Document ID: chunk:federal_register_of_legislation:F2024L01438:front:0:p3
Version: federal_register_of_legislation:F2024L01438
Segment Type: other
Provision Reference: 
Character Range: 6447–9799

cyber security incident
Part 5.3—Accredited identity exchange providers
5.36  General requirements
5.37  Digital ID system rules
Chapter 6—Annual reviews
Part 6.1—Accredited entities to conduct annual reviews
6.1  General requirements
6.2  Reporting periods
6.3  Scope of annual review
6.4  Assurance assessments
6.5  Penetration and presentation attack detection testing
Part 6.2—Accredited entities to provide annual reports
6.6  Content of annual report
6.7  If previous timeframes to address risks and recommendations not met
6.8  Information and documents
6.9  Attestation statement
Chapter 7—Other matters relating to accreditation
Part 7.1—Matters related to attributes
7.1  Individuals must expressly consent to disclosure of certain attributes of individuals to relying parties
7.2  Meaning of restricted attribute of an individual
Part 7.2—Accreditation conditions
7.3  Table of accreditation conditions
Part 7.3—Reportable incidents
7.4  Reportable incidents
7.5  Change of control for corporations
7.6  Entity no longer providing accredited services
Part 7.4—Data standards relating to accreditation
7.7  Digital ID Data Standards Chair to make standards
Part 7.5—Record keeping
7.8  General record keeping requirement
Schedule 1—Documents or other credentials that are a commencement of identity credential
Schedule 2—Documents or other credentials that are a linking credential
Schedule 3—Documents or other credentials that are a UitC credential
Schedule 4—Documents or other credentials that are a photo ID
Schedule 5—PSPF controls

Chapter 1—Preliminary

1.1  Name
  These rules are the Digital ID (Accreditation) Rules 2024.

1.2  Commencement
  These rules commence at the same time as the Digital ID Act 2024 commences.

1.3  Authority
  These rules are made under section 168 of the Digital ID Act 2024 for the purposes of the provisions in the Act in which the term 'Accreditation Rules' occurs.

1.4  Definitions
Note: A number of expressions used in these rules are defined in the Act, including the following:
                1.      accredited entity;
                2.      attribute;
                3.      digital ID;
                4.      participating relying party;
                5.      personal information.
Note 2: A number of expressions used in these rules are defined in the Accreditation Data Standards, including the following:
                1.      AL Table;
                2.      authentication level;
                3.      in-device biometric capability;
                4.      out-of-band device.
 (1) Expressions defined in the Accreditation Data Standards have the same meaning in these rules.
 (2) In these rules:
accessibility and useability assessment means an assessment conducted in accordance with rule 3.7.
accountable executive, of an entity, means a senior executive of the entity responsible for the overall management of the entity's DI data environment, proposed accredited services and accredited services.
Accreditation Data Standards means the Digital ID (Accreditation) Data Standards 2024.
acquired image means an image of an individual's face that is used as a sample for biometric matching against the corresponding image from the individual's photo ID.
ACSC means the Australian Cyber Security Centre.
Act means the Digital ID Act 2024.
alternative proofing process: see