citiesabc, first_page
UK Pubs Can Now Accept Digital ID for Alcohol Sales as Cybersecurity Experts Warn Privacy Must Come First
16 Sept 2026
New rules allowing pubs, restaurants, shops and other licensed venues in England and Wales to accept digital proof of age could make everyday age checks faster, but cybersecurity expert John Pepper says the success of the system will depend on how securely identities are verified, stored and shared.
16 September 2026 — Pubs, bars, restaurants, music venues and shops across England and Wales can now choose to accept digital proof of age when selling alcohol, following new rules that came into force on 15 September. Customers can use certified smartphone-based services to prove they are over 18 alongside existing physical forms of identification.
The change brings digital identity further into everyday public life, particularly across hospitality and the night-time economy. While the government says the system can make age checks quicker, easier and more secure, cybersecurity specialist John Pepper, CEO and founder of Managed247, argues that moving identification onto a smartphone does not automatically make the process safer. Instead, security will depend on how the wider digital identity ecosystem handles authentication, personal information and access.
Digital ID moves into everyday hospitality
Until now, mandatory licensing conditions in England and Wales required acceptable identification for alcohol sales to include physical security features such as holograms or ultraviolet markings. The new framework removes that barrier and allows licensed venues to use registered Digital Verification Service providers for age checks.
Under the revised guidance, businesses cannot simply look at a digital ID displayed on a phone and decide whether it is genuine. The identification must be verified through a Digital Verification Service that is certified and listed on the official register, with the service meeting the required level of confidence under the UK digital verification framework.
For hospitality operators, the change could reduce dependence on passports and driving licences while creating a faster route through age-restricted transactions. However, it also introduces new cybersecurity responsibilities because the verification process now depends on phones, accounts, software providers and digital infrastructure.
Pepper said:
Digital ID could make age verification more convenient, but it is crucial not to assume that moving an ID check onto a smartphone automatically makes it more secure. The technology behind the apps and checks becomes just as important as the ID itself.
The cybersecurity risk moves with the identity
Digital identity can contain information that is highly valuable to criminals. If an account is compromised or a device is stolen, the consequences could extend beyond losing access to a single application.
Pepper warns that stolen identity information can support impersonation, fraudulent account access and more convincing attempts to bypass other security controls. This makes the protection of digital identity accounts increasingly similar to the protection of online banking.
The key question is how securely someone’s identity is being verified and protected throughout that process,” he said. “A digital ID can contain highly valuable personal information, and criminals are increasingly interested in data that can help them impersonate someone, bypass security checks or build a more convincing profile of an individual.
The issue becomes more complex because digital age verification can involve several organisations. Users must trust the application itself, the identity provider and the businesses relying on the verification result, while operators must be able to identify suspicious activity quickly.
Less data could make digital ID more private
Despite the risks, digital identification could also reduce unnecessary sharing of personal information if systems are designed correctly.
A pub checking whether someone can legally purchase alcohol does not necessarily need their full date of birth, home address or other identifying details. In many circumstances, the venue only needs confirmation that the customer is over 18.
That principle is one of the potential privacy advantages of digital verification. Instead of showing a physical document containing several pieces of personal information, a digital system can potentially disclose only the attribute necessary for the transaction.
“The less personal information that is shared and stored, the less there is available to criminals if a system is ever compromised,” Pepper said.
The government’s framework similarly requires digital proof-of-age services to meet defined standards around identity confidence and confirming that the credential belongs to the person presenting it.
For businesses, data minimisation could therefore become as important as authentication. Collecting information simply because it is technically available increases the amount of personal data that could be exposed during a breach.
Digital identity becomes part of urban infrastructure
The introduction of digital proof of age also reflects a wider transformation in how residents interact with services across cities.
Identity checks already sit behind banking, employment, travel and access to online services. Extending digital verification into pubs, retail and hospitality brings that infrastructure into another part of ordinary urban life.
For businesses, the operational benefits could include quicker checks and less reliance on physical documents. For customers, digital credentials may eventually reduce the number of occasions when they need to disclose unnecessary personal information.
However, convenience will depend on public trust. A system that is difficult to secure, confusing to use or vulnerable to fraud could undermine adoption regardless of its technical capabilities.
Pepper argues that both individuals and businesses will therefore need to treat digital identity as a security asset rather than a simple convenience feature.
“For people using these apps, the important thing is to treat their digital identity with the same care they would give their bank account,” he said. “Keep devices and apps updated, use strong authentication and be cautious about unexpected requests for identity information or access to your account.”
Businesses will need to balance speed with trust
The shift to digital proof of age gives hospitality businesses another option rather than eliminating traditional identification. Customers can continue using physical ID, while venues can decide whether they want to introduce digital verification.
That flexibility could encourage gradual adoption, but it also means businesses will need to understand which providers meet the regulatory requirements and how those services fit into existing age-verification processes.
Strong authentication, controlled access and rapid detection of suspicious behaviour will be important, according to Pepper. Just as importantly, businesses should avoid collecting or retaining information that is not required to complete the check.
As digital identity becomes increasingly embedded in everyday services, its success will depend on more than convenience. The central challenge will be proving that faster digital interactions can coexist with strong cybersecurity, limited data collection and public confidence.
About Managed247
Managed247 is a UK-based managed IT and cybersecurity services provider. The company supports organisations with cybersecurity, infrastructure and technology management, with CEO and founder John Pepper providing the analysis for this release.
Sources
- UK Government, New rules pave the way for businesses to adopt digital proof of age for alcohol sales, 15 September 2026. GOV.UK
- Office for Digital Identities and Attributes, Enabling the use of digital verification services for alcohol age checks in England and Wales, 30 June 2026. Enabling Digital Identity
- UK Government, Revised guidance issued under section 182 of the Licensing Act 2003, September 2026. GOV.UK
- Managed247 / Journalistic.org, Digital ID: Cybersecurity expert warns personal data must be protected, September 2026.
Share
Sara Srifi
Sara is a Software Engineering and Business student with a passion for astronomy, cultural studies, and human-centered storytelling. She explores the quiet intersections between science, identity, and imagination, reflecting on how space, art, and society shape the way we understand ourselves and the world around us. Her writing draws on curiosity and lived experience to bridge disciplines and spark dialogue across cultures.
