What Good Practice Guide (GPG) 45?

The Home Office recommends that an IDSP carries our identity verification following GPG45. Verifying an individual’s identity following GPG45 requires IDSPs to follow a process known as ‘identity checking’. This process is made up of 5 parts:

- Get evidence of the claimed identity

- Check the evidence is genuine or valid

- Check the claimed identity has existed over time

- Check if the claimed identity is at high risk of identity fraud

- Check that the identity belongs to the person who’s claiming it

Each step of the process is scored, and these scores are used to determine what Level of Confidence (LoC) has been achieved.

You can combine the scores for each part of the identity checking process. These combinations are known as identity profiles.

GPG45 has four LoCs. IDSPs can carry out digital identity verification to a range of standards or levels of confidence. The Home Office recommends that employers only accept checks via an IDSP that satisfy a minimum of a Medium Level of Confidence.