One Login: GDS to Create ‘Easily Digestible Version’ of Privacy Impact Report

Why It Matters

A simplified DPIA will give citizens clearer insight into how their data is handled, while the absence of the full report may fuel scrutiny over privacy governance in a critical digital identity platform.

Key Takeaways

• One Login used by 122 services, reaching 14 million citizens
• GDS to release a simplified DPIA summary by end‑2026
• Full unedited DPIA unlikely to be published, per ministers
• Inclusion advisory group disbanded, raising privacy oversight concerns

Pulse Analysis

The GOV.UK One Login, launched in 2021, has become the backbone of digital interactions between citizens and more than a hundred government services. By consolidating sign‑in credentials, it promises smoother access to benefits, tax filings, and public records, driving efficiency across the public sector. Adoption figures—122 services and 14 million users—signal strong uptake, positioning One Login as a cornerstone of the UK’s digital transformation agenda.

A Data Protection Impact Assessment (DPIA) is a statutory safeguard for any system processing sensitive personal data. While GDS completed the DPIA, ministers confirmed only a distilled version will be released by late 2026, leaving the comprehensive findings under wraps. This partial disclosure aims to balance transparency with operational security, yet it may leave privacy advocates questioning the depth of risk mitigation, especially as new verification pathways—like no‑photo ID—expand the system’s data footprint.

The decision to dissolve the independent Inclusion and Privacy Advisory Group earlier this year has intensified concerns about external oversight. Without an external advisory body, the onus falls on GDS to demonstrate robust accountability. The forthcoming simplified DPIA could restore some public confidence, but stakeholders will likely monitor whether future governance reforms address the gap in independent scrutiny, shaping the credibility of the One Login platform in the broader digital identity market.