Document ID: chunk:federal_register_of_legislation:F2024L01443:body:0:p48
Version: federal_register_of_legislation:F2024L01443
Segment Type: other
Provision Reference: 
Character Range: 165808–168698

Updated attribute.

 An IXP SHOULD use the Core Attributes Last Updated attribute to determine if the individual is required to provide consent before responding to the PRP's attribute request.

2.1.2      Validated Contact Details

 Contact details like an email address and mobile phone number are sourced by the ISP during the identity proofing process or the individual's ongoing use of their digital ID. Contact details are only referred to as validated due to ownership of an email address or phone number not being readily verifiable. A summary of the attribute sharing policies for these attributes is outlined in Table 6 below.

 Validated Contact Details attributes are subject to an Open access policy.

 1 It is intended that this requirement will change to become 'MUST' (rather than 'SHOULD') 12 months from commencement of the Act.

 An IXP MUST request express consent from the individual for Validated Contact Details attributes which have changed since consent was last recorded by the IXP.

 An ISP SHOULD support one or both Validated Email Address and Validated Phone Number attributes.

 If the individual has not validated a phone number or email address, an ISP MUST ignore a request for these attributes.

 An IXP MUST support brokering attribute requests for Validated Contact Details.

 An ISP MAY fulfill attribute requests for Validated Contact Details at all requestable assurance levels. Where an ISP or IXP support a Validated Email Address, the ISP or IXP:
 1.             MUST ensure the email address complies with RFC 5322;
      2.             MUST ensure the email address has a maximum length of 254 characters in compliance with RFC 5321; and
      3.             SHOULD consider the guidance outlined in RFC 3696.

 An ISP MUST note every change made to the Validated Email Address attribute by recording the date and time of the last change in the Validated Email Address Last Updated attribute.

 Where an ISP or IXP support a Validated Phone Number, the ISP or IXP MUST ensure the phone number is compliant with ITU E.164.

 An ISP MUST note every change made to the Validated Phone attribute by recording the date and time of the last change in the Validated Phone Last Updated attribute.

2.1.3      Verified Other Names

 Additional names an individual is or was known by are verified by ISPs from the EoI documents presented during the initial or subsequent identity proofing process.

 These Attributes include the variations of the individual's name from those recorded in the Core Attributes and are only sourced from the following document types:

 1.             Commencement of Identity Documents;
 2.             Linking Documents;
      3.             Photo ID Documents.

 A summary of the attribute sharing policy for Verified Other Names is outlined in Table 7 below.

 The Verified Other Names attribute set is subject to an