UK publishes draft data-sharing code for digital verification services

The UK's DCMS and OfDIA have published a draft statutory code of practice for public authorities sharing information with digital verification service (DVS) providers under section 45 of the Data (Use and Access) Act 2025. The code clarifies that sharing biometrics as special category data requires both Article 6(1) and Article 9 UK GDPR bases.

• Code issued under section 45 of the Data (Use and Access) Act 2025
• Biometrics treated as special category data under UK GDPR
• An explanatory memorandum accompanies the draft code
• Oversight debated after DSIT was dismantled