Document ID: chunk:federal_register_of_legislation:F2024L01438:reg:8:p1
Version: federal_register_of_legislation:F2024L01438
Segment Type: reg
Provision Reference: reg 8 (pt 1/4)
Character Range: 195672–199039

8                         All accredited entities  May disclose restricted attributes or biometric information to a contractor engaged by the accredited entity to provide an accredited service, or part of an accredited service                                                        If:
                                                                                                                                                                                                                                                                                          (a) the disclosure is for the purpose of the contractor providing an accredited service, or part of an accredited service, of the accredited entity; and
                                                                                                                                                                                                                                                                                          (b) the contractor is contractually bound to comply with the same obligations as apply to the accredited entity in respect of that information.

Part 7.3—Reportable incidents

7.4  Reportable incidents
  An accredited entity must notify the Digital ID Regulator within 5 business days if any of the following occurs:
 (a) any material change;
 (b) any matter that could reasonably be considered relevant to whether the entity is a fit and proper person for the purposes of the Act, these rules and the Accreditation Data Standards; or
 (c) there is a change to, or the accredited entity becomes aware of an error in, any information the entity has provided to the Digital ID Regulator.
Note: For paragraph (b), see section 12 of the Act and the Digital ID Rules which prescribe matters to which the Digital ID Regulator must have regard when considering whether an entity is a fit and proper person.

7.5  Change of control for corporations
 (1) Subject to subrule (2), this rule applies to:
 (a) an accredited entity that is a corporation; and
 (b) an entity that is a corporation whose accreditation is suspended;
 (2) This rule does not apply to a corporation that is controlled by:
 (a) the Commonwealth or an authority of the Commonwealth;
 (b) a State or an authority of that State; or
 (c) a Territory or an authority of that Territory.
 (3) However, this rule applies to a corporation mentioned in subrule (2) if, as a result of a change in control, or a future change in control, the corporation ceases to be, or will cease to be, controlled by:
 (a) for a corporation controlled by an entity mentioned in paragraph (2)(a)—an entity mentioned in paragraph (2)(a);
 (b) for a corporation controlled by an entity mentioned in paragraph (2)(b)—an entity mentioned in paragraph (2)(b); or
 (c) for a corporation controlled by an entity mentioned in paragraph (2)(c)—an entity mentioned in paragraph (2)(c).
 (4) The entity must notify the Digital ID Regulator, in accordance with this rule, of a change in control, or a future change in control, of the entity.
 (5) The notification must include the following information:
 (a) the entity's name;
 (b) the contact details for the entity;
 (c) the following details in respect of each entity that, through the change or future change in control of the entity, has started or would start to control the entity