In December 2024, we blogged about OfDIA’s work to explore how the wider take up of UK qualified trust services across the economy might complement the evolving UK digital identity ecosystem. In August 2025, we launched a call for views on trust services.
We have now published the findings from the 2025 call for views.
Hot on the heels of the publication on 11 June of a second post-implementation review of the 2016 EITSET Regulations, this means we are starting to get a clearer view of barriers which might be holding back the UK trust services market and the steps that may unlock growth.
What are trust services?Trust services are digital tools that help people and businesses trust the authenticity and integrity of digital transactions and records. They include electronic signatures, electronic seals, electronic time stamps, electronic registered delivery services and certificates for website authentication. For example, e-signatures and e-seals can help show that a digital record is genuine and has not been altered.
Providers can offer different types of trust services with different levels of assurance. Qualified trust services offer the highest level of assurance, as qualified trust services must meet higher security and identity verification standards than non-qualified services. In addition, both the trust services themselves and the organisations who provide them are independently assessed by an accredited conformity assessment body. This level of assurance can support high-value transactions such as property transfers.
Enabling the adoption of trust servicesDespite the potential of qualified trust services to support the reliability of the UK's digital economy, there are currently no UK-registered qualified trust service providers. At OfDIA, we have been looking into why — and what government can do about it.
Our FindingsPost Implementation Review
We found that the 2016 EITSET Regulations remain legally effective and continue to operate as intended. However, market activity has continued to be low over the five years since the last post implementation review of the Regulations was completed. Organisations continue to rely on EU-regulated providers; and the EU has updated its framework by introducing new service types and standards under eIDAS 2.0, creating further divergence from the UK's approach and operational uncertainty for providers. The absence of mutual recognition between the UK and EU following EU Exit for trust services provides fewer incentives for providers to enter the UK market.
Call for Views
Although the number of responses to OfDIA’s 2025 call for views was relatively small, the findings were indicative of key trends. Respondents highlighted several barriers to adoption, including low market awareness and the cost and complexity of certification. Responses also pointed to the need for stronger public sector adoption and greater clarity on how trust services fit alongside digital verification services as defined under the Data (Use and Access) Act 2025. Another consistent message was the importance of international interoperability, particularly with the EU.
What will OfDIA do with this new information?As part of the government's commitment to supporting economic growth and the digitisation of services, OfDIA will do further work to enable the adoption of qualified trust services in the UK, to make the UK a more attractive market for qualified trust service providers, and to encourage international interoperability of UK trust services.
seen at 18:30, 19 June in Enabling digital identity.