New Zealand’s Trust Framework Authority has begun work. It is the regulator of accredited digital identity services and will issue an “accreditation mark” to providers who meet and maintain government-mandated standards.
There are currently no accredited providers, but later this year, the Authority will begin assessing those who apply. Accreditation is not compulsory.
The Digital Identity Services Trust Framework Act 2023 took effect on July 1. Under that law, consent is always required to collect personal information, which must not be held in a centralised database. Sharing between government departments remains controlled.
The system will enable accredited providers of digital identity services to give people access to their identity credentials via an app on their devices for services including banking and telecommunications.
People can then share this information with whoever they choose to prove their identity and other information about themselves—their address, for example—without having to locate documents or turn up in person. Accredited providers must show they can adequately manage the risk of identity theft.
The framework is split into several categories.
To become accredited, digital identity service providers must meet the relevant rules applicable to the type of service or services they provide.
To achieve and maintain accreditation under this system, a provider has to ensure the information it holds is always accurate, that it is “bound” to the right person or organisation, and that anyone with whom it shares that information can also keep it secure.
The legislation creating the framework also commits the government to always maintain alternative ways to access government services, such as in-person or paper-based methods.
The explicit regulations are currently being drafted following widespread consultation with industry.
Key principles include security and transparency, along with interoperability—information should be able to be re-used across services, sectors and geographies without undermining security or privacy.
Government Backs Digitalising Services
Minister for Digitalising Government, Judith Collins, believes New Zealand needs strong digital ID, cloud, and AI technology for better government services.“If done right, the digitisation of our public service will be game changing, and I am committed to ensuring this happens,” she said in a speech on May 7.
However, a group of professionals and academics have been warning about the potential dangers of digital ID since the consultations for the bill began.
Physician and Scientists for Global Responsibility warned that digital ID systems collection information into a single place, which can potentially be exploited.
“As with all technologies, it is the stewardship of the technology in such a way that protects human health and wellbeing that is of the utmost importance,” they said.
They also warned about the key risks of tying digital ID to a central bank digital currency, including having control over people through restricting access to digital currency.
It comes during a consultation on central bank digital currencies, which they criticised for not being opened for greater community input.
Meanwhile, in July 2023, the NZ Department of Internal Affairs signed an all-of-government agreement with Google Cloud for public cloud and professional services.
