When Prime Minister Keir Starmer announced in September 2025 that the UK would roll out a mandatory digital ID — quickly branded 'BritCard' after the Labour Together pamphlet that had championed the concept — the Government framed it as a modernisation milestone. The credential would live in the GOV.UK Wallet, the app the Department for Science, Innovation and Technology (DSIT) launched in summer 2025, and would be required for right-to-work checks across the country by the end of this parliament. Within weeks, a parliamentary petition opposing the mandate had crossed 2.8 million signatures, becoming one of the most-signed in the petition system's history. Big Brother Watch, Liberty and the Open Rights Group lined up in opposition. Cabinet ministers were dispatched to defend the policy on the morning programmes.
This pushback is not, as some ministers have suggested, reflexive Luddism. It is a coherent objection to a specific design choice: turning a useful piece of public infrastructure into a compulsory gatekeeper for participation in the labour market. The UK can have a modern, privacy-respecting digital wallet. It does not need a mandate to get one, and the mandate is what is poisoning the well.
What was actually announced
The GOV.UK Wallet is a smartphone-based credential holder built by DSIT, designed initially to carry digital versions of documents such as the veterans' card and, in time, a digital driving licence. That is a sensible piece of state capacity. The problem arrived with the September 2025 escalation: a new 'BritCard' digital identity, hosted in the same wallet, that employers would be legally required to check before hiring anyone in the UK. The Government has been clear the mandate is aimed at illegal working and irregular migration, and equally clear that the credential would, over time, be usable for a wider range of public and private services.
That last point is where the policy gets into trouble. A credential designed for one purpose tends, over a parliament, to acquire others.
The function-creep problem is not hypothetical
Britain has been here before. The 2006 Identity Cards Act was sold as an anti-terror and anti-fraud measure; it collapsed in 2010 under cost, civil liberties pressure and a coalition that scrapped it on day one. The current proposal is technologically more elegant — no plastic cards, no central biometric register of the kind 2006 envisaged — but the political economy is the same. Once the state has built a single credential that employers must check, the temptation to extend it to landlords (as Right to Rent already does for paper documents), to age-gating under the Online Safety Act, to NHS access or to welfare conditionality becomes very hard to resist. Each extension will be defended on its own merits. The cumulative effect is a smartphone you cannot live in the UK without.
Civil society has been explicit about this trajectory. Big Brother Watch's campaign against the scheme, the Open Rights Group's longstanding work on identity infrastructure, and Liberty's submissions on the Data (Use and Access) Act 2025 all return to the same point: the harm is less the technology than the legal architecture being built around it.
Digital exclusion is a design failure, not a rounding error
An estimated 1.5–2.4 million UK adults lack the smartphone, connectivity, or digital confidence to manage a state-issued app — figures broadly consistent with successive Lloyds Bank Consumer Digital Index reports and ONS data on internet non-use. Bolt a smartphone credential onto the right to earn a living and you have, in effect, made digital literacy a precondition of employment. The groups most affected — older workers, people with disabilities, those in temporary accommodation, recent arrivals — are precisely the groups least likely to clear the bar.
The Government's answer so far has been to promise non-digital fallbacks. That is necessary, but it is not a plan. Without statutory guarantees of equivalent processing time, cost and acceptance, the 'fallback' becomes a slower, second-class lane that employers will quietly avoid.
What good looks like: voluntary, federated, purpose-limited
The EU has shown a workable alternative. Under the revised eIDAS 2.0 regulation (Regulation (EU) 2024/1183), every Member State must offer citizens a European Digital Identity Wallet by the end of 2026 — but use is voluntary, sectoral acceptance is mandated rather than universal compulsion, and the regulation contains explicit unlinkability and selective-disclosure requirements. Estonia's twenty-year-old eID system, often cited as the gold standard, is similarly built on a smartcard-plus-mobile architecture with strong purpose limitation and audit trails that let citizens see who has queried their data.
A pro-innovation UK approach would borrow heavily from both. Specifically:
- Drop the mandate. Make the GOV.UK Wallet a genuinely useful product people choose to install because it is faster than the alternative, not because they have no choice.
- Legislate purpose limitation. Each new use of BritCard should require fresh primary legislation, not a ministerial direction.
- Mandate selective disclosure and unlinkability in the wallet's technical specification, so an employer learns 'this person has the right to work' and nothing else.
- Guarantee non-digital parity in statute — same processing time, same fee, same legal weight.
- Publish an independent annual audit covering data flows, function-creep proposals and exclusion metrics.
The political cost of getting this wrong
A government that wants to ship AI infrastructure, regulatory sandboxes and a serious gov-tech stack needs public trust. Spending that trust on a compulsory ID app — one that 2.8 million people have already told Parliament they oppose — is a poor trade. The same wallet, offered voluntarily and built to genuinely high privacy standards, could plausibly hit majority adoption inside a parliament. The mandate is not the accelerator the Government thinks it is. It is the handbrake.