Full Report
Officials insist OBR relied on 'early estimate' and real figure won't emerge until next year The head of the department delivering the UK government's digital identity scheme has rejected the £1.8 billion cost forecast by the Office for Budget Responsibility (OBR), but is not willing to provide an alternative until after a delayed consultation on the plans.…
Analysis Summary
# Industry News: UK Government Rejects £1.8B Digital ID Cost Estimate Amid Delays
## Summary
The UK government department responsible for the national digital identity scheme has publicly dismissed the Office for Budget Responsibility’s (OBR) £1.8 billion cost forecast as based on an "early estimate." The permanent secretary stated that a credible cost projection cannot be provided until a delayed public consultation, which will define the scheme’s scope (including potential use for 13-year-olds and physical alternatives), concludes in the new year.
## Key Details
- Date: Announced around December 9, 2025 (based on reporting)
- Companies Involved: Department for Science, Innovation and Technology (DSIT), Office for Budget Responsibility (OBR), Cabinet Office.
- Category: Government Policy/Regulatory Development
## The Story
The head of the department overseeing the UK's digital identity program contested the OBR's £1.8 billion projection, claiming it predates current planning. The final cost is contingent upon decisions made during an upcoming consultation, which has been pushed back to the new year. This consultation will determine core aspects of the scheme, such as its required functionality, access methods, and scope—including potentially extending it to 13-16 year olds to aid employment checks and online safety compliance (Age Verification under the Online Safety Act 2023). Furthermore, the government is considering digitally enabled physical alternatives for those without technology access, and confirming that digital ID data will be stored in secure, UK-hosted cloud environments.
## Business Impact
### For the Companies Involved
- **DSIT/Cabinet Office:** Significant financial uncertainty remains. The rejection of the OBR figure manages immediate political pressure but postpones accountability for budgeting, especially given the scope creep potential (e.g., incorporating 13-year-olds, physical cards).
### For Competitors
- **Identity Solution Providers (Private Sector):** The delay in defining the final requirements creates a holding pattern. Companies planning to bid or partner on the scheme cannot finalize their strategic investment or architecture until the consultation responses clarify the mandatory features and scale.
### For Customers
- **UK Citizens/Employees:** The timeline for potential mandatory employment checks is linked to the completion of this consultation and subsequent development. Delays mean uncertainty about when they will be required to adopt the new system or face new verification thresholds.
### For the Market
- **GovTech/Digital Identity Market:** The market must manage high uncertainty regarding the scale and complexity of this flagship project. The reliance on UK-hosted cloud infrastructure suggests procurement opportunities will favor domestic or security-vetted providers.
## Technical Implications
The announcement confirms key technical anchors: 1) Data residency requirements (UK-hosted cloud) will significantly narrow the pool of eligible cloud vendors. 2) The potential inclusion of minors and physical alternatives suggests the final architecture must be highly adaptable, supporting both mature digital credentials and legacy/offline verification methods.
## Strategic Analysis
- **Market Positioning:** The government is prioritizing requirements definition over cost certainty, signaling a commitment to a comprehensive, potentially broad identity scope, rather than a minimalist, quickly deployable system.
- **Competitive Advantage:** Clarity on the requirements post-consultation will become the primary driver for competitive advantage among vendors who can demonstrate high security and compliance with data residency, while managing the complexity of varied user access methods.
- **Challenges:** The primary risks are further scope creep based on consultation outcomes and the difficulty of aligning cost estimates with complex, multi-layered functionality (digital plus physical).
## Industry Reactions
- **Analyst opinions:** Analysts are likely viewing the rejection of the OBR figure as political maneuvering rather than a definitive fiscal statement. The focus is now entirely on the forthcoming consultation as the true source of technical requirements and budget parameters.
- **Expert commentary:** Experts will highlight that integrating support for 13-year-olds presents unique challenges regarding parental consent and data privacy that could inflate costs and complexity beyond initial estimates.
## Future Outlook
- **Predictions and expectations:** The next significant milestone will be the publication of the consultation outcomes, which should provide a much firmer basis for cost modeling, likely resulting in a revised, and potentially much higher, final budget announcement next year.
- **What to watch for:** Scrutiny of the specific requirements detailed in the consultation, particularly regarding the security architecture for handling data across potentially vulnerable age groups (teenagers).
## For Security Professionals
The mandate for data to be stored in "secure cloud environments hosted in the United Kingdom" signals high geopolitical and regulatory scrutiny on cloud security stacks. Security professionals supporting bid efforts must focus heavily on demonstrating compliance with sovereign cloud requirements and robust identity proofing mechanisms suitable for verifying both adults and minors.