GOV.UK One Login: policy history

Capture of 2025-04-26:

"The GOV.UK One Login system provides a single way to sign in and prove your identity when accessing government services online."

Capture of 2025-05-03:

"GOV.UK One Login provides a single way to sign in and prove your identity when accessing government services online."

"Government Digital Service (GDS) , part of the Cabinet Office."

In the capture of 2025-04-26; not in the capture of 2025-05-03.

"Government Digital Service (GDS) , part of the Department for Science, Innovation and Technology (DSIT)."

Not in the capture of 2025-04-26; in the capture of 2025-05-03.

Capture of 2025-04-26:

"The Cabinet Office, as GDS’s parent organisation, is the data controller of the personal data you provide when you use GOV.UK One Login."

Capture of 2025-05-03:

"The Department for Science, Innovation and Technology (DSIT), as GDS’s parent organisation, is the data controller of the personal data you provide when you use GOV.UK One Login."

Capture of 2025-04-26:

"This means that the Cabinet Office is ultimately responsible for the personal data we collect and process on GOV.UK One Login."

Capture of 2025-05-03:

"This means that DSIT is ultimately responsible for the personal data we collect and process on GOV.UK One Login."

Capture of 2025-04-26:

"This includes determining things like what personal data should be collected, from whom and what it will be used for."

Capture of 2025-05-03:

"This includes determining things like what personal data should be collected, from whom, and what it will be used for."

Capture of 2025-04-26:

"For example they may collect data from you either before they redirect you to GOV.UK One Login or after GOV.UK One Login returns you to their service after you’ve completed your authentication or identity checks."

Capture of 2025-05-03:

"For example they may collect data from you either before they redirect you to GOV.UK One Login or after GOV.UK One Login returns you to their service, after you’ve completed your authentication or identity checks."

Capture of 2025-04-26:

"If the online government service is only using GOV.UK One Login to sign you in to their service, we will not collect any further data from you."

Capture of 2025-05-03:

"If the online government service is only using GOV.UK One Login to sign you in to their service, we will not collect any further information from you."

"The process includes a fraud check with Experian to make sure the data you give us is accurate and to check there are no signs your identity has been stolen or misused."

Not in the capture of 2025-04-26; in the capture of 2025-05-03.

"There are 3 main ways to prove your identity."

Not in the capture of 2025-04-26; in the capture of 2025-05-03.

"The things we check depend on which way you prove your identity."

Not in the capture of 2025-04-26; in the capture of 2025-05-03.

"It consists of a sequence of checks that are conducted by specialist identity checking service providers on our behalf."

In the capture of 2025-04-26; not in the capture of 2025-05-03.

"It consists of a sequence of checks that are carried out by specialist identity checking service providers on our behalf, as well as the fraud check described below."

Not in the capture of 2025-04-26; in the capture of 2025-05-03.

Capture of 2025-04-26:

"We use an identity checking service provider called Iproov and their subcontractors Veriff and Innovalor to conduct these checks."

Capture of 2025-05-03:

"We use an identity checking service provider called Iproov and their subcontractors Veriff and Inverid to conduct these checks."

Capture of 2025-04-26:

"Iproov acts as a data processor with Veriff and Innovalor as sub-processors, which means that they may only process your personal data for the sole purpose of fulfilling our instructions."

Capture of 2025-05-03:

"Iproov acts as a data processor with Veriff and Inverid as sub-processors, which means that they may only process your personal data for the sole purpose of fulfilling our instructions."

"address (driving licences only)"

In the capture of 2025-04-26; not in the capture of 2025-05-03.

Capture of 2025-04-26:

"We collect the following information:"

Capture of 2025-05-03:

"We may collect the following information:"

"nationality (except driving licences)"

In the capture of 2025-04-26; not in the capture of 2025-05-03.

"If you use a driving licence, you’ll be able to check that the app has correctly captured the details."

Not in the capture of 2025-04-26; in the capture of 2025-05-03.

"You’ll need to agree to us sharing your details with:"

Not in the capture of 2025-04-26; in the capture of 2025-05-03.

Capture of 2025-01-23:

"Newid yr iaith ir Gymraeg"

Capture of 2025-01-29:

"Cymraeg Newid yr iaith ir Gymraeg"

Capture of 2024-11-14:

"Cymraeg Newid yr iaith ir Gymraeg"

Capture of 2024-12-04:

"Newid yr iaith ir Gymraeg"

Capture of 2024-08-22:

"We will keep your GOV.UK One Login for as long as you wish to use it although we will delete it if you do not use it for 3 years."

Capture of 2024-11-13:

"We will keep your GOV.UK One Login for as long as you wish to use it although we will delete it if you do not use it for 5 years."

"This is a new service – your feedback (opens in new tab) will help us to improve it."

In the capture of 2024-05-17; not in the capture of 2024-08-22.

"This is a new service – your"

Not in the capture of 2024-05-17; in the capture of 2024-08-22.

"feedback (opens in new tab)"

Not in the capture of 2024-05-17; in the capture of 2024-08-22.

"will help us to improve it."

Not in the capture of 2024-05-17; in the capture of 2024-08-22.

"Cymraeg Newid yr iaith ir Gymraeg"

Not in the capture of 2024-05-17; in the capture of 2024-08-22.

"We use Dynatrace to collect information about problems you may experience when using GOV.UK One Login."

Not in the capture of 2024-05-17; in the capture of 2024-08-22.

"how quickly pages load"

Not in the capture of 2024-05-17; in the capture of 2024-08-22.

"if you see any error messages"

Not in the capture of 2024-05-17; in the capture of 2024-08-22.

"technical information including your IP address and a unique identifier"

Not in the capture of 2024-05-17; in the capture of 2024-08-22.

"The information we collect does not enable us or Dynatrace to determine your real world identity."

Not in the capture of 2024-05-17; in the capture of 2024-08-22.

"We will not combine analytics information with any other data to determine your real world identity."

Not in the capture of 2024-05-17; in the capture of 2024-08-22.

"Dynatrace acts as our data processor and we do not permit them to use or share this data for their own purposes."

Not in the capture of 2024-05-17; in the capture of 2024-08-22.

Capture of 2024-05-17:

"improve the service by understanding how you use it and any problems you experience, for example using Google Analytics, Firebase Crashlytics and the contact centre feedback survey"

Capture of 2024-08-22:

"improve the service by understanding how you use it and any problems you experience, for example using Google Analytics, Firebase Crashlytics, Dynatrace, and the contact centre feedback survey"

Capture of 2024-05-17:

"collecting and analysing information about how you use your GOV.UK One Login using Google Analytics cookies"

Capture of 2024-08-22:

"collecting and analysing information about how you use your GOV.UK One Login using Google Analytics and Dynatrace cookies"

Capture of 2024-05-17:

"To protect against crime and fraud, we might sometimes need to share information with:"

Capture of 2024-08-22:

"To protect against crime and fraud, we sometimes need to share information with:"

"Experian (a credit reference agency)"

Not in the capture of 2024-05-17; in the capture of 2024-08-22.

Capture of 2024-05-17:

"The information we might share includes:"

Capture of 2024-08-22:

"The information we share includes:"

"We use Experian to check your email address and phone number when you create a GOV.UK One Login and if you change your email address or phone number."

Not in the capture of 2024-05-17; in the capture of 2024-08-22.

"If you consented to analytics, Dynatrace will store information about how you used GOV.UK One Login for 35 days."

Not in the capture of 2024-05-17; in the capture of 2024-08-22.

Capture of 2024-05-17:

"Data collected by Google Analytics may be transferred outside the European Economic Area (EEA) for processing and some of our suppliers may provide technical support from outside of the EEA."

Capture of 2024-08-22:

"Data collected by Google Analytics or Dynatrace may be transferred outside the European Economic Area (EEA) for processing and some of our suppliers may provide technical support from outside of the EEA."

Capture of 2023-06-21:

"For e-passports and biometric residence permits, the app will read your document information from its near field communication (NFC) chip."

Capture of 2023-12-09:

"For e-passports, biometric residence permits and cards, and frontier worker permits the app will read your document information from its near field communication (NFC) chip."

Capture of 2023-06-21:

"We collect the following information"

Capture of 2023-12-09:

"We collect the following information:"

Capture of 2023-06-21:

"We use an identity checking service provider called Experian to:"

Capture of 2023-12-09:

"We use an identity checking service provider called Experian to conduct a fraud check to:"

Capture of 2023-06-21:

"conduct a fraud check to look for any signs that your identity has been stolen or misused"

Capture of 2023-12-09:

"look for any signs that your identity has been stolen or misused"

"This fraud check will not affect your credit score, as it is a ‘soft search’."

Not in the capture of 2023-06-21; in the capture of 2023-12-09.

"An entry about it will be added to your credit record, but it will only be visible to you."

Not in the capture of 2023-06-21; in the capture of 2023-12-09.

"Other organisations that use Experian to run their own credit checks will not be able to see it."

Not in the capture of 2023-06-21; in the capture of 2023-12-09.

"This check constitutes a ‘soft search’ which means that a record of the check will exist on your credit records as ‘GOV.UK One Login’."

In the capture of 2023-06-21; not in the capture of 2023-12-09.

"It will only be visible to you and not to any other organisations that use Experian to conduct their own credit checks."

In the capture of 2023-06-21; not in the capture of 2023-12-09.

"Consequently, it will not have an impact on your credit score."

In the capture of 2023-06-21; not in the capture of 2023-12-09.

"We also conduct the same fraud check using Experian as outlined in the ‘Using the GOV.UK ID Check app to prove your identity’ section."

In the capture of 2023-06-21; not in the capture of 2023-12-09.

"If you contact us for support using GOV.UK One Login’s contact forms, we will collect any identifying information you provide, such as your name and email address, plus the details of your support request."

In the capture of 2023-06-21; not in the capture of 2023-12-09.

"Where you agree, we will contact you to obtain your feedback about the service."

In the capture of 2023-06-21; not in the capture of 2023-12-09.

"We will collect any identifying information you provide in your feedback, such as your name and email address, plus the details of your feedback."

In the capture of 2023-06-21; not in the capture of 2023-12-09.

"When you have completed the checks above, we will collect your name, date of birth and address."

Not in the capture of 2023-06-21; in the capture of 2023-12-09.

"We send these to Experian so they can conduct the check."

Not in the capture of 2023-06-21; in the capture of 2023-12-09.

"GOV.UK One Login gives you the option to prove your identity at a Post Office."

Not in the capture of 2023-06-21; in the capture of 2023-12-09.

"We use an identity checking service provider called Experian to conduct on online fraud check to:"

Not in the capture of 2023-06-21; in the capture of 2023-12-09.

"We collect your name, date of birth and address and send them to Experian so they can conduct the check."

Not in the capture of 2023-06-21; in the capture of 2023-12-09.

"your identity documents are real"

Not in the capture of 2023-06-21; in the capture of 2023-12-09.

Capture of 2023-05-29:

"For drivers’ licences, you will need to take a photo of the front and back of your licence with your phone camera."

Capture of 2023-06-21:

"For driving licences, you will need to take a photo of the front and back of your licence with your phone camera."

Capture of 2023-05-29:

"For e-passports, the App will read your passport information from your document’s Near Field Communication (NFC) chip."

Capture of 2023-06-21:

"For e-passports and biometric residence permits, the app will read your document information from its near field communication (NFC) chip."

"We collect the following information"

Not in the capture of 2023-05-29; in the capture of 2023-06-21.

"address (driving licences only)"

Not in the capture of 2023-05-29; in the capture of 2023-06-21.

"nationality (except driving licences)"

Not in the capture of 2023-05-29; in the capture of 2023-06-21.

Capture of 2023-05-29:

"When Iproov has completed the check, they send us the outcome of the check and your driving licence or passport information."

Capture of 2023-06-21:

"When Iproov has completed the check, they send us the outcome of the check and your identity document information."

"We check your passport details are genuine using the authoritative datasets held by His Majesty’s Passport Office (HMPO)."

In the capture of 2023-05-29; not in the capture of 2023-06-21.

"HMPO does so as an independent data controller in accordance with their privacy notice."

In the capture of 2023-05-29; not in the capture of 2023-06-21.

"We check your passport or driving licence details are genuine using the authoritative datasets held, respectively, by HM Passport Office (HMPO) or the Driver and Vehicle Licensing Agency (DVLA) in Great Britain or the Driver and Vehicle Agency in Northern Ireland (DVA (NI))."

Not in the capture of 2023-05-29; in the capture of 2023-06-21.

Capture of 2023-05-29:

"You will need to provide your passport details which we then send to HMPO to validate against their records."

Capture of 2023-06-21:

"You will need to provide your driving licence or passport details which we then send to HMPO, DVLA or DVA (NI) to validate against their records."

Capture of 2023-05-29:

"When HMPO have completed their checks, they send us confirmation as to whether the data matches or not and if not, the reason why it didn’t match."

Capture of 2023-06-21:

"When HMPO, DVLA or DVA (NI) have completed their checks, they send us confirmation as to whether the data matches or not and if not, the reason why it didn’t match."

"HMPO, DVLA and DVA (NI) do so as independent data controllers in accordance with their privacy notices."

Not in the capture of 2023-05-29; in the capture of 2023-06-21.

"the Driver and Vehicle Licensing Agency (DVLA), as an independent data controller under an MoU, for GB driving licence genuine document checks."

Not in the capture of 2023-05-29; in the capture of 2023-06-21.

"the Driver and Vehicle Agency Northern Ireland (DVA NI), as an independent data controller under an MoU, for Northern Irish driving licence genuine document checks."

Not in the capture of 2023-05-29; in the capture of 2023-06-21.

"DVA NI’s privacy notice"

Not in the capture of 2023-05-29; in the capture of 2023-06-21.

Capture of 2023-05-29:

"Last updated: 11 April 2023"

Capture of 2023-06-21:

"Last updated: 15 June 2023"

"The GOV.UK One Login system provides a single way to sign in and prove your identity when accessing government services online."

Not in the capture of 2023-03-18; in the capture of 2023-05-25.

"This privacy notice only covers GOV.UK One Login."

In the capture of 2023-03-18; not in the capture of 2023-05-25.

"The Cabinet Office, as GDS’s parent organisation, is the data controller of the personal data you provide when you use GOV.UK One Login."

Not in the capture of 2023-03-18; in the capture of 2023-05-25.

"GOV.UK privacy notice to find out how your personal information is collected and processed when you use the GOV.UK website."

In the capture of 2023-03-18; not in the capture of 2023-05-25.

"This means that the Cabinet Office is ultimately responsible for the personal data we collect and process on GOV.UK One Login."

Not in the capture of 2023-03-18; in the capture of 2023-05-25.

"The Cabinet Office is the data controller of the personal information you provide to us when you:"

In the capture of 2023-03-18; not in the capture of 2023-05-25.

"This includes determining things like what personal data should be collected, from whom and what it will be used for."

Not in the capture of 2023-03-18; in the capture of 2023-05-25.

"create a GOV.UK One Login"

In the capture of 2023-03-18; not in the capture of 2023-05-25.

"Other government departments are responsible for any personal data you provide when you use their online services."

Not in the capture of 2023-03-18; in the capture of 2023-05-25.

"use your GOV.UK One Login to access an online government service"

In the capture of 2023-03-18; not in the capture of 2023-05-25.

"For example they may collect data from you either before they redirect you to GOV.UK One Login or after GOV.UK One Login returns you to their service after you’ve completed your authentication or identity checks."

Not in the capture of 2023-03-18; in the capture of 2023-05-25.

"This means that they are data controllers for that information and will decide what data to collect from you, why they need that data and how long they keep that data for."

Not in the capture of 2023-03-18; in the capture of 2023-05-25.

"When you provide information to another government service while signed into GOV.UK One Login, the government department that runs the service is the data controller."

In the capture of 2023-03-18; not in the capture of 2023-05-25.

"Details of this will be in their own privacy notices."

Not in the capture of 2023-03-18; in the capture of 2023-05-25.

"They will have their own privacy notice to explain how they process your information."

In the capture of 2023-03-18; not in the capture of 2023-05-25.

"When you are referred to GOV.UK One Login by an online government service to sign in or prove your identity we will know what service you have come from."

Not in the capture of 2023-03-18; in the capture of 2023-05-25.

"We do not have access to the information you provide to services run by other government departments."

In the capture of 2023-03-18; not in the capture of 2023-05-25.

"The information we then collect from you will depend on:"

Not in the capture of 2023-03-18; in the capture of 2023-05-25.

"When you prove your identity with GOV.UK One Login, we will:"

In the capture of 2023-03-18; not in the capture of 2023-05-25.

"whether the online government service is using GOV.UK One Login solely to log you in to their system or to prove your identity as well"

Not in the capture of 2023-03-18; in the capture of 2023-05-25.

"GOV.UK accounts are provided by the"

In the capture of 2023-01-28; not in the capture of 2023-03-15.

"GOV.UK One Login is provided by the"

Not in the capture of 2023-01-28; in the capture of 2023-03-15.

Capture of 2023-01-28:

"This privacy notice only covers GOV.UK accounts."

Capture of 2023-03-15:

"This privacy notice only covers GOV.UK One Login."

"create a GOV.UK account"

In the capture of 2023-01-28; not in the capture of 2023-03-15.

"create a GOV.UK One Login"

Not in the capture of 2023-01-28; in the capture of 2023-03-15.

Capture of 2023-01-28:

"use your GOV.UK account to access an online government service"

Capture of 2023-03-15:

"use your GOV.UK One Login to access an online government service"

Capture of 2023-01-28:

"When you provide information to another government service while signed into your account, the government department that runs the service is the data controller."

Capture of 2023-03-15:

"When you provide information to another government service while signed into GOV.UK One Login, the government department that runs the service is the data controller."

Capture of 2023-01-28:

"When you prove your identity with a GOV.UK account, we will:"

Capture of 2023-03-15:

"When you prove your identity with GOV.UK One Login, we will:"

Capture of 2023-01-28:

"When you use a service that requires a GOV.UK account, we’ll receive information about the service when it directs you to:"

Capture of 2023-03-15:

"When you use a service that requires a GOV.UK One Login, we’ll receive information about the service when it directs you to:"

"create or sign in to an account"

In the capture of 2023-01-28; not in the capture of 2023-03-15.

"create a GOV.UK One Login or sign in"

Not in the capture of 2023-01-28; in the capture of 2023-03-15.

Capture of 2023-01-28:

"The information we collect when you create and use a GOV.UK account includes:"

Capture of 2023-03-15:

"The information we collect when you create and use a GOV.UK One Login includes:"

"basic personal information needed to set up and authenticate your account, including your email address and mobile phone number"

In the capture of 2023-01-28; not in the capture of 2023-03-15.

"basic personal information needed to set up and authenticate your GOV.UK One Login, including your email address and mobile phone number, if you choose to get security codes for signing in by text message"

Not in the capture of 2023-01-28; in the capture of 2023-03-15.

Capture of 2023-01-28:

"any information that you choose to save to your account, for example your GOV.UK email subscription preferences"

Capture of 2023-03-15:

"any information that you choose to save to your GOV.UK One Login, for example your GOV.UK email subscription preferences"

Capture of 2023-01-28:

"information on how you use your account and the GOV.UK website, which is collected in the system logs, and by Google Analytics cookies if you give consent - the"

Capture of 2023-03-15:

"information on how you use your GOV.UK One Login and the GOV.UK website, which is collected in the system logs, and by Google Analytics cookies if you give consent - the"

"GOV.UK One Login cookies policy"

Not in the capture of 2023-01-28; in the capture of 2023-03-15.

Capture of 2023-01-28:

"questions, queries or feedback you leave, including your name and email address, if you provide them on the GOV.UK accounts contact form"

Capture of 2023-03-15:

"questions, queries or feedback you leave, including your name and email address, if you provide them on the GOV.UK One Login contact form"

Capture of 2023-01-28:

"if you were able to prove your identity with your GOV.UK account"

Capture of 2023-03-15:

"if you were able to prove your identity with your GOV.UK One Login"

Capture of 2023-01-28:

"When you create an account, it will automatically generate a unique account identifier."

Capture of 2023-03-15:

"When you create a GOV.UK One Login, it will automatically generate a unique identifier."

"All content is available under the"

In the capture of 2022-09-23; not in the capture of 2022-10-29.

"All content is available under the Open Government Licence v3.0 , except where otherwise stated"

Not in the capture of 2022-09-23; in the capture of 2022-10-29.

"Open Government Licence v3.0 , except where otherwise stated"

In the capture of 2022-09-23; not in the capture of 2022-10-29.

"We’d like to set additional cookies so we can remember your settings, understand how people use the service and make improvements."

In the capture of 2022-04-19; not in the capture of 2022-07-27.

"We’d also like to use analytics cookies so we can understand how you use the service and make improvements."

Not in the capture of 2022-04-19; in the capture of 2022-07-27.

Capture of 2022-04-19:

"This is a new service – your feedback will help us to improve it."

Capture of 2022-07-27:

"This is a new service – your feedback (opens in new tab) will help us to improve it."

"Government Digital Service (GDS)"

In the capture of 2022-04-19; not in the capture of 2022-07-27.

"Government Digital Service (GDS) , part of the Cabinet Office."

Not in the capture of 2022-04-19; in the capture of 2022-07-27.

", part of the Cabinet Office."

In the capture of 2022-04-19; not in the capture of 2022-07-27.

Capture of 2022-04-19:

"to find out how your personal information is collected and processed when you use the GOV.UK website."

Capture of 2022-07-27:

"GOV.UK privacy notice to find out how your personal information is collected and processed when you use the GOV.UK website."

"When you prove your identity with a GOV.UK account, we will:"

Not in the capture of 2022-04-19; in the capture of 2022-07-27.

"ask you for your passport details - we'll check these with HM Passport Office (HMPO)"

Not in the capture of 2022-04-19; in the capture of 2022-07-27.

"check your information with"

Not in the capture of 2022-04-19; in the capture of 2022-07-27.

"to make sure you've not been a victim of identity theft"

Not in the capture of 2022-04-19; in the capture of 2022-07-27.

"use Experian's data to ask you security questions that only you should know the answers to - Experian will also check that your answers match the information they already have about you"

Not in the capture of 2022-04-19; in the capture of 2022-07-27.

"HMPO and Experian will also become data controllers during this process."

Not in the capture of 2022-04-19; in the capture of 2022-07-27.

"We do not keep any information you give us when proving your identity, including your answers to the security questions."

Not in the capture of 2022-04-19; in the capture of 2022-07-27.

Capture of 2022-04-19:

"When you use a service that requires a GOV.UK account, we’ll receive information about the service when it directs you to create or sign in to an account."

Capture of 2022-07-27:

"When you use a service that requires a GOV.UK account, we’ll receive information about the service when it directs you to:"

"create or sign in to an account"

Not in the capture of 2022-04-19; in the capture of 2022-07-27.

"other information needed to prove your identity, such as your name, date of birth, passport details and address history"

Not in the capture of 2022-04-19; in the capture of 2022-07-27.

"if you were able to prove your identity with your GOV.UK account"

Not in the capture of 2022-04-19; in the capture of 2022-07-27.

"what organisations, services or information we used to prove your identity"

Not in the capture of 2022-04-19; in the capture of 2022-07-27.

"improve the GOV.UK account (using Google Analytics data)"

In the capture of 2022-04-19; not in the capture of 2022-07-27.