GPG45 is the UK government guidance on how to verify an individual’s identity. The Home Office recommends that identity services providers (IDSPs) carry out identity verification following GPG45, and in some instances requires them to. Verifying an individual’s identity following GPG45 requires IDSPs to follow a process known as ‘identity checking’.
This process is made up of 5 parts:
- Get evidence of the claimed identity
- Check the evidence is genuine or valid
- Check the claimed identity has existed over time
- Check if the claimed identity is at high risk of identity fraud
- Check that the identity belongs to the person who’s claiming it
Each step of the process is scored, and the combination of these scores are used to determine what Level of Confidence (LoC) has been achieved. You reach a level of confidence by meeting one of the designated identity profiles, which are specific combinations of the scores opposed to the total you get when you add the various scores together.
GPG45 has four LoCs: low, medium, high or very high. IDSPs can carry out digital identity verification to a range of standards or levels of confidence depending on the purpose of verification. For right to work checks, the Home Office recommends that employers only accept checks via an IDSP that satisfy a minimum of a Medium LoC. For DBS checks, IDSPs must satisfy a Medium LoC for basic checks and a high LoC for standard or enhanced checks.
Zinc is certified against the UK government’s ‘Digital Identity and Attributes Framework’ (DIATF) to provide identity checks to a high level of confidence.
Comments
0 comments
Please sign in to leave a comment.