The law changed on Tuesday

The rules for buying a drink have changed. A shift in the law came into force on Tuesday 15 September 2026. It affects England and Wales. The government has updated the Licensing Act, legislation which regulates how and when alcohol can be sold to the public in licensed premises. This change means businesses can now legally accept a digital form of identification as proof of age. They are permitted to do so. They are not required to. The update is designed to give people an alternative to carrying physical ID.

This change applies to any business that sells alcohol. That includes pubs. It includes supermarkets and corner shops. For the first time, door staff at nightclubs or security at music festivals can also accept a digital proof of age instead of demanding to see a physical card. The change is permissive. It is not a command. Each business will make its own decision about whether to adopt the technology, weighing the convenience for customers against the potential costs and security risks of a new system. Many will wait and see. Some will never change.

For customers, the new rules offer a different way to prove their age. They do not have to use it. The traditional methods are still valid. A driving licence in a wallet or a passport in a bag will continue to be accepted forms of identification across the country. The digital option is intended simply as an alternative, a way to avoid carrying important and valuable documents on a night out. Your phone can now do the job. The system is entirely voluntary. No one will be forced to download an app or create a digital identity to buy a pint of lager or a bottle of wine.

The legal update is specific. It is tightly focused. The amendment only concerns the Licensing Act and the verification of age for the purchase of alcohol and for entry into certain venues. It does not create a national identity scheme. It does not force citizens to register their details with the government. The choice to accept the new digital proof remains with the individual pub landlord, the supermarket manager or the festival organiser. They can say no. The choice to use it also remains with the public. You can stick with your plastic card. This is about choice, not compulsion.

This is not a state ID app

This system is not a single government application. There is no central state ID card on your phone. Instead, the government has created a set of rules for private companies to follow. A rulebook. The rules are called the digital identity and attributes trust framework, a lengthy title for a simple idea of secure, verified identity checks. This framework is managed by the Department for Science, Innovation and Technology, which sets the standards that companies must meet before they can offer digital ID services. It is a market. A regulated one.

Several companies have sought certification. A few have received it. These are the businesses the government trusts to handle your data securely and to verify your identity correctly against official documents like passports. One of the most prominent certified providers is Yoti, a technology company that has been developing digital identity applications for several years. Other certified organisations include the Post Office and Lloyds Bank, all competing for a space in this new digital wallet market. To become certified, a firm must pass a rigorous audit conducted by the UK Accreditation Service, proving its technology is robust and its data protection practices are sound.

The process itself is designed for privacy. It is very simple. When you set up an account with a provider like Yoti, you scan a physical document, usually a passport or a driving licence, and verify your identity using the camera on your phone. The app then creates a secure digital version of your credentials. When a bartender or bouncer needs to check your age, you open the app and it displays a QR code on your screen. The staff member scans this code. The crucial part is what happens next. The venue’s device does not see your name, your address, or your actual date of birth. It only receives a simple confirmation. Yes, this person is over eighteen. That is all.

This is called attribute sharing. The only attribute being shared is age verification. The goal is data minimisation, a core principle of the government’s framework where only the absolute minimum amount of information necessary for a transaction is exchanged. It is a fundamental difference from handing over a physical driving licence, which reveals your name, address, and full date of birth to a stranger for a momentary check. The digital system, in theory, protects this personal information from being unnecessarily exposed, copied or noted down. Your data stays with you. Your privacy is protected.

Pubs and shops can say no

This is not compulsory. The legal amendment to the Licensing Act, which took effect across England and Wales from 15 September 2026, simply permits businesses to accept digital ID, it does not mandate it. The choice is theirs. Pubs and shops can say no. For some, the commercial logic will be compelling, particularly for venues like nightclubs, major concert arenas or summer festivals where quickly processing long queues is critical to maximising revenue during peak hours. Faster queues mean more sales. A smoother entry process might also capture revenue from customers who have forgotten their physical driving licence and would otherwise be turned away.

Adoption has a price. Business owners must weigh the initial investment in new hardware, which could range from dedicated scanning devices to complex software integration with their existing electronic point of sale systems. This is not a one off cost. There is also the considerable and recurring logistical challenge of training large numbers of staff, many of whom may be temporary or part time, to operate the new systems correctly. Every bouncer and bartender must be taught not only how to use the scanner, but also what the protocols are for handling a technological failure, such as a customer’s phone running out of battery or a weak mobile signal preventing the app from connecting to its server. That training takes time. It also costs money.

Beyond the practical hurdles lies the question of legal risk. Technology is not infallible. The greatest concern for any publican or store manager is liability, because if a sophisticated fake app fools their scanner and they serve a minor alcohol, the law is unambiguous. The legal consequences, which can include unlimited fines for the business and the potential suspension of its alcohol licence under the Licensing Act, fall squarely on the venue itself, not on the technology company like Yoti that provided the digital ID app. The pub pays the price. For this reason, major trade bodies representing the hospitality and retail sectors are adopting a cautious stance, advising members to assess the risks carefully. The general recommendation is to conduct small scale trials or wait to see how robust the technology proves in the real world before committing to a full, chain wide rollout. They will watch and wait.

Convenience comes with questions

For the public, the primary appeal is simple. It is convenience. Forgetting your ID will no longer mean an early end to the evening. The change offers an alternative to carrying a physical document, especially a passport, which is both valuable and risky to take on a night out. Losing it is a disaster. Replacing it involves a £93.50 fee and weeks of waiting, a significant penalty for a moment of carelessness in a crowded bar. A driving licence is more portable but still a physical item that can be lost or stolen. A phone, however, is already a constant companion for millions, its presence on a trip to the pub, a festival or a concert all but guaranteed, making it the logical place to store proof of age. It is one less thing to remember. One less item to lose.

This convenience comes with conditions. Big ones. While the government’s digital identity framework specifies that certified apps should only share the fact a person is over eighteen, not their name, date of birth or address, public trust in any system holding personal data is fragile. Data breaches are now a routine feature of modern life. People worry constantly about their information. If the central database of a certified provider like Yoti were to be compromised by organised criminals, releasing the personal details of millions of users onto the dark web, the lines of accountability would become dangerously blurred. Users would face an immediate risk of identity fraud, yet it would be unclear who was legally and financially responsible for the damage. The user is left wondering who carries the risk, a confusion which might make them hesitate before scanning their digital credentials at the bar. It is a new system. It remains unproven.

There are also more immediate, practical problems. A dead phone is no ID. A cracked screen might make a QR code completely unreadable, while poor mobile signal inside a basement club or overloaded venue Wi-Fi at a festival could stop the verification check from working at all. In those moments the customer is left unable to prove their age despite having the app installed and ready. The phone becomes a single point of failure. Beyond these technical hitches is the problem of digital exclusion, a social divide the new system threatens to widen. Anyone without a modern smartphone, whether through personal choice, age or financial constraint, is simply left out of this new convenience. They are forced to rely on the old methods of carrying a passport or a driving licence, making them feel like second class citizens. Not everyone has a smartphone. Not everyone wants one. This is a system for some, not all.

It is one part of a bigger plan

This is part of a plan. A very big plan. For years, the government has been pursuing the goal of a universal digital identity framework. This initiative, now led by the Department for Science, Innovation and Technology, is the latest expression of that long held ambition. The department has run multiple public consultations, publishing policy papers that sketch out a future where secure, reusable digital identities are commonplace. The ultimate vision is a system where digital credentials on a phone could be used for renting a flat, opening a bank account, starting a new job or accessing government services online. Allowing digital ID for alcohol sales is a calculated first step, a low stakes test case to introduce the public to the concept in a familiar setting. It is about digitising identity itself. A quiet revolution is beginning.

The political context is crucial. Britain does not have a national identity card. The idea is deeply controversial. The last major attempt by a government to introduce a compulsory scheme during the 2000s failed, collapsing under intense, coordinated opposition. A broad coalition of campaigners and politicians united to fight the proposals, warning they would lead to the creation of a ‘database state’. They feared function creep. They feared state surveillance. They feared the erosion of the principle that citizens are not required to prove their identity to the state without reason. That bruising political memory means a compulsory, centralised identity system remains completely off the table. The opposition was too strong. The idea died.

This new system is designed to avoid that history. It is a deliberate pivot. Instead of a single, mandatory government database, the plan relies on a regulated market of competing private companies. The government does not issue the ID. It does not hold the data. Its role is that of a regulator, setting the rules through its digital identity and attributes trust framework, a detailed set of legally binding standards that accredited providers must meet to prove their systems are secure and their data protection is robust. This decentralised approach is a political calculation, intended to make digital identity more palatable to a sceptical public by offering choice while keeping the state at arm’s length. The official hope is that convenience will persuade people to sign up. The strategy aims to achieve widespread adoption through consumer demand and market forces, succeeding where government compulsion failed so publicly before. The government regulates. Private firms provide. The citizen chooses.

The system now faces its first tests

The law is now live. The system now faces its real world test. Its success is not guaranteed. The first indicator will be adoption, a simple measure of how many businesses and people actually choose to use this new technology after 15 September 2026. Watch the big retailers. Their choices matter most. The question is whether major supermarket chains like Tesco or Sainsbury’s will integrate the system at their thousands of checkouts across England and Wales, a decision that hinges on balancing the cost of new equipment against the promise of faster queues.

Beyond pure numbers, the system will be judged on its resilience. It will be watched closely. Security is paramount. Any reports of successful fraud attempts using cloned digital identities or technical failures that lock customers out of their accounts will be scrutinised by the press and regulators. A single, large scale data breach at one of the certified providers could poison the entire ecosystem, destroying public confidence and setting the project back years. Privacy advocates will monitor for function creep. They will watch for any sign of data being used for purposes other than age verification. The system must be robust. It must be secure.

If the technology proves itself reliable for buying a pint in a pub in Bristol or a bottle of wine in a corner shop, the ambitions of its backers go much further. It is a pilot for something bigger. The Department for Science, Innovation and Technology has already consulted on using the same digital identity framework for other age restricted or identity verified activities. This could include renting a car, checking into a hotel, or opening a new bank account without ever needing to present a physical passport or driving licence. The path from buying a beer to verifying your identity for a mortgage application is the one that ministers hope to build, one app at a time. The test starts in the pub. It does not end there.

Sources. Independent UK: Digital ID to be accepted as proof of age in pubs and shops under new laws. Independent Business: Digital ID can be accepted as proof of age for alcohol under new rules. Evening Standard: Digital ID can be accepted as proof of age for alcohol under new rules.

Analysis. Drafted with AI assistance from the sources listed above and reviewed by an editor before publication. Jnews links to the organisations it writes about.