Digital Identity: Mark Sugden, DBS Head of Identity, shares his insights
UK Government recently announced that businesses and landlords will soon be able to use Digital Identity verification for right to work, right to rent, and criminal record checks.
We had the chance to sit down with the Disclosure and Barring Service’s (DBS), Head of Identity, Mark Sugden to help explain some of the finer points of what this means for businesses.
Mark has extensive experience in the background screening industry, working at registered bodies and co-founding the Criminal Records Trade Body (CRTB). He’s kindly shared his insights on the introduction of digital identity solutions in the UK.
Mark Sugden: DBS Head of Identity
Hi Mark, thanks for taking the time for doing this. Could you give us some background about yourself and how you got involved with the DBS?
“So, I started with DBS in August 2020, and in that time, we've what we've done is set up an identity project that's enabled us to kind of take a real forensic look at everything that's identity related within DBS.
“We had a collaborative plan between CRTB and DBS, which included setting new standards for digital identity verification and record checking process.
So, how is digital identity going to affect applying for a DBS Check?
“If you think about the happy route, somebody with an e-passport, mobile phone and a financial footprint within the UK, will literally be able to validate their identity in minutes, if not seconds. Using the technology and all remotely as well. So, you don't have to leave the house”
Will the use of digital identity affect how an actual DBS Check is carried out?
“Everything that we've done with the identity project has been about enabling digital identity at the front end, it hasn't changed anything in the operation”
So, I think with digital identity, it creates opportunity to improve the customer experience as part of the DBS application journey, but it also makes the identity checking process more robust.”
That was going to be one of my questions, because a lot of people have asked us about how secure digital identity methods are. Some people are a bit concerned about data leaks and things like that. From what you’ve said, it sounds like it will be more secure than manual ID verification?
“Well, it's definitely more secure because basically it links to government standards for identity, which is all encapsulated in a document called ‘GPG45 How to prove and verify someone's identity’”
“[GPG45] basically establishes four different levels of confidence. And what we've set in the standards is that for Basic Disclosure, you need to establish a confidence level of medium and for Standard/Enhanced disclosure, a confidence level of high.”
“To get to the high confidence level, the best and easiest way of doing that is using a e-passport. The ePassport obviously has the chip embedded within it, and it's necessary to read the cryptographically secure features within the ePassport. So, this is one of those areas where machines are way better than people”
“One of the weaknesses of the existing identity checking process is that it's reliant on the human eye. And typically, by people that are not trained in document validation.
“Whereas by introducing document validation technology means that those systems are trained in spotting fake documents from all over the world.”
“I think there’s over 150 countries with e-passports, so immediately we're taking a forensic evaluation of those documents being used that just the human eye could never do.”
How hard is it going to be for the general public to get to grips with digital identity verification?
“I think citizens are becoming quite used to verifying their identity remotely. I think there's a lot of challenger banks out there using it. There are other kind of remote online platforms where we have to verify our identity.”
“Even when we're making a banking transaction or accessing our smart phones , we're using facial recognition to confirm it’s us. So, this is really an extension of that technology.”
How will digital identity verification affect what documents people can use when applying for DBS Checks?
“I think people need to think differently about identity to the way they think about it right now. Certainly, for criminal record checking. We're very prescriptive at the moment of what documents you can use, and people need to start thinking about confidence level.”
“There's a number of different ways that you can achieve different confidence levels”
“Certainly, the medium confidence level it has a much broader range of documents that you can use. You can even get to a medium confidence level with no documents at all using open banking.”
Could you explain that last point in a bit more detail?
“Open banking enables you to establish the identity of the individual using a banking app. So, there are ways and means that you can establish the identity of somebody with no documents whatsoever on the basis the bank account was established following an identity check.”
“By enabling credit reference agency data to establish the current address of the person, it will also do away with some of the challenges people have with printing off or presenting proof of address documents.”
Thanks for explaining that, it sounds like digital Id is going to make the application process considerably easier than it is at the moment. When will people be able to start using digital identity for DBS Checks?
“The DBS’s scheme is now live, it's just waiting on certified identity providers to become certified to the DCMS Trust Framework and the DBS requirements and then registered bodies can start using those identity providers.”
“Certification for identity providers will start mid-February and we don't expect any identity providers to be certified until the end of March.”
“But then the certification period doesn't end. That's when it starts and will then carry on forever, basically. So, we'll get more identity providers coming into our marketplace.”
A few of the companies we've spoken to are a bit worried, particularly in industries where technology isn’t as readily embraced. Will digital identity replace traditional methods of ID verification?
“So, we've been very clear in the guidance that we've published is that the new digital identity guidelines are equivalent to the manual [methods of verification]. There is no difference whatsoever in the eyes of DBS, of which methodology used, whether it's digital or manual.”
So digital identity is an addition rather than a replacement?
“Yeah, absolutely! It's an important point to clarify, In the guidelines, we've done that by using that word equivalent. There is no difference whatsoever in the eyes of DBS between which method of ID checking is used.”
Well, thank you very much for taking the time to speak with us, Mark. It’s been great to get some insights directly from the DBS about how digital identity is going to work going forwards.
As members of the CRTB, Personnel Checks have been pushing for this positive step forward within the world of criminal record checks. It is the single biggest modernisation of UK criminal record checking we have ever seen.
The use of digital identity for DBS Checks is going to massively streamline the DBS application process for applicants, employers and registered bodies like Personnel Checks.
CRTB Vice-Chair and MD of Personnel Checks, Jack Mellor, commented:
Jack Mellor: Personnel Checks Managing Director
“Being members of the Criminal Records Trade Body has helped us work with people like Mark to bring about such an important change.”
“The introduction of digital identity into the world of criminal record checks is a big step forward and supports our mission of making the working world safer for everyone”
“This technology will allow us to embed the ID verification process into the technology we’re developing, meaning a quicker more joyful experience for candidates and hiring managers”
Personnel Checks have a road map on how we are going to incorporate digital identity into our services. However, as there are currently no certified digital identity providers, nothing is set in stone yet.
As and when changes are set to be introduced, we will be sure to communicate this in advance to all our customers.