, forename, middle name or initial, surname, date of birth, any other names You are known by, gender, current address, previous addresses and the time spent at those addresses, home telephone number, mobile telephone number, email address title, first name, middle name or initial, surname, any other names you are known by, date of birth, gender, current address, previous addresses in the last three years (and the duration at each address), home telephone number, mobile telephone number and email address. We will also ask you to provide details of official identity documents, such as your passport or driving licence. ?
Apart from "relying parties", which may or may not be public services, personal information may be shared with
Driver & Vehicle Licensing Agency (DVLA), HM Passport Office, other companies within the Experian group the suppliers that we work with to deliver the service to you Callcredit, Her Majesty's Passport Office, the Driver & Vehicle Licensing Agency, ID Checker (who?), WorldPay, the third party that hosts our website a company within the Verizon Group or other affiliated entity , Equifax, ID Checker (who?), Driver and Vehicle Licensing Agency and Her Majesty's Passport Office, Zentry LLC (who?), Techmahindra Ltd (who?), Expert Solutions Support Centre (who?) GDS, DVLA, HMPO and any other relevant HMG Department, Morpho sub-contractors including third party fraud-prevention agencies and credit agencies, law enforcement and tax authorities, the head office of the Morpho Group, Morpho SAS, based in France a credit reference agency (including Equifax), a fraud prevention agency, other member organisations of the fraud prevention agency, other Barclays companies, Barclays business partners, suppliers and sub-contractors, HM Passport Office, DVLA, Verizon, GOV.UK Verify, anyone who buys a Barclays business or Barclays assets selected third party organisations including credit reference and fraud prevention agencies and their other customers, Equifax, CallCredit and DVLA, HMPO and any other relevant Department, the Police and/or other relevant authorities, any company in the GB Group group, business partners, suppliers and sub-contractors, analytics and search engine providers, other companies and organisations for the purposes of fraud protection and credit risk reduction GB Group, credit reference agencies or fraud prevention agencies such as Equifax and CallCredit, HM Passport Office, Driver and Vehicle Licencing Authority (sic), GDS ?
Terms & conditions
Ts&Cs Ts&Cs Ts&Cs Ts&Cs Ts&Cs Ts&Cs Ts&Cs Ts&Cs ?
Privacy policy
Privacy Privacy Privacy Privacy Privacy Privacy Privacy Privacy ?