“How do you prove who you are without surrendering who you are?” That question now hangs over Downing Street as seven campaign groups urge Prime Minister Keir Starmer to abandon plans for a mandatory digital identity system said to be imminent. Ministers have presented the scheme as a tool to curb unauthorised migration, but critics warn it risks becoming a gateway to surveillance, exclusion and concentrated data risk.
The coalition of civil liberties, privacy and migrant-rights organisations made their plea public this week, demanding the project be scrapped. They argue a compulsory approach to identity verification would magnify privacy harms, entrench discrimination and concentrate sensitive personal data in ways that increase the chance of misuse or theft. Campaigners also point out that Labour reportedly denied plans for such a scheme before the general election, calling the sudden push a political sleight of hand.
Why mandatory digital identity is controversial
Digital identity programs are not new. Governments have experimented for decades with everything from national ID cards to biometric verification systems, arguing they streamline public services, reduce fraud and simplify border checks. In the UK, ministers say a mandatory digital identity could make it harder to use forged or stolen documents, helping to tackle unauthorised migration.
Yet the proposal has met swift and broad resistance. The seven organisations behind the letter warn that mandatory digital identity risks excluding people who lack smartphones, reliable internet access or suitable documentation — often the very groups most vulnerable to exploitation. That includes older citizens, those on low incomes and many migrants and refugees who may not have straightforward documentary trails.
Campaigners also highlight the danger of scope creep. Systems introduced for one purpose routinely expand to others: a scheme launched for migration control could later be used across social services, policing or corporate verification. Once identity infrastructure is live, it becomes politically and technically difficult to contain.
Technical and security risks
Technologists echo civil-society concerns with their own alarms. Centralised databases or poorly designed authentication services can become lucrative targets for attackers. Even architectures that promise decentralisation or privacy-preserving features are vulnerable to implementation flaws, weak interoperability standards or administrative errors that produce wrongful denials of service.
Cybersecurity experts warn that any system aggregating identity data increases the potential impact of a breach. Linked biometric data, travel histories and usage records create particularly rich profiles that are valuable to malicious actors — from opportunistic criminals to hostile state actors. The more data concentrated in a single system, the greater the single point of failure.
Claims in favour: safeguards and benefits
Proponents of a mandatory digital identity counter that the risks can be managed through robust legal safeguards, independent oversight and rigorous technical standards. They argue digital identity could improve access to benefits, cut identity fraud and give public services a reliable way to verify entitlement. In the migration context, faster, technology-aided checks at borders and across services are presented as a necessary enhancement to existing enforcement tools.
Those in favour say a well-governed system could be aligned with responsible governance: limited data retention, strict purpose limitation, transparency about algorithms and strong audit mechanisms. But critics argue these assurances sound plausible in theory yet have repeatedly fallen short in practice, especially under the pressure of political deadlines.
Practical consequences for everyday people
For potential users, the urgency is practical and immediate. Vulnerable people fear being denied access to essential services if authentication fails or is judged insufficient. Older people and those on low incomes worry about digital exclusion. Migrants and refugees, who often lack consistent documentation, risk getting trapped in bureaucratic limbo. These are not hypothetical outcomes; experience in multiple jurisdictions shows that introducing technical gatekeepers into everyday life produces predictable barriers.
Independent oversight and clear redress mechanisms are widely recommended: data minimisation, purpose limitation, transparency over data-sharing arrangements, independent audits and straightforward avenues for appeal when people are wrongly excluded. Without these safeguards built into law and practice, critics say, the harms will outweigh the promised efficiencies.
The political test: expediency versus scrutiny
At the heart of the debate is political will. Labour faces accusations of reversing pre-election assurances and quietly advancing a high-impact scheme without full public debate. Officials defend the timing as driven by operational needs and a pressing objective to reduce illegal migration — a politically salient concern. The resulting tension between expediency and scrutiny is now centre stage.
Whether the government can reconcile security, fairness and privacy will determine the policy’s legitimacy. A rushed or opaque roll-out risks entrenching mistrust and provoking legal and civic pushback. A carefully staged, evidence-based approach with statutory protections and independent oversight could mitigate harms, but that takes time politicians say they do not have.
Conclusion: the trade-offs of mandatory digital identity
The debate crystallises into a fundamental trade-off: technological efficiency versus the risk of exclusion and concentrated data vulnerability. Will the United Kingdom choose a fast path promising immediate control and convenience, or a slower, more deliberative route prioritising safeguards and inclusion? The decision on mandatory digital identity will echo far beyond authentication mechanics — it will shape who is recognised, who is served and who is left outside the system.
