Clark DavidDIGITAL IDENTITY SERVICES TRUST FRAMEWORK BILLSecond ReadingHon Dr DAVID CLARK (Minister for the Digital Economy and Communications): I present a legislative statement on the Digital Identity Services Trust Framework Bill.ASSISTANT SPEAKER (Hon Jenny Salesa): That legislative statement is published under the authority of the House and can be found on the Parliament website.Hon Dr DAVID CLARK: I move That the Digital Identity Services Trust Framework Bill be now read a second time.The Digital Identity Services Trust Framework Bill introduces a new regulatory framework which helps New Zealanders share their personal information via trusted and secure services. It's a modernised system for a modern world and by passing through the second reading today in the House we are one step closer to modernising our digital identity system which is critical as we continue to work more online socialise more online and learn more online.Digital identity services allow for user-authorised collection sharing and other uses of personal information. Now an example of the kind of information that you provide with a digital identity service might include things like a person's date of birth name employment history medical records qualifications or other information that describes them. That's the kind of data we're talking about being protected in the trust framework. Now a New Zealander who has this kind of data using that trust framework can then choose to authorise service providers to share this information helping them to access services and entitlements or prove who they are and so forth. So a person who has these details has this information can choose in this trusted format to share with others.The bill is part of a wider programme of initiatives that support key Government priorities for the digital community and is another part of the digital strategy for Aotearoa. It's also trade-enabling; digital identity can enable digital trade and other cross-border transactions. A mutual recognition of digital identity services with Australia is something that our Prime Minister and the Prime Minister of Australia have both signalled as a priority for the single economic market agenda. As I said when I first introduced the bill to the House the trust framework bill introduces a rules-based opt-in accreditation scheme for digital identity services.I know that during the select committee process some submitters expressed concern that the trust framework was establishing some kind of mandatory and centralised identity regime—and I want to be very clear with this House: this bill does no such thing. The trust framework does not establish a centralised identity system; in fact it's really distributing information with the users themselves to control. It does not create any new powers for the Government to collect or share people's information without their consent—it does not do that. Instead the trust framework consists of a set of minimum standards for security privacy information and identification management that must be met when people choose to share their information through this mechanism. To labour the point participation in the trust framework is optional. No one will be required to get a digital identity to access services and the Government will continue to make services available to people on an in-person basis. The bill itself is also subject to the Privacy Act of 2020.Now in order to establish the trust framework the bill establishes three regulatory bodies that will oversee different aspects of the trust framework. Now those three bodies are: a governance board a Māori advisory group and an accreditation authority. The Governance board develops rules and engages with the public on future objectives for the trust framework. The Māori advisory group comes together to advise the board on Māori interests and knowledge as they relate to operation of the trust framework. The accreditation authority is responsible for accrediting organisations but it also does the monitoring and enforcement parts that are necessary under the trust framework.The bill also requires a consultation be undertaken with key stakeholders when potential changes to the rules are proposed and it provides the accreditation authority with powers to investigate compliance and to issue remedies if it finds that there has been a breach of the trust framework.I do want to thank the Economic Development Science and Innovation Committee for its work on the bill. They've made a number of helpful suggestions to improve the operation of the trust framework once the bill's passed by this House. I want to take the time also to acknowledge those submitters who took the time to engage with the technical aspects of the bill because it is a bill that needs careful engagement and those that took that time to make suggestions to ensure that the bill serves people well are to be thanked. And so I do that on behalf of the House.I'd like now to touch on some of the amendments that the committee has recommended. Broadly I think the committee—well clearly—accepted the policy rationale and the purpose of the bill but has made some suggested changes. Now a number of these suggested amendments relate to ensuring that the trust framework gives better effect to Māori approaches to identity. These changes include amending the consultation requirements to include tikanga experts with knowledge of Te Ao Māori and identity adding a positive obligation on the board to recognise and provide for Māori interests in the operation of the trust framework and requiring the board and the Māori advisory group to collectively identify how they will consult with iwi and hapū.Several submitters expressed concern that the bill provides immunity from liability in civil proceedings for accredited digital identity service providers over harms which have resulted from the use of their services and the bill has been amended in response to this concern to establish that that immunity does not apply to any proceedings taken under the Privacy Act. A further amendment seeks to clarify who may make rules that comprise the trust framework. To make sure that the Minister's powers are clearly prescribed the bill has now been amended to clarify that the Minister's power to make trust framework rules is limited to the technical standards set out in clause 19. During the select committee process submitters also expressed concern about the limitation of six months for people to make a complaint when they find out about a breach of the rules. Essentially submitters found that that was too restrictive and submitted as such and the bill has therefore been amended to extend that time limit to 12 months.The digital sector continues to grow and evolve rapidly and the need to ensure people can access services in a straightforward way so that they can be sure that their information is protected and be sure to benefit from the ease of access that comes with faster digital ways of doing things has only grown in importance.Before I close I do want to acknowledge that it is Techweek this week and you know we've made some announcements around supporting software as a service in our Budget upcoming and also put some money behind the tech story. And I would encourage people out there looking to the benefits that we will see from this digital economy to look at the We See Tomorrow First website where assets around our tech story are stored—a very powerful story. Most people know the story of 100% Pure"—that is a story we've told about New Zealand for a long time and told clearly to overseas audiences. The tech story and its resources that are now available online and supported through the Budget will enable our entrepreneurs to tell the story of the great things that are happening in the digital economy in New Zealand. So in Techweek can I thank those who contributed to the New Zealand story development and encourage New Zealand citizens to go and have a look at the We See Tomorrow First website to check these things out for themselves.But it's my pleasure to commend this bill given that it introduces a regulatory framework that helps to keep people safe that is optional to participate in but that provides benefit to New Zealand citizens of knowing their data is safe and secure and they can choose who they share it with in a digital world which brings them many benefits in the future. ASSISTANT SPEAKER (Hon Jenny Salesa): The question is that the motion be agreed to."