Civil service officials last week attempted to quell the second uproar of the year from private sector digital ID app providers in a behind-closed-doors meeting, while this week (Monday 13 October) new technology secretary Liz Kendall attempted to face down MPs from all parties in a House of Commons debate as they expressed their concerns and protestations at the plans.
Kendall was correct when she told MPs: “There is a lot of misinformation out there about this proposal.” But she did not acknowledge that any misinformation was largely a result of the government’s poor communication around the original announcement.
As fintech industry body Innovate Finance – a supporter of digital identity – put it: “The reaction, frankly, has been to focus on the worst-case scenario – ‘compulsory digital ID’ is being framed as an erosion of civil liberties, a gateway to mass surveillance, and a tool of digital exclusion. It’s all fear and no finesse.”
Based on discussions with industry insiders, however, it may in fact be the case that Starmer’s mandatory national digital ID scheme will prove to be neither mandatory nor national.
However, the language used in the Commons by Kendall was subtly different. She talked about “making ID checks both mandatory and digital for all employers”. Her speech tried to focus on the wider benefits of digital identity, citing the need to modernise public services and make them easier to access in a digital age.
Years from now, having your ID on your phone will feel like second nature, putting more power directly into people’s hands and giving them more control over how they interact with government services. That is worth striving for Liz Kendall, technology secretary
“Years from now, when we look back, I believe that having your ID on your phone will feel like second nature, putting more power directly into people’s hands and giving them more control over how they interact with government and the whole range of services. That is something worth striving for,” she said.
As shadow technology secretary Julia Lopez pointed out, the previous Conservative government had already introduced mandatory right-to-work checks for employers and launched a mechanism whereby a digital identity app can be used, voluntarily, to prove an individual’s right to work in the UK. Most UK citizens will have had to prove their right to work (RTW) using physical documents such as a passport.
Any apps used as part of RTW checks have to be approved through the government-backed Digital Identity and Attributes Trust Framework (DIATF), which was given a statutory basis through the Data (Use & Access) Act (DUA), which received Royal Assent in June.
Run by the Office for Digital Identities and Attributes (OfDIA), nearly 50 third-party identity service providers (IDSPs) have received approval under DIATF for their apps to be used for RTW and other statutory government checks, such as age verification or registering as a company director.
Kendall confirmed to MPs that the government will bring legislation during this Parliament – so, before 2029 – for “making ID checks mandatory and digital”. She said there will not be a central database of digital identities, and there will be no sanction or penalty for people if they do not have a digital ID – only for employers that do not conduct RTW checks.
The only legal change the government has proposed so far is that RTW checks will have to be conducted digitally. There will be a government digital identity app that people can use to digitally prove their right to work, but the question remains: will they be compelled to use the government app, or will any app from a DIATF-approved IDSP be acceptable?
The first attempt came after the announcement of the Gov.uk Wallet and its proposed use for age verification – for example, when buying alcohol or accessing age-restricted online services. Many IDSPs specialise in age verification and have spent millions of pounds developing, testing and proving their capability to determine someone’s age using facial verification through a smartphone app.
So, when Starmer announced that the government would be further treading on the IDSPs’ turf, there was understandable outrage.
At the meeting last week, civil service officials outlined how Starmer’s plans would be brought to fruition.
IDSPs were told that OfDIA chief executive Hannah Rutter would be moving into a new role, leading development of the policy and overseeing a consultation planned for early 2026. They heard that Rutter would be replaced at OfDIA by John Peart, who is seen by suppliers as supportive of the private sector’s role. When asked by Computer Weekly, DSIT would not confirm or deny the appointments.
The consultation process – calling for, and responding to, submissions – is likely to take about a year. Draft legislation would then be put before Parliament in 2027, with the new government digital ID scheme likely to be in place by mid-2028, about a year before the next general election.
The legislative process will not be easy. As David Crack, chair of industry body the Association of Digital Verification Professionals, told Computer Weekly, many Labour MPs are opposed to the concept of mandatory digital identity, opposition parties are lining up against it, and because the policy was not included in Labour’s manifesto, the House of Lords may find it constitutionally acceptable to delay or even deny its approval. If millions of voters are against the proposals too, it’s not a policy likely to be enacted in a general election year.
“There is a plan – for a plan for a national ID scheme – but not an [actual] plan. Realpolitik will prevail,” said Crack.
During the meeting with IDSPs, DSIT officials reiterated that measures introduced by the DUA Act will still be implemented.
Significantly, this includes the launch of an “information gateway” which will allow IDSPs to access government-held data as part of the process of confirming people’s identities digitally – for example, passport or driving licence checks – greatly expanding the range of public data that non-government apps can use as credentials to prove that app users are who they say they are.
Well before the likely launch of a government digital ID scheme in 2028, therefore, there will already be a wide variety of digital identity apps and services on the market and already in use by people choosing voluntarily to prove their right to work digitally.
If use of those apps numbers in the millions by 2028, will legislation really force them to move to a government-developed app instead?
Crack said DSIT officials told suppliers they are open to ideas on how to implement mandatory digital RTW checks. “Note, mandatory RTW checks, but not necessarily a mandatory digital ID scheme,” he said. Crack believes that “government is listening”.
Others in the industry are less convinced. “The truth is out – a confirmation that the government made a policy decision to go ahead and do this stuff themselves. We are told the DUA Act will be continued, but my sense is that they see the private sector as interim or peripheral,” said one supplier executive, who asked to remain anonymous.
However, stakeholders across the digital identity sector agree on two things.
First, that Starmer’s announcement has propelled digital identity into a topic for national debate – something even the most worried suppliers have welcomed.
And second, that the manner of Starmer’s announcement – linking digital ID to tackling illegal immigration – means the public will need to be educated on what digital identity really means.
Dispelling the myths
With nearly three million signatories, the petition against the government proposal is one of the largest such online protests, but the statement people sign up to support says, “We demand that the UK government immediately commits to not introducing a digital ID card”.
Furthermore, critics have lined up to attack the use of a centralised government database – but Kendall confirmed there is no such plan, there never was, and as anybody familiar with how digital identity works would explain, the technology relies on the secure sharing of credentials, not large amounts of personal data or referencing an identity database.
For example, an age verification app simply confirms that the holder is over 18 when buying alcohol. It shares a digital credential saying “yes” when asked, “Is this person over 18?” – the app does not need to identify the person to the retailer in any way.
Lurid newspaper headlines have warned of US tech companies getting their hands on UK citizens’ personal data, with particular fears over the involvement of Palantir, the controversial data integration supplier that works closely with US military and intelligence services, as well as the NHS. One MP in the Commons debate warned of “writing Fujitsu a blank cheque” – a reference to the shamed IT services supplier that developed the Horizon system at the heart of the Post Office scandal.
However, Kendall confirmed that the government app will be developed in-house, by the Government Digital Service – there are no plans to award a contract to a single supplier to develop the digital ID software from scratch.
The software will be a continuation of existing developments – notably, Gov.uk One Login, the digital identity system that will become the standard way to log in to online public services and is already in use by many government websites.
It’s likely that the digital ID system will use the Gov.uk Wallet to store digital credentials, provided by the government, that prove the holder is who they say they are and that they have the right to work in the UK – much the same as the existing private sector apps that are used for the same purpose today.
By the time any legislation is passed, the amount of further development needed for One Login and the digital wallet is likely to be comparatively minimal – and certainly not require a huge new software development project.
DSIT will need to be far more transparent about how it has solved those problems before public trust in the system can be established.
Industry trade association TechUK has called on the government to help address the concerns its announcement has provoked, and to work together to explain the benefits that digital identity can offer the public, citing the “uncertainty for citizens and the private sector alike” that came as a result of Starmer’s announcement.
[Keir Starmer’s announcement] inappropriately positions digital ID as a silver bullet for a multifaceted and nuanced issue, rather than focusing on the benefits that digital ID can actually deliver, meaning its broader benefits are currently missing from the current political narrative TechUK report
“The announcement primarily centred on immigration enforcement, with government linking digital ID to the reduction of illegal working – and without acknowledgement that digital ID solutions, provided under the DIATF, were already being used for this purpose,” said TechUK, in a new report, Digital ID & the UK: Empowering citizens, enabling growth.
“It inappropriately positions digital ID as a silver bullet for a multifaceted and nuanced issue, rather than focusing on the benefits that digital ID can actually deliver, meaning its broader benefits are currently missing from the current political narrative.”
The report added: “Government must work alongside the digital ID sector, civil society, citizens, and other key stakeholders to build public trust, support innovation, and drive adoption. Indeed, the digital ID sector is prepared for a sustained period of engagement, where long-term decisions on digital ID infrastructure, governance, and market design will need to be carefully considered. Clearer communication around future plans is imperative for citizens and the digital ID sector alike.”
There is a path that Starmer and his government could follow, to back away from a badly received proposal and appear to be listening to public concerns, which would promote digital identity as the social and economic benefit it has proved to be in numerous other countries.
It would involve rescinding plans for a “national, mandatory” scheme, in favour of offering the public a wide choice of digital ID apps – both private sector and government-developed – that will enable a mandatory digital right-to-work check to be implemented nationwide. Who knows, maybe it might even have an impact on immigration?
But industry, the public and sceptical MPs alike can only wait and see whether Starmer is politically savvy enough to grasp the opportunity to turn a bad proposal into good policy.
The Ember Smart Mug 2 is niche, but it has a loyal following. Even though we think there are better mug warmers on the market, Ember is like Apple AirPods or Kleenex. People want what they want. Right now, for Mother’s Day, the Ember Smart Mug 2 is on sale for just under $100, a 30 percent discount and a match of the very best price we’ve tracked. You can save at Amazon, Best Buy, and the manufacturer’s website.
This smart mug is probably overkill. It has a smartphone app that notifies you when your coffee reaches the ideal temperature, and its onboard light also provides a visual indicator that your brew is ready. It intelligently adjusts power usage to keep your drink warm when you’re nearby, and turns off when you’re not around. The self-heating mug is on sale in a few variations—10 or 14 ounces, in blue, white, black, and purple.
The mug offers up to 80 minutes of powered heating time, or you can pop it on the included charging coaster to keep the battery going all day. And you don’t need the smartphone app unless you want to precisely dictate your coffee temperature—the mug defaults to 135 degrees Fahrenheit without your specific input.
Our main gripe is that this proprietary warming system is not dishwasher safe. You need to hand-wash each component, and ensure you do so carefully, because the items are not cheap to replace. But if Mom has been putzing around the house drinking perpetually microwaved coffee, perhaps an upgrade is in order. We have additional recommendations in our guide to the Best Coffee Warmers. You may also want to check our related stories on the Best Espresso Machines, Best Coffee Machines, and Best Pod Coffee Makers.
Google DeepMind’s AlphaFold has already revolutionized scientists’ understanding of proteins. Now, the ability of the platform to design safe and effective drugs is about to be put to the test.
Isomorphic Labs, the UK-based biotech spinoff of Google DeepMind, will soon begin human trials of drugs designed by its Nobel Prize–winning AI technology. “We’re gearing up to go into the clinic,” Isomorphic Labs president Max Jaderberg said on April 16 at WIRED Health in London. “It’s going to be a very exciting moment as we go into clinical trials and start seeing the efficacy of these molecules.”
Jaderberg did not elaborate on the timeline, but it’s later than the company had planned to initiate human studies. Last year, CEO Demis Hassabis said it would have AI-designed drugs in clinical trials by the end of 2025.
Isomorphic Labs was founded in 2021 as a spinoff from Alphabet’s AI research subsidiary, Google DeepMind. The company uses DeepMind’s AlphaFold, a groundbreaking AI platform that predicts protein structures, for drug discovery.
Built from 20 different amino acids, proteins are essential for all living organisms. Long strings of amino acids link together and fold up to make a protein’s three-dimensional structure, which dictates the protein’s function. Researchers had tried to predict protein structures since the 1970s, but this was a painstaking process given the astronomically high number of possible shapes a protein chain can take.
That changed in 2020, when DeepMind’s Hassabis and John Jumper presented stunning results from AlphaFold 2, which uses deep-learning techniques. A year later, the company released an open-source version of AlphaFold available to anyone.
In 2024, DeepMind and Isomorphic Labs released AlphaFold 3, which advanced scientists’ understanding of proteins even further. It moved beyond modeling proteins in isolation to predicting other important molecules, such as DNA and RNA, and their interactions with proteins.
“This is exactly what you need for drug discovery: You need to see how a small molecule is going to bind to a drug, how strongly, and also what else it might bind to,” Hassabis told WIRED at the time.
Since its release, the AlphaFold platform has been able to predict the structure of virtually all the 200 million proteins known to researchers and has been used by more than 2 million people from 190 countries. The breakthrough earned Hassabis and Jumper the Nobel Prize for chemistry in 2024, with the Nobel committee noting that AlphaFold has enabled a number of scientific applications, including a better understanding of antibiotic resistance and the creation of images of enzymes that can decompose plastic.
Earlier this year, Isomorphic Labs announced an even more powerful tool, what it calls IsoDDE, its proprietary drug-design engine. In a technical paper, the company touts that the platform more than doubles the accuracy of AlphaFold 3.
The startup has formed partnerships with Eli Lilly and Novartis to work together on AI drug discovery and is also advancing its own “broad and exciting pipeline of new medicines” in oncology and immunology, Jaderberg said.
“The exciting thing about the molecules that we’re designing is because we have so much more of an understanding about how these molecules work, we’ve engineered them to be very, very potent,” Jaderberg told the audience at WIRED Health. “You can take them at a much lower dose, and they’ll have lower side effects, off target effects.”
Last year, Isomorphic appointed a chief medical officer and announced it had raised $600 million in its first funding round to gear up for clinical trials. Meanwhile, the company has been building a clinical development team. Its mission is to “solve all disease.”
“It’s a crazy mission,” Jaderberg said. “But we really mean it. We say it with a straight face, because we believe this should be possible.”
Security leaders should be turning offensive AI cyber tools on their own systems before threat actors do, exploiting the innate defenders’ advantage to attain the high ground and increase their chances of withstanding a cyber attack.
So says Yinon Costica, co-founder of Google-owned Wiz, who, speaking at Google Cloud Next in Las Vegas, argued that defenders can win against attackers by using AI to exploit an advantage that may not appear obvious at first glance, that of context.
“The same AI model can obviously produce very different results based on the context that we feed into it,” said Costica. “Now, attackers hopefully have much less context about us while as defenders we do have a lot of context about our environments that we can share with the model.
“If, as defenders, we take the first movers’ advantage and we use the AI against ourselves, with the context we have, we actually stand a chance to win…. But we need to act fast,” he said.
“We need to start using AI against ourselves as much as possible, whether it’s to scan attack surfaces, scan code, scan anything, in order to be the first one to see the results and not to wait for the bad guys to do it before us.”
As speed becomes ever more of the essence in cyber security, Costica conceded that this would be a challenge for defenders – but noted that the tools to do this are rapidly becoming available. To try to help, Wiz unveiled three new AI agents at Google Cloud Next – red, green and blue – which are named for the human cyber teams they are designed to help.
“What agents allow us to do is really to get to the next level of acceleration [and] automation of security work,” said Costica.
The red agent is designed to assist red team penetration testing work by probing deep into its owners’ IT estate, identifying potential exposures, such as application programming interfaces (APIs), end-of-life edge networking kit or operational technology (OT) assets, and runs penetration tests on them. The green agent follows on by automating the triage process, something that can take ages for humans. Finally, the blue agent acts as a detective, doing the investigative work that can also be a lengthy process for human teams.
“These three agents together form a layer that is autonomous and automated. Its not revolutionary in that it aligns closely to how security teams have been working for many years, but now it allows each team to automate their workflows,” said Costica.
“It’s like living in the future in the eyes of security teams because it means that from the moment they find a risk, they can automate the process to find who owns it and deliver the code fix to complete and redeploy to production.”
A little over a month on from the closure of the $32bn acquisition of Wiz – Google’s largest purchase to date – the two organisations reaffirmed their commitment to providing a unified security platform, retaining Wiz’s brand, that will enhance the speed with which customers detect, prevent and respond to threats, especially emerging ones created using AI.
They duo also claim their combined capability will accelerate adoption of multicloud security and spur more confidence in innovation around cloud and AI. Wiz’s products are also to continue to be made available across other platforms, including Amazon Web Services (AWS), Microsoft Azure and Oracle Cloud. It also announced support for Databricks and agent studios like AWS Agentcore, Microsoft Azure Copilot Studio, and Salesforce Agentforce, as well as Gemini Enterprise Agent Platform of course, and continues to support security ecosystems with integrations to the outer layer of the cloud, including Google Cloud Apigee, Cloudflare AI Security for Apps, and the Vercel platform.
Behind the scenes, Wiz has also updated how it integrates security detections from Wiz Defend with Google Security Operations and Mandiant Threat Defence to make life easier for human analysts.
And it announced new capabilities to secure the AI-native deployment cycle. These include scanning vibe coded applications for issues; AI-generated code scanning and vulnerability remediation; agent-based remediation allowing teams to automate remediation workflows; and an AI bill of materials (AI-BOM) to keep on top of the use of shadow AI for coding.