Document ID: chunk:federal_register_of_legislation:F2024L01438:front:0:p7
Version: federal_register_of_legislation:F2024L01438
Segment Type: other
Provision Reference: 
Character Range: 18306–21469

4.
physical authenticator: see rule 5.25.
presentation attack means the presentation of an artefact to a biometric data capture subsystem with the goal of interfering with the expected operation of the biometric capability.
presentation attack detection means automated discrimination between bona-fide presentations and presentation attacks.

presentation attack instrument means an object or biometric characteristic that is used in a presentation attack.
Privacy Act means the Privacy Act 1988.
proposed accredited services, in relation to an applicant, means the services proposed to be provided by the entity in its application under section 14 of the Act for accreditation as an accredited entity.
protective security assessment means an assessment conducted in accordance with Division 1 of Part 3.2 of Chapter 3.
protective security capability: see Division 1 of Part 4.1 of Chapter 4.
protective security framework: see Division 2 of Part 4.1 of Chapter 4.
PSPF means the Protective Security Policy Framework published by the Australian Government.
Note 1: At the time these rules were made, located at https://www.protectivesecurity.gov.au/.
Note 2: The specific controls in the PSPF to be implemented are listed in Schedule 5.

public-facing proposed accredited services, in relation to an applicant, means the proposed accredited services or elements of the entity's information technology system that an individual directly interacts with when using, or attempting to use, the entity's proposed accredited services.

public-facing accredited services, in relation to an accredited entity, means the accredited services or elements of the entity's information technology system that an individual directly interacts with when using, or attempting to use, the entity's accredited services.
Example:  An example of public-facing accredited services is where an individual provides information to be verified via an ISP's mobile app that the individual is required to download so as to access the entity's accredited services.

public-facing information related to proposed accredited services, in relation to an applicant, means information made available by the entity to individuals when interacting with the entity's public-facing proposed accredited services.
public-facing information related to accredited services, in relation to an accredited entity, means information made available by the entity to individuals when interacting with the entity's public-facing accredited services.
Example:  Public-facing information related to accredited services is the accredited entity's privacy policy made available to individuals.
reporting period, for an accredited entity: see rule 6.1.
Note: Chapter 6 requires an accredited entity to conduct an annual review, and report on that review, in each 12-month reporting period.
reusable digital ID means a digital ID verified for multiple uses by binding an authenticator to the digital ID.
risk assessment means the systematic, iterative and collaborative process of identification, analysis and evaluation of risk.

source biometric matching means the process of using source verification to verify that