@openrightsgroup@social.openrightsgroup.org To be clear: it is not the verification that puts privacy at risk, it is the implementation that does so. It is one of the many side-effects of the UK's aversion to ID's and citizen registration. If that would have existed (like in other countries), the government could have provided a public authentication and authorisation service (cf. the Belgian e-ID, or the Dutch Digid) which could do the verification, and only return yes/no, and no privacy sentitive data.