0. Version and certification validity notes

0.a. This 1.1 publication of the supplementary code for digital right to work checks (‘the RtW supplementary code’) will come into force under section 29 of the Data (Use and Access) Act 2025 on the date the first conformity assessment body (‘CAB’) is accredited to certify against it, which will be no earlier than 1 September 2026. It replaces the 1.0 publication of the RtW supplementary code, which was published on 9 June. The 1.0 publication was due to come into force when the first CAB was accredited to certify against it and no earlier than 1 September 2026. However, the 1.0 publication will not come into force as no CAB has ever been accredited to certify against it and none will ever be accredited as such given this new version of the code has been published. This 1.1 publication reflects [Home Office regulations](https://www.legislation.gov.uk/uksi/2026/700/contents/made), which, amongst other things, enable the use of expired passports during digital right to work checks and the use of holder services for the purposes of checks to confirm that an individual carrying out work or services is the same individual as the worker on whom a right to work check has been conducted.

0.b. The RtW supplementary code is published by the Office for Digital Identities and Attributes (‘OfDIA’), part of Department for Digital, Culture, Media and Sport (‘DCMS’). It sets out rules for digital verification services (‘DVS’) conducting right to work checks on holders of British and Irish passports or passport cards. OfDIA is responsible for the maintenance of this supplementary code.

0.c. To be certified against the RtW supplementary code, services will need to also be certified against a [current publication of the UK digital verification services trust framework](https://www.gov.uk/government/collections/uk-digital-identity-and-attributes-trust-framework) (formerly known as the ‘UK digital identity and attributes trust framework’).

0.d. The non-statutory gamma (0.4) version of the RtW supplementary code, published on 26 June 2025 and the statutory gamma (0.4) published on 1 December 2025 will remain valid for a limited period of time for the purposes of:

- certification, such that certificates issued against those versions will remain valid and any audit and surveillance in respect of those certificates are conducted against those versions as relevant, subject to 0.e below; and
- Part 2 of the Act (where relevant and where there exist certificates which are valid against them) such that references to supplementary code are to be read as references to the non-statutory gamma (0.4) and the statutory gamma (0.4) versions.

0.e. The statutory gamma (0.4) version of the RtW supplementary code is only to remain valid for new certifications following the coming into force date of this 1.1 RtW supplementary code in the circumstances below:

- The DVS applied for certification against the statutory gamma (0.4) RtW supplementary code before the day on which this 1.1 RtW supplementary code comes into force but the certification process had not been completed by that date, such that a certificate was issued by an accredited CAB after that date; or
- The DVS applying for certification, at the point at which they apply for new certification, holds a certificate confirming they comply with the requirements under the non-statutory gamma (0.4) or the statutory gamma (0.4) versions of the RtW supplementary code and the application is made by that DVS before the certificate expires and within 15 months of the day on which this 1.1 RtW supplementary code comes into force.

0.f. The non-statutory gamma (0.4) and the statutory gamma (0.4) versions of the RtW supplementary code referred to in 0.c will no longer apply for the purposes of certification and Part 2 of the Act, and certificates issued against them will expire and should be ignored for those purposes if any of the following apply:

- 27 months have elapsed since the day on which this 1.1 RtW supplementary code comes into force (including that day);
- a service uplifts to the 1.1 publication and has a certificate issued to confirm that;
- the service’s non-statutory gamma (0.4) or statutory gamma (0.4) certification against the RtW supplementary code expires; or
- the service’s non-statutory gamma (0.4) or statutory gamma (0.4) certification against the UK digital verification services trust framework expires.