Document ID: chunk:federal_register_of_legislation:F2024L01438:front:0:p4
Version: federal_register_of_legislation:F2024L01438
Segment Type: other
Provision Reference: 
Character Range: 9546–12787

of an individual's face that is used as a sample for biometric matching against the corresponding image from the individual's photo ID.
ACSC means the Australian Cyber Security Centre.
Act means the Digital ID Act 2024.
alternative proofing process: see rule 5.22.
annual review: see rule 6.1.
applicant: see rule 1.9.
approved cryptography means:
 (a) Australian Signals Directorate Approved Cryptographic Algorithms; and
 (b) Australian Signals Directorate Approved Cryptographic Protocols,
as each is defined either in the ISM or the document Implementing Certificates, TLS, HTTPS and Opportunistic TLS published by the Australian Signals Directorate.
Note:  At the time these rules were made, located at https://www.cyber.gov.au/sites/default/files/2023-03/PROTECT%20-%20Implementing%20Certificates%2C%20TLS%2C%20HTTPS%20and%20Opportunistic%20TLS%20%28October%202021%29.pdf.
ASP means an accredited attribute service provider.
assessing officer means a member of personnel of an applicant or accredited entity who is trained and authorised by that entity to conduct local biometric binding or manual face comparison.
assessor: see rule 3.2.
assessor's report: see rule 3.17.
assurance assessment means a protective security assessment, fraud assessment or accessibility and useability assessment.
Australian passport has the same meaning as in the Australian Passports Act 2005.
authoritative source means a person that issues documents or other credentials containing information about an individual.
biometric binding means the process of confirming the link between an individual and a photo ID by conducting biometric matching for the purpose of obtaining IP2 Plus, IP3 or IP4.
Note: See item 4 of the IP Levels Table.
biometric capability, in relation to an applicant or accredited entity, means the components of the entity's DI data environment that process or are involved in the processing of biometric information (including for biometric binding and biometric matching).
biometric matching means one-to-one comparison of an individual against the image on their photo ID.
biometric matching algorithm means the algorithm used to conduct biometric matching.
commencement of identity credential or CoI credential means a document or other credential listed in Schedule 1.
Note: A commencement of identity credential evidences an individual's commencement of identity in Australia.
cryptographic key means a string of characters used with approved cryptography to encrypt and decrypt.
cyber security risk means the risk of a cyber security incident occurring in relation to an entity's DI data environment, proposed accredited services or accredited services.
cyber security risk assessment: see rule 4.7.
data breach means loss or misuse of, unauthorised access to, or unauthorised modification or disclosure of, personal information held by an applicant or accredited entity.
DI data environment means digital ID data environment.
digital ID data environment means the information technology systems used for, and the processes that relate to:
 (a) for an applicant—the provision of the entity's proposed accredited services; or
 (b) for an accredited entity—the entity's accredited services.
Digital ID Rules means the Digital