The government's recent U-turn on its compulsory digital identity scheme wasn't just a political pivot, it was a capitulation to established UK law. For fintech founders and investors, it's a critical lesson: political will, no matter how strong, must ultimately bend to the statute book.
The proposal failed because it clashed with fundamental principles in UK domestic legislation:
Data Protection Act 2018: This Act requires that the processing of personal data must be "lawful and fair"¹. Forcing citizens to provide personal data for a universal digital ID, without a specific and necessary purpose, risks breaching the core principle of 'data minimisation'. The ICO has been clear: data collection must be "adequate, relevant and limited to what is necessary"².
UK Digital Identity and Attributes Trust Framework: The government's own framework for digital ID services is built on privacy, cybersecurity, and inclusivity³. A mandatory scheme, imposed without primary legislation, directly contradicts the framework's requirement for solutions to be "user-centric" and respect "privacy by design"⁴.
Online Safety Act 2023: This Act highlights the inherent risks in digital verification systems. The law's own age verification rules have sparked privacy concerns⁵. Layering a compulsory digital identity on top of this would have exponentially compounded the risk.
Ultimately, the government tried to build a digital edifice on a foundation of sand: no primary legislation, no public consultation, and no defined regulatory framework.
The legal weaknesses were amplified by a political firestorm. A petition opposing the plan attracted over 1.6 million signatures⁶, and criticism came from all corners of the House. The government's attempt to frame this as a minor "tweak" was unconvincing; it was a wholesale collapse of a legally and politically untenable proposition.
The lesson for fintech founders is clear: sustainable innovation must be built on a foundation of legal certainty. The allure of new technology cannot obscure the fundamental rights and protections our laws provide. The future will be built not by those who try to circumvent the law, but by those who understand and respect its enduring power.
References
¹ Data Protection Act 2018, Part 2, Section 8 ² ICO, "Guide to the UK GDPR" ³ UK Digital Identity and Attributes Trust Framework (2024) ⁴ House of Commons Library, "Digital ID in the UK" (Jan 16, 2026) ⁵ Kennedy's Law, "Unintended consequences of the Online Safety Act" (Oct 22, 2025) ⁶ The Guardian, "1.6m sign petition opposing Starmer's digital ID plan" (Oct 2025)
This article was originally published on LinkedIn.
View on LinkedIn →
Solicitor | Fintech Law Specialist
Gavin is a specialist solicitor with over 25 years of experience in financial technology regulation, digital assets law, and emerging technology compliance. He advises premier financial institutions and innovative technology companies on complex regulatory matters across 33 jurisdictions.
Qualifications: PhD (Cryptocurrency & Stablecoin Policy), LLM (Commercial Law), Solicitor of England & Wales
Experience: £750M+ transaction value | 33 jurisdictions | Trusted adviser to Morgan Stanley, American Express, Visa, Citibank, and leading fintech innovators
Analysis of digital identity systems and their privacy implications