We review vendors based on rigorous testing and research but also take into account your feedback and our affiliate commission with providers. Some providers are owned by our parent company.
Learn more
vpnMentor was established in 2014 to review VPN services and cover privacy-related stories. Today, our team of cybersecurity researchers, writers, and editors continues to help readers maintain their online freedom in partnership with Kape Technologies PLC, which also owns the following products: Holiday.com, ExpressVPN, CyberGhost, and Private Internet Access which may be ranked and reviewed on this website. The reviews published on vpnMentor are believed to be accurate as of the date of each article, and written according to our strict reviewing standards that prioritize professional and detailed examination by the reviewer, taking into account the technical capabilities and qualities of the product together with its commercial value for users. The rankings and reviews we publish may also take into consideration the common ownership mentioned above, and affiliate commissions we earn for purchases through links on our website. We do not review all VPN providers and information is believed to be accurate as of the date of each article.
Advertising Disclosure

vpnMentor was established in 2014 to review VPN services and cover privacy-related stories. Today, our team of cybersecurity researchers, writers, and editors continues to help readers maintain their online freedom in partnership with Kape Technologies PLC, which also owns the following products: Holiday.com, ExpressVPN, CyberGhost, and Private Internet Access which may be ranked and reviewed on this website. The reviews published on vpnMentor are believed to be accurate as of the date of each article, and written according to our strict reviewing standards that prioritize professional and detailed examination by the reviewer, taking into account the technical capabilities and qualities of the product together with its commercial value for users. The rankings and reviews we publish may also take into consideration the common ownership mentioned above, and affiliate commissions we earn for purchases through links on our website. We do not review all VPN providers and information is believed to be accurate as of the date of each article.

UK to Mandate Digital IDs, Raising Cybersecurity Concerns

UK to Mandate Digital IDs, Raising Cybersecurity Concerns
Andrea Miliani Published on October 04, 2025 Cybersecurity Researcher

The Prime Minister of the United Kingdom announced last week a new digital ID scheme that will be mandatory for all workers, presented as part of a strategy to combat illegal employment. The measure has raised concerns among cybersecurity experts.

According to the official announcement shared by the UK government, the digital ID will be free and mandatory for Right to Work checks. It is also expected to streamline access to essential government services such as driving licences, tax records, welfare, and childcare.

UK citizens and legal residents will hold their new digital ID on their smartphones, without the need for a paper document, the way they use contactless mobile payment or the National Health Service (NHS) app.

“There will be no requirement for individuals to carry their ID or be asked to produce it - but digital ID will be mandatory as a means of proving your Right to Work,” states the document. “This will stop those with no right to be here from being able to find work, curbing their prospect of earning money, one of the key 'pull factors' for people who come to the UK illegally.”

According to The Guardian, the measure has been criticized by cybersecurity experts, who describe the system as “an enormous hacking target.” The digital ID will include personal details such as names, photos, dates of birth, residence status, and nationalities. However, the government has not yet explained how this data will be secured or what safeguards will be in place.

The scheme is modeled on digital ID systems in countries such as Australia, India, Denmark, and Estonia, all of which have previously suffered breaches by malicious actors.

Some experts also think that implementing the scheme will be “extremely challenging,” while others fear it could become a surveillance system. The government said it would come into use by 2029.

The announcement comes amid a wave of cyberattacks on major UK organizations, including the Marks & Spencer data breach that exposed millions of customers’ personal data, and the recent Jaguar Land Rover cyberattack that disrupted operations, affecting over 60,000 workers in the UK for about a month.

About the Author

Andrea is a seasoned tech journalist with a growing passion for cybersecurity, covering cyberattacks, AI breakthroughs, and the latest trends shaping the future of technology.

Please, comment on how to improve this article. Your feedback matters!

Leave a comment

This field must contain more than 50 characters

The field content should not exceed 1000 letters

Sorry, links are not allowed in this field!

Name should contain at least 3 letters

The field content should not exceed 80 letters

Sorry, links are not allowed in this field!

Special characters are not allowed in the Name field

Please enter a valid email address