Regulatory Friday

Friday – 19 Sept 2025 - By Mediajem Compliance

🕑 Estimated read time: 2 minutes

The DUAAA: What It Means for Organisations

On Friday 19th September, the UK’s Digital Identity and Attributes Trust Framework (DUAAA) came into effect. This marks a major milestone in the way organisations handle digital identity and verification. DUAAA sets out rules to ensure digital ID systems are trustworthy, secure, and interoperable across sectors.

Who Needs to Take Note?

While this may sound like a niche regulatory update, the reality is much broader. DUAAA applies to any organisation involved in identity verification or handling of attributes such as age, qualifications, or residency. That includes:
- SMEs using third-party ID verification tools
- Charities managing staff and volunteer checks
- Schools and education providers verifying student data
- Health organisations dealing with patient identity
- Fintechs and crypto platforms meeting AML/KYC obligations

Practical Steps You Can Take

1. Audit your current ID and attribute verification processes.
2. Check contracts with providers to ensure DUAAA compliance.
3. Update policies to reflect new trust and interoperability standards.
4. Train staff handling ID checks on the new framework.

Why This Matters

Digital identity is becoming central to trust in every sector. Whether you are onboarding clients, checking volunteers, or meeting AML requirements, DUAAA signals the UK’s direction of travel. Being compliant early strengthens trust, avoids disruption, and reassures funders, regulators, and partners.

Next Steps

At Mediajem Compliance, we simplify regulatory change into practical action. If you’d like help reviewing your processes or updating your policies:
📩 DM me
🌐 Visit mediajemcompliance.com
📧 Email info@mediajemcompliance.com