Willing enthusiasm isn't enough

11:19 a.m., 8 October 2014, 18 months ago, someone saves a copy of the Transactions Explorer page of the Government Digital Service's performance platform:

Then someone updates HMRC digital team plights troth to wrong Liege and forgets about it ...

... until recently.

You will notice that GDS were trying to measure how digital central government is, department by department. The data they used is repeated below. You won't be surprised which department wins ...

Department	Digital take-up*	Total cost*	Data coverage*	Transactions per year
HM Revenue and Customs	91.90%	£528m	77.30%	1,233,662,926
Department for Transport	57.40%	£268m	73.60%	130,337,698
Home Office	4.83%	£1.43bn	76.20%	126,270,677
Department for Work and Pensions	17.20%	£3.77bn	95.80%	107,781,180
Department for Business, Innovation and Skills	82.40%	£242m	54%	40,513,661
Department of Health	40.80%	£308m	61.90%	33,647,220
Department for Environment, Food and Rural Affairs	86.60%	£101m	76.20%	22,580,710
Ministry of Justice	21.40%	£5.02m	52.40%	8,508,685
Cabinet Office	100%	£32.1k	100%	4,870,984
Department of Energy and Climate Change				1,331,834
Foreign and Commonwealth Office				549,065
Department for Communities and Local Government				515,756
Ministry of Defence				477,707
Department for Education				245,144
Attorney General's Office				65,658
Department for Culture, Media and Sport				33,589
Department for International Development				21,001
* Figures are based on data for high-volume services only

... yes, the Cabinet Office, which includes GDS, has 100% digital take-up (whatever that means) and 100% data coverage (whatever that means) and it's the winner.

That was 18 months ago. The figures were questionable.

Now, if you look at the services data on the performance platform, you find that GDS have stopped trying to measure digital take-up and data coverage. They list 802 public services and they have data on 571 of them which, between them, notch up 2.38 billion transactions p.a.

Take a look at GDS's data and you see that the 802 public services are divided up, department by department, as follows:

Department	No. services
Department for Business, Innovation & Skills	177
Department for Environment, Food & Rural Affairs	118
Department of Health	98
Department for Transport	77
Department of Energy & Climate Change	67
Department for Work and Pensions	48
Department for Culture, Media & Sport	43
Home Office	41
HM Revenue & Customs	34
Ministry of Justice	29
Foreign & Commonwealth Office	18
Department for Education	11
Cabinet Office	11
HM Treasury	10
Valuation Office Agency	9
Department for International Development	3
Department for Communities and Local Government	3
Ministry of Defence	2
Attorney General's Office	2
UK Export Finance	1

Does the Department for Communities and Local Government really offer only three services? And the Ministry of Defence just two?

Again, the figures seem questionable.

GDS keep promising us canonical registers. On which government policy can be based rationally. Their performance platform omits data on the Government Gateway. And it omits data on the Basic Payment Scheme for farmers. And it doesn't look as though GDS can even count public services.

The Office for National Statistics have got a lot of work to do to bring GDS up to speed on data science. Willing enthusiasm isn't enough.

How can GDS be ready to build Government as a Platform?

Tomorrow they're attending – or possibly even hosting – a seminar on blockchain, Blockchain: exploring uses in government. Are they ready for that?

Willing enthusiasm isn't enough

11:19 a.m., 8 October 2014, 18 months ago, someone saves a copy of the Transactions Explorer page of the Government Digital Service's performance platform:

Then someone updates HMRC digital team plights troth to wrong Liege and forgets about it ...

... until recently.

You will notice that GDS were trying to measure how digital central government is, department by department. The data they used is repeated below. You won't be surprised which department wins ...

Openness should include farmers

One of the standing jokes about the Government Digital Service's identity assurance scheme, GOV.UK Verify (RIP), is the list of public services using it:

How can DEFRA's Rural Payments service be connected by GOV.UK Verify (RIP)? DEFRA don't have a rural payments service, as we always point out, at least not a computerised one – the computerised system GDS tried to build collapsed and farmers are all applying for their money using pencil and paper now, as a result of GDS's failure. There's nothing for GOV.UK Verify (RIP) to connect farmers to.

It's misleading to pretend that GOV.UK Verify (RIP) connects farmers and their agents to the Rural Payments Agency's Basic Payment Scheme (BPS) and, if you're in any doubt, just look at the BPS dashboard on GDS's performance platform:

Couldn't be much clearer than that, could it? Nothing's happened since June 2015.

Except that that's not right. Take a look at the Rural Payments Agency's 7 March 2016 blog post, Start your 2016 Basic Payment Scheme application now. It's all on-line.

Take a look at their website, Everything rural businesses need to know about the Basic Payment Scheme (BPS) in 2016 - including how to claim BPS online using the Rural Payments service.

Check with the National Farmers Union. And with the Farmers Gazette, 22 March 2016, Thousands of farmers log on as 2016 BPS application window opens.

Watch the film:



Farmers and their agents have been able to claim on-line since 2 February 2016. History didn't stop in June 2015, pace GDS's performance platform.

We seem to have another butcher's thumb on the scales case here like the Government Gateway. Why is the performance platform incomplete? Why doesn't it include data on either the Government Gateway or the live rural payments system? Why are GDS ignoring BPS?

Openness should include farmers

One of the standing jokes about the Government Digital Service's identity assurance scheme, GOV.UK Verify (RIP), is the list of public services using it:

How can DEFRA's Rural Payments service be connected by GOV.UK Verify (RIP)? DEFRA don't have a rural payments service, as we always point out, at least not a computerised one – the computerised system GDS tried to build collapsed and farmers are all applying for their money using pencil and paper now, as a result of GDS's failure. There's nothing for GOV.UK Verify (RIP) to connect farmers to.

The gateway to openness

"The annual end submission date for tax self assessment in January is one of the critical events in the year for the Government Gateway, HMRC and government IT systems as a whole". So said David Hargreaves on 25 February 2016 in Managing the self assessment tsunami:

This year was the largest yet. The Government Gateway processed over 2.9 million self assessment submissions in January. This was just part of almost 7.5 million transactions it handled over the whole month, and the 10 million online self assessments processed in 2015. The volumes topped 400,000 on Friday 29 January. That’s the equivalent of 8.5 submissions per second.

The Government Gateway is clearly quite a substantial cross-government platform. And these are notable transaction volumes.

And yet, if you try to find anything out about the Government Gateway on the Government Digital Service's performance platform, look what you get:

It looks to you as though there's no such thing as the Government Gateway.

The same happens if you search data.gov.uk. You get no data.

It's as though the Government Gateway doesn't exist. Despite the Government Gateway having received 12.9 million 2015-16 self-assessment tax returns. And who knows how many VAT returns. And PAYE/NI returns. And corporation tax returns. And at what cost.

Given that the UK aims to be the most "open" nation on earth when it comes to government data, this is a glaring omission:

• The open data enthusiasts claim that openness leads to innovation – the omission of Government Gateway data is stymying innovation.
• The data scientists argue that rational government policy depends on the availability of data – Government Gateway data is not available and therefore policy is likely to be irrational.

Why is data relating to the Government Gateway hidden?

There's no point guessing. There's good reason though to insist that the omission be corrected, quickly, for the general good.

The gateway to openness

"The annual end submission date for tax self assessment in January is one of the critical events in the year for the Government Gateway, HMRC and government IT systems as a whole". So said David Hargreaves on 25 February 2016 in Managing the self assessment tsunami:

This year was the largest yet. The Government Gateway processed over 2.9 million self assessment submissions in January. This was just part of almost 7.5 million transactions it handled over the whole month, and the 10 million online self assessments processed in 2015. The volumes topped 400,000 on Friday 29 January. That’s the equivalent of 8.5 submissions per second.

The Government Gateway is clearly quite a substantial cross-government platform. And these are notable transaction volumes.

And yet, if you try to find anything out about the Government Gateway on the Government Digital Service's performance platform, look what you get:

Insolvent solutions

11:19 a.m., 8 October 2014, 18 months ago, someone saves a copy of the Transactions Explorer page of the Government Digital Service's performance platform:

Then someone updates HMRC digital team plights troth to wrong Liege and forgets about it.

Were you by chance to view the page source for the Transactions Explorer, in an idle moment, you would see the following scripts:

<script id="ga-params" type="text/javascript">   var GOVUK = GOVUK || {};   GOVUK.Analytics = GOVUK.Analytics || {};   var _gaq = _gaq || [];   _gaq.push(['_setAccount', 'UA-26179049-1']);   if(document.domain=='www.gov.uk') {     _gaq.push(['_setDomainName', '.www.gov.uk']);   } else {     _gaq.push(['_setDomainName', document.domain]);   }   _gaq.push(['_setAllowLinker', true]);     // track pixel density ratio   if (window.devicePixelRatio) {     _gaq.push(['_setCustomVar', 11, 'Pixel Ratio', String(window.devicePixelRatio), 2 ]);   } </script> ... <script type="text/javascript">   _gaq.push(['_gat._anonymizeIp']);   _gaq.push(['_trackPageview']);   (function() {     var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;     ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';     var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);   })(); </script>

What's that all about?

That's how you get Google Analytics to compile performance statistics for you. A lot of those occurrences of "ga" indicate Google Analytics. Statistics are being compiled for GDS's www.GOV.UK domain, the property ID of which is UA-26179049-1.

You stick that script into all the web pages you want to monitor. And GDS did. Until 2 June 2015, when they upgraded from Google Analytics to Universal Analytics.

Universal Analytics is much better, Google tell us. In particular:

What data does the tracking snippet capture? When you add either of these tracking snippets to your website, you send a pageview for each page your users visit. Google Analytics processes this data and can infer a great deal of information including: The total time a user spends on your site. The time a user spends on each page and in what order those pages were visited. What internal links were clicked (based on the URL of the next pageview). In addition, the IP address, user agent string, and initial page inspection analytics.js does when creating a new tracker is used to determine things like the following: The geographic location of the user. What browser and operating system are being used. Screen size and whether Flash or Java is installed. The referring site.

Perfect for calculating your advertising revenue. Or maintaining the audit trail in a transactional system. Or providing circumstantial evidence to corroborate someone's alibi.

But GDS have spotted that people don't like being kept under surveillance. And so a month ago they told us that:

Analytics and performance To gather performance data for the [GOV.UK Verify (RIP)] service we create our own logging. During the early days of private beta, we started measuring performance using our own logging system, but we now make use of Piwik, an open source web analytics system, which we host ourselves. We chose this so that we could avoid sending data to third party web analytics companies.

That's GDS being sensitive to user preferences, isn't it.

No, it isn't. Piwik collects all the same surveillance data that Google's analytics products do. Maybe more. GDS still get that surveillance data. It's just that Google don't.

Don't they?

What is there to stop Google monitoring www.GOV.UK if they want to?

Nothing.

And not just Google.

What is promoted by GDS as the solution to a problem, isn't. It might look at first blush like a solution. But it's a solution that doesn't solve the problem. It's an "insolvent solution". It doesn't work.

Piwik isn't GDS's only insolvent solution. Their adoption of agile as the exclusive software engineering methodology is another. Ditto Government as a Platform. And the list goes on.

----------

Updated 21.4.16 1

The DMossEsq leader-writers expected a storm of protest over the post above. Hundreds of irate lexicographers complaining about the phrase "insolvent solution".

We had an answer prepared. Solutions have obligations. A solution that doesn't solve the problem it was designed for cannot discharge its liabilities. Which is pretty well the definition of insolvency.

But nobody complained.

Not about that.

What did exercise hundreds of distraught callers to DMossEsq's Pyongyang call centre was GDS's blog post earlier this month, Capturing comprehensive analytics across GOV.UK:

To help us analyse and measure the performance of our content we use Google Analytics, which records the pages users visit.

Are GDS using Piwik, please see above, or are they using Google Analytics? Which is it?

The answer seems to be Piwik for GOV.UK Verify (RIP) and otherwise Google Analytics.

One way and another, don't worry – you are being properly surveilled (surveyed?) by GDS and Google.

Or actually, perhaps you should worry just a little bit. This afternoon GDS published Rebuilding GOV.UK’s publishing platform - an update.

Under the heading Why this work is such a high priority you might expect to see reasons like "to help spend the £450 million the Chancellor unexpectedly gave us" or "one of the joys of agile software engineering is that the job is never done". But, no, GDS give seven other reasons for GOV.UK being an insolvent solution, including this:

5. Querying analytics across GOV.UK At the moment we can’t follow user journeys across different types of content because of the different applications involved. This change [the re-building of GOV.UK] will mean we’ll have a much better understanding of user journeys, and the improvements we need to make.

It seems that GDS have inadvertently created 141 silos within GOV.UK. Silos that can't communicate with each other. And can't be monitored easily from the performance platform dashboard bunker under Holborn Towers. This situation is demonstrably insufferable:

It may well be that not a single human being has ever complained about this matter in any of GDS's user experience laboratories/interrogation centres. But it's affecting "GDS efficiency". And that means it's a user need.

"We expect this work will continue to dominate our roadmap for much of the 2016 to 2017 financial year", say GDS. What will they find to dominate their roadmap in 2017-18?

Updated 21.4.16 2

Literally years before yesterday, the UK Home Office tried to introduce government-issued ID cards. The project failed spectacularly.

But Whitehall didn't give up. The National Identity Scheme (NIS) was promptly replaced with the Identity Assurance Programme (IDAP), which incorporates GOV.UK Verify (RIP), and work continued.

The problem diagnosed with the NIS was the NIR, the National Identity Register. Get rid of the NIR, and then surely Whitehall's will would prevail.

GOV.UK Verify (RIP) would succeed where the NIS had failed, as long as there was no NIR. That's why the IDAP people came up with the notion of "identity providers", now known less sinisterly as "certified companies".

Plough your way through the GOV.UK Verify (RIP) registration process, and after a while you get to a screen something like this:

You may see different "identity providers" when you try to register. GDS are forever changing their recommended list.

Click on that Why there's a choice of companies link, and this is what you see:

Why there’s a choice of companies More certified companies means a more secure system – information is not stored in one place, but is split up in lots of different places, making it safer. It’s your right to choose who you want to deal with from these companies. It’s also your right to change which company you deal with at any time. When verifying your identity, these companies can use their own records, and they’re certified to access information like credit records. They do this to check information you provide from passports and driving licences is correct. Certified companies meet strict government privacy standards, so you can trust them with your information. They won’t use your information for any other purpose without your consent. There’s no effect on your credit score. Choose a company

"More certified companies means a more secure system" – no it doesn't.

"... information is not stored in one place, but is split up in lots of different places, making it safer" – or less safe.

Registering with a GOV.UK Verify (RIP) "identity provider" requires you to hand over the most minute details of your passport and driving licence to total strangers. When you look into the matter, you find that your personal information is stored all over the world, beyond any possibility of your control or even the UK government's.

GDS were told to do identity assurance with no NIR. They've ended up with eight of them, one per "identity provider".

In what way is GOV.UK Verify (RIP) the solution to the NIR problem? None. It's an insolvent solution.

Insolvent solutions

11:19 a.m., 8 October 2014, 18 months ago, someone saves a copy of the Transactions Explorer page of the Government Digital Service's performance platform:

Then someone updates HMRC digital team plights troth to wrong Liege and forgets about it.

RIP IDA – it tolls for thee

No need to say it, it goes without saying, it should be obvious to all but,

just in case it isn't obvious to all,

IDA is dead.

IDA, now known as "GOV.UK Verify (RIP)",

is the Cabinet Office Identity Assurance programme.

And it's dead.

"If Verify is the answer, what was the question?"

"Hi, Richard James here to give you an update on the Personal Tax Account".

Couldn't be more jovial, could it. That's the opening line in a charming little blog post published by Her Majesty's Revenue and Customs (HMRC) the other day, One million customers using the Personal Tax Account.

They're very proud of their new personal tax account. "34 different actions ... That’s how many things you can already do in the Personal Tax Account that would have previously meant a letter or phone to call to us".

One million customers? Everything HMRC does is in the millions. Apart from the things they do by the billion. One million HMRC customers for anything isn't news. It's reassuringly dull. Like the worthy little video they've released, reminiscent of the old Central Office of Information blockbusters on food hygiene or road safety.

But part way through this little gem of a post, what's this we read? "Have you tried it yet? ... From the Personal Tax Account sign in page you can now log in by setting up a Government Gateway account".

A Government Gateway account? Surely they mean a GOV.UK Verify (RIP) account?

No. HMRC mean what they say. A Government Gateway account. They're promoting the Government Gateway and not the Government Digital Service's GOV.UK Verify (RIP).

If you follow the Personal Tax Account link above, you'll find that HMRC do mention GOV.UK Verify (RIP) but only to warn you that if you use that to log in, then there is only a restricted service available. "You can also sign in using GOV.UK Verify [RIP], but you won’t be able to use some services":

The Government Gateway has worked for 15 years, allowing us to transact with scores of public services. By now it must have been instrumental in raising trillions of pounds of revenue.

Exactly how much revenue? How many transactions has it undertaken? How much does it cost? How many Government Gateway accounts are there? We don't know.

Mysteriously, there is no Government Gateway dashboard on GDS's performance platform. There should be.

A Government Gateway dashboard would reveal its colossal significance. And the ignorant vandalism of pretending that GOV.UK Verify (RIP) can replace it.

"We’ve come a long way since we publicly launched the account in December 2015". Yes. After two years of beta operation, GDS's GOV.UK Verify (RIP) has 487,000 verified accounts, less than half what HMRC's Personal Tax Account has achieved in four months. And GOV.UK Verify (RIP) can connect you to just nine public services according to GDS (including the rural payments service, which doesn't exist), while HMRC's Personal Tax Account already has 34 options.

GDS aim to change the declared status of GOV.UK Verify (RIP) from beta to live some time this month, April 2016. They've got 12 days left.

They can call it what they like but if it's live, it's live without HMRC. Which means it's dead. Because, as we always say, "on-line access to public services in the UK" means on-line access to HMRC.

CitizenSafe, also known as "GB Group plc", are one of GDS's "identity providers" for GOV.UK Verify (RIP). Making this announcement would properly fall to a minister, not a contractor. GDS recommend that five of their remaining "identity providers", including CitizenSafe, are unlikely to be able to verify your identity.

In the lethal custody of the Department for Work and Pensions (DWP), the Government Gateway has been neglected for years. Now someone seems to have paid it a bit of attention. An innovation, it sent DMossEsq's mobile phone a one-time password when he logged in to take a look at his personal tax account.

We have suggested recently that the Government Gateway should be taken away from DWP and given to HMRC. Perhaps it has been.

Like any system, the Government Gateway needs maintenance. Unlike the Government Gateway, GOV.UK Verify (RIP) can't handle companies and partnerships and trusts. Only individuals. If the Government Gateway dies of neglect, the UK won't have any tax revenue.

To do his identity-proofing, DMossEsq had to enter a bit of P60 information or payslip information or passport information. (Your P60 shows the tax you’ve paid on your salary in the tax year.) He chose the P60 option and that felt appropriate. That was the user experience.

By contrast, the user experience of handing over detailed passport, driving licence and credit history information to register for GOV.UK Verify (RIP), handing it over to a bunch of strangers, who share it with organisations all over the world, out of your control, feels entirely inappropriate.

That blog post of HMRC's. It wasn't just a chirpy piece of public information. It was also a death knell.

... never send to know for whom the bell tolls;

It tolls for thee.

----------

Updated 8.8.16

The chirpy Mr James has published another blog post about HMRC personal tax accounts.

He's got a lot to be chirpy about.

Last time we heard from him, in April 2016, there were one million active users, please see above. Now, four months later, there are 3½ million.

While HMRC have attracted 2½ million new users, the Government Digital Service (GDS) have added just 117,000 new GOV.UK Verify (RIP) accounts taking their total to about 796,000 on 31 July 2016.

Clearly most people are not using GOV.UK Verify (RIP) to access their personal tax accounts. They're using the Government Gateway. That's the identity assurance scheme that allows you as noted above to access public services without spraying your personal information all over the world.

At the moment, if you need to help your 94 year-old mother-in-law to access her personal tax account, you have to identify yourself to the Trusted Helper service via GOV.UK Verify (RIP). In future, Mr James tells us, it will be possible to use the Government Gateway instead.

GOV.UK Verify (RIP) may have been declared "live" in May 2016. But what people are using in their millions is the Government Gateway.


Updated 10.8.16

In the four months it has taken HMRC to add 2,500,000 users of one of its services, Personal Tax Accounts, please see above, GDS have added just 117,000 new GOV.UK Verify (RIP) victims. The DMossEsq slide rule suggests that HMRC are outperforming GDS by about 21:1.

GDS are onto the problem.

Yesterday they published GOV.UK Verify [RIP]: Technical delivery update, 9 August 2016.

They intend to increase adoption of GOV.UK Verify (RIP) by improving not only "the layout and messaging on the page displayed to users after a certified company successfully verifies their identity so it is clear how they can continue to the government service they intended to use" but also "our handling of the user’s choice of language (English or Welsh) so we can show the correct language version of each screen throughout the entire process, from selecting a government service through the GOV.UK Verify hub to certified companies".

Moreover, to improve the GOV.UK Verify (RIP) "completion rate", GDS have already "started work on an A/B testing framework which will allow us to determine whether one version of a screen or one wording of a sentence is clearer to users than another". And soon, GDS expect to "run A/B tests on the GOV.UK Verify [RIP] hub to explore the effect of company logos on the initial information pages".

Plucky stuff from GDS and their shrinking band of "identity providers" but, barring a miracle, the gold medal (medal aur) still looks pretty safely in the bag for HMRC and the Government Gateway.


Updated 26.9.16 1
Seven weeks ago there were 3½ million users of HMRC's on-line personal tax account service. Now there are five million, HMRC digital marks major milestone: "The five millionth customer has signed up to the Personal Tax Account, marking a major milestone in the ongoing development of HMRC’s digital services".

There were only 0.847 million GOV.UK Verify (RIP accounts as at 18 September 2016. Of those, 0.185 million were "basic" accounts, unverified accounts, useless to HMRC. Of the remaining 0.662 million accounts, we don't know if that's 0.662 million people or 0.083 million people who each have eight GOV.UK Verify (RIP) accounts, one with each of the eight "identity providers" who have registered people over the past few years.

Anything between 83,000 and 662,000 of HMRC's on-line personal tax accounts could be registered through GOV.UK Verify (RIP). So anything between 4,338,000 and 5,000,000 must be registered through the only alternative, the Government Gateway. And they're signing up fast. 1½ million in seven weeks.

When it comes to the high volume take-up of a serious on-line service, people choose the Government Gateway over GOV.UK Verify. RIP.


Updated 26.9.16 2
As an experiment, would you please click on Personal tax account: sign in or set up. Anyone can. No harm will come of it.

If you have a Government Gateway account and you log in to your personal tax account, you should see something like this:

It is also possible to log in with a GOV.UK Verify (RIP) account. When he does so, this is what DMossEsq sees ...

... no self-assessment option.

HMRC did warn people about this omission, please see above: "You can also sign in using GOV.UK Verify [RIP], but you won’t be able to use some services".

Oddly, that warning has now been removed. Disappointed self-assessors now have to find out the hard way that there's no point using GOV.UK Verify (RIP).


Updated 21.10.16

Less than a month ago, 26 September 2016, we reported that there were five million users of HMRC's new on-line personal tax account service. Now there are six million:

Team win project of the year award ... Last night our Personal Tax Account (PTA) project team won Project of the Year at the Dynamites 16 awards which recognise and showcase the IT and Technology industry in the North East ... The team have worked incredibly hard and achieved so much in a short space of time. It's not even a year since we launched the PTA and we’ve already had over 6 million customers log in and use their account ...

Dynamite, indeed:

• While PTA has added yet another million users, GOV.UK Verify (RIP) has signed up just over 19,000 new users. At least 981,000 new PTA users must be using the Government Gateway to access the service.
• And while HMRC have produced PTA, among other things, what have GDS achieved?

Yesterday, GDS director general Kevin Cunnington "outlined that GOV.UK Verify [RIP] remains a key element of GDS’s ambitions".

Why?

What's the point?

Elementary data science – you know, policy based on evidence, that sort of thing – surely indicates that all identity assurance resources should go into improving the Government Gateway.


Updated 17.11.16

HMRC's Mr James is even more jovial than usual – "last night the Personal Tax Account (PTA) won Digital Project of the Year at the annual UK IT Industry Awards".

PTA is now up to 6.7 million users in less than a year. GOV.UK Verify (RIP) has been creating accounts for just over two years since 13 October 2014 and now has 0.9 million of them.

DMossEsq has created seven GOV.UK Verify (RIP) accounts for himself. If other people have done the same – seven accounts each – GOV.UK Verify (RIP) may have just 0.13 million users compared with PTA's 6.7 million.

Given that the vast majority of those 6.7 million people aren't logging on to PTA through GOV.UK Verify (RIP), they must be using the Government Gateway instead. That's certainly Mr James's advice. He's in no doubt. He says:

To access your account go to the Personal Tax Account sign-in page and login by setting up a Government Gateway account. It only takes a few minutes and you’ll need to have your National Insurance number and your P60 handy. If you already have a Government Gateway account it will be quicker still. To make the process even more secure we’ll text you a security code that you’ll need to enter each time you use your account.

As far as HMRC are concerned, GOV.UK Verify? RIP.


Updated 22.11.16

In his latest blog post, Personal Tax Account - an award-winning service, Mr James mentions that "since we last spoke we’ve introduced two new online payment services available via [HMRC's on-line personal tax account service(PTA)]". One is for under-payment of tax, the other for over-payment.

Where taxpayers have over-paid, they can apply for a refund through PTA and the money should turn up in their bank account in five days or less. Mr James says "we’ve received just over 1.5 million repayments claims so far with an average claim of £519. The total amount we’ve refunded is nearly £780 million".

Does that ring a bell?

It should.

At least it should if you've read GDS aiming for 25 million users of Gov.uk Verify [RIP] by 2020 in Computer Weekly magazine.

"For GDS to achieve the 25 million user target would require several high-volume services to adopt Verify, such as HM Revenue & Customs’ (HMRC’s) self-assessment and digital tax services, the Universal Credit welfare system, and the NHS".

What are the chances of that?

Not good: "HMRC has been pressing ahead with its own identity verification service, based on the existing Government Gateway – a 15-year-old system that is used for individuals and businesses to submit their tax returns".

Kevin Cunnington, director general of the Government Digital Service (GDS), has an award-winning answer: "HMRC has been reluctant to fully adopt Verify because the department requires a lower level of assurance than Verify currently offers".

Are we to infer that HMRC would use GOV.UK Verify (RIP) to authorise £780 million of payments if only the wretched system wasn't just so good? HMRC prefer to be unsure who they're giving our money to?

HMRC's advice to taxpayers is: "to access your account go to the Personal Tax Account sign-in page and login by setting up a Government Gateway account" (please see above). Are they ignoring GOV.UK Verify (RIP) because they want to make fraudulent payments?

It seems unlikely.

Remember that, according to the US National Institute for Standards and Technology, the level of identity assurance offered by GOV.UK Verify (RIP) is no better than self-certification.

Remember that, according to GDS, only about 70% of people can create a GOV.K Verify (RIP) account. What would HMRC do with the other 30% of taxpayers who are owed a refund?

Remember that, according to GDS, if you create a GOV.UK Verify (RIP) account, your personal data wings its way all over the world into the databases of any number of companies you've never heard of. That doesn't happen with the Government Gateway.

That noise you heard in Computer Weekly magazine? That was Mr Cunnington whistling to keep his spirits up.

And the other noise? The bell you heard? It's tolling for GOV.UK Verify. RIP.


Updated 22.2.17

18 April 2016, please see above, there we were, full of questions:

The Government Gateway has worked for 15 years, allowing us to transact with scores of public services. By now it must have been instrumental in raising trillions of pounds of revenue. Exactly how much revenue? How many transactions has it undertaken? How much does it cost? How many Government Gateway accounts are there? We don't know. Mysteriously, there is no Government Gateway dashboard on GDS's performance platform. There should be.

No answers, of course, ...

... until 13 February 2017, when Mike Howes-Roberts told us that the Government Gateway supports "123 live digital services across government ... 406 million authentications a year ... more than 50 million active accounts", please see Green light for Government Gateway transformation.

As recommended by DMossEsq, Her Majesty's Revenue and Customs (HMRC) have taken over responsibility for the Gateway from the Department for Work and Pensions (DWP), who starved it of attention, and are now working on a new version.

Why?

They have to.

There's no alternative. Without the Gateway HMRC couldn't raise the £716 billion that we need to fund public services this year (p.6).

It's not as though HMRC can rely on the Government Digital Service's GOV.UK Verify (RIP). After five years of development, GOV.UK Verify (RIP) can't even verify the identity of a company. Since 13 October 2014 only about 1 million GOV.UK Verify (RIP) accounts have been created and they've only been used about 1½ million times.

Not surprisingly, Mr Howes-Roberts says in his blog post: "HMRC is developing its own identity system for individuals, businesses and agents. Other departments will use Gov.uk Verify [RIP] for all individual citizen services".

At least, that's what he did say. But now someone has leaned on HMRC and those words have been removed from his blog post, redacted, censored, suppressed, ...

You don't believe it?

But it's true, please see HMRC rejects Gov.uk Verify [RIP] in Computer Weekly magazine:

"Update: Since the publication of this article, HMRC has edited its blog post and removed the above statement. Computer Weekly has asked HMRC why it decided to remove it".

Clearly an operation has been mounted to try to save GOV.UK Verify (RIP).

It's not just blog posts being altered Minitrue-style.

Stephen Foreshew-Cain, one of GDS's two ex-executive directors, suggested on Twitter that HMRC shouldn't develop a successor to the Government Gateway. But they have to. Please see above. No revenue, no public services.

It's not easy getting a cover-up right.

Not for Mr Foreshew-Cain ...

... and not for John Manzoni, chief executive of the UK Civil Service, who tried in a speech yesterday to promote the dying system: "Verify - the government identity service for citizens - is enabling people to access a whole range of online government services easily, securely and in a way which builds their trust". Alternative facts, anyone?

It's hard to achieve coherent falsification of the facts. In the same speech, Mr Manzoni also said: "Personal tax accounts from HMRC now take a real-time digital approach. For the first time you can log in when you like, check your tax information and manage your details online in one place. More than 8 million citizens have now signed up ...".

8 million+? We know that there were 6.7 million personal tax accounts in November 2016. So, over 1.3 million accounts have been added in three months. In the same period, 189,734 accounts have been added to GOV.UK Verify (RIP). Even if they were all used for HMRC's on-line personal tax account service, the 1.3 million+ total would mean that they were still outnumbered 6:1.

What Mr Manzoni has unwittingly demonstrated is that, given the choice, most people avoid GOV.UK Verify (RIP) and opt for the only alternative, the Government Gateway.


Updated 24.2.17

The Government Digital Service (GDS) want to recruit a lead service designer to work on the GOV.UK Verify (RIP) team. £60,000 p.a., two-year contract, flexitime, ... not bad, worth considering:

Applicants are told in the job advertisement that GOV.UK Verify (RIP) uses "a range of certified companies". Follow that link, and applicants will discover that "certified companies have to be ... certified by an independent body (such as tScheme) to confirm that they meet government standards for identity assurance". Follow the tScheme link and applicants will discover that three of GDS's seven so-called "certified companies" aren't certified. So much for government standards, what are applicants expected to make of that?

Applicants are told further that "[the] GOV.UK Verify [RIP] Privacy team aspires to build trust with the users and stakeholders with [a] privacy by design approach ... You can read more about our privacy principles in our blog". What will happen to the applicants' trust when they discover that GOV.UK Verify (RIP) fails to comply with a single one of its own privacy principles. GDS's aspiration has failed. Bang goes trust.

It's not just lead service designers. Privacy analysts, too: "We are seeking a pragmatic and solutions oriented privacy professional to reinforce the GOV.UK Verify [RIP] Privacy team". Even the poor privacy analysts (£30,722 - £34,200) GDS is trying to recruit are being given the same misinformation, "[the] GOV.UK Verify [RIP] Privacy team aspires to build trust with the users and stakeholders with [a] privacy by design approach ...".

It looks prima facie as though recruits are being deceived.

RIP IDA – it tolls for thee

No need to say it, it goes without saying, it should be obvious to all but,

just in case it isn't obvious to all,

IDA is dead.

IDA, now known as "GOV.UK Verify (RIP)",

is the Cabinet Office Identity Assurance programme.

And it's dead.

"If Verify is the answer, what was the question?"

"Hi, Richard James here to give you an update on the Personal Tax Account".

Couldn't be more jovial, could it. That's the opening line in a charming little blog post published by Her Majesty's Revenue and Customs (HMRC) the other day, One million customers using the Personal Tax Account.

They're very proud of their new personal tax account. "34 different actions ... That’s how many things you can already do in the Personal Tax Account that would have previously meant a letter or phone to call to us".

One million customers? Everything HMRC does is in the millions. Apart from the things they do by the billion. One million HMRC customers for anything isn't news. It's reassuringly dull. Like the worthy little video they've released, reminiscent of the old Central Office of Information blockbusters on food hygiene or road safety.

But part way through this little gem of a post, what's this we read? "Have you tried it yet? ... From the Personal Tax Account sign in page you can now log in by setting up a Government Gateway account".