{"id":"F2024L01436","name":"Digital ID (Transitional and Consequential Provisions) Rules 2024","slug":"digital-id-transitional-and-consequential-provisions-rules-2024","collection":"legislative_instrument","jurisdiction":"commonwealth","status":"in_force","isInForce":true,"actNumber":null,"makingDate":null,"administeringDepartment":null,"currentVersion":{"id":105433,"registerId":"commonwealth-F2024L01436-current","compilationNumber":null,"startDate":"2026-04-03","status":"InForce","reasons":null,"registeredAt":null},"sections":[{"sectionNumber":"1.1","sectionType":"section","heading":"Name","content":"#### 1.1 Name\n\n These rules are the Digital ID (Transitional and Consequential Provisions) Rules 2024.","sortOrder":0},{"sectionNumber":"1.2","sectionType":"section","heading":"Commencement","content":"#### 1.2 Commencement\n\n These rules commence at the same time as the Digital ID (Transitional and Consequential Provisions) Act 2024 commences.","sortOrder":1},{"sectionNumber":"1.3","sectionType":"section","heading":"Authority","content":"#### 1.3 Authority\n\n These rules are made under item 10 of Schedule 1 to the Digital ID (Transitional and Consequential Provisions) Act 2024.\n\n> Note 1: Item 10 of Schedule 1 to the Act (the Schedule) relevantly provides that:\n\n (a) the Minister may make rules prescribing matters required or permitted by the Schedule to be prescribed by the rules, or necessary or convenient to be prescribed for carrying out or giving effect to the Schedule;\n (b) without limiting the rule-making power mentioned in paragraph (a), the rules may prescribe matters of a transitional nature (including prescribing any saving or application provisions) relating to the enactment of the Schedule or the Digital ID Act;\n (c) rules made for the purposes of item 10 of the Schedule before the end of 12 months after commencement may provide that the Act or the Digital ID Act have effect with any modifications prescribed by the rules; and\n (d) subject to the limitations in subitem 10(4) of the Schedule, the Act does not limit the rules that may be made.\n\n> Note 2: Subitem 10(4) of the Schedule provides that, to avoid doubt, the rules may not do the following:\n\n (a) create an offence or civil penalty;\n (b) provide powers of arrest or detention, or entry, search or seizure;\n (c) impose a tax;\n (d) set an amount to be appropriated from the Consolidated Revenue Fund under an appropriation in the Act;\n (e) directly amend the text of the Act or the Digital ID Act.","sortOrder":2},{"sectionNumber":"1.4","sectionType":"section","heading":"Definitions","content":"#### 1.4 Definitions\n\n> Note 1: A number of expressions used in these rules are defined in the Act, including the following:\n\n commencement;\n driver’s licence;\n medicare card;\n myGov;\n passport.\n\n> Note 2: A number of expressions used in these rules are defined in the Digital ID Act, including the following:\n\n accredited entity;\n attribute;\n digital ID;\n participating relying party;\n personal information.\n\n> Note 3: A number of expressions used in these rules are defined in the Accreditation Rules, including the following:\n\n biometric binding;\n identity proofing;\n IP level;\n reporting period;\n special attribute.\n\n (1) Expressions defined in the Digital ID Act and the Accreditation Rules have the same meaning in these rules.\n (2) In these rules:\n\n> Act means the Digital ID (Transitional and Consequential Provisions) Act 2024.\n\n> Accreditation Data Standards means the Digital ID (Accreditation) Data Standards 2024.\n\n> Accreditation Rules means the Digital ID (Accreditation) Rules 2024.\n\n> AGDIS Data Standards means the Digital ID (AGDIS) Data Standards 2024.\n\n> AL2 means the authentication level specified as AL2 in rule 3.1 of the Accreditation Data Standards.\n\n> Designated Identity Exchange Provider means Services Australia in its capacity as an accredited identity exchange provider while participating in the Australian Government Digital ID System.\n\n> Digital ID Act means the Digital ID Act 2024.\n\n> myGov linkID means a special attribute that links a person with a service available through myGov that the person seeks to access.\n\n> one-off digital ID: see rule 5.3 of the Accreditation Rules.","sortOrder":3},{"sectionNumber":"1.5","sectionType":"section","heading":"Schedules","content":"#### 1.5 Schedules\n\n Each instrument that is specified in a Schedule to this instrument is amended or repealed as set out in the applicable items in the Schedule concerned, and any other item in a Schedule to this instrument has effect according to its terms.\n\nChapter 2—Transitional and application rules","sortOrder":4},{"sectionNumber":"Part 1","sectionType":"part","heading":"Accreditation","content":"Chapter 1—Preliminary\n\n#### 1.1 Name\n\n These rules are the Digital ID (Transitional and Consequential Provisions) Rules 2024.\n\n#### 1.2 Commencement\n\n These rules commence at the same time as the Digital ID (Transitional and Consequential Provisions) Act 2024 commences.\n\n#### 1.3 Authority\n\n These rules are made under item 10 of Schedule 1 to the Digital ID (Transitional and Consequential Provisions) Act 2024.\n\n> Note 1: Item 10 of Schedule 1 to the Act (the Schedule) relevantly provides that:\n\n (a) the Minister may make rules prescribing matters required or permitted by the Schedule to be prescribed by the rules, or necessary or convenient to be prescribed for carrying out or giving effect to the Schedule;\n (b) without limiting the rule-making power mentioned in paragraph (a), the rules may prescribe matters of a transitional nature (including prescribing any saving or application provisions) relating to the enactment of the Schedule or the Digital ID Act;\n (c) rules made for the purposes of item 10 of the Schedule before the end of 12 months after commencement may provide that the Act or the Digital ID Act have effect with any modifications prescribed by the rules; and\n (d) subject to the limitations in subitem 10(4) of the Schedule, the Act does not limit the rules that may be made.\n\n> Note 2: Subitem 10(4) of the Schedule provides that, to avoid doubt, the rules may not do the following:\n\n (a) create an offence or civil penalty;\n (b) provide powers of arrest or detention, or entry, search or seizure;\n (c) impose a tax;\n (d) set an amount to be appropriated from the Consolidated Revenue Fund under an appropriation in the Act;\n (e) directly amend the text of the Act or the Digital ID Act.\n\n#### 1.4 Definitions\n\n> Note 1: A number of expressions used in these rules are defined in the Act, including the following:\n\n commencement;\n driver’s licence;\n medicare card;\n myGov;\n passport.\n\n> Note 2: A number of expressions used in these rules are defined in the Digital ID Act, including the following:\n\n accredited entity;\n attribute;\n digital ID;\n participating relying party;\n personal information.\n\n> Note 3: A number of expressions used in these rules are defined in the Accreditation Rules, including the following:\n\n biometric binding;\n identity proofing;\n IP level;\n reporting period;\n special attribute.\n\n (1) Expressions defined in the Digital ID Act and the Accreditation Rules have the same meaning in these rules.\n (2) In these rules:\n\n> Act means the Digital ID (Transitional and Consequential Provisions) Act 2024.\n\n> Accreditation Data Standards means the Digital ID (Accreditation) Data Standards 2024.\n\n> Accreditation Rules means the Digital ID (Accreditation) Rules 2024.\n\n> AGDIS Data Standards means the Digital ID (AGDIS) Data Standards 2024.\n\n> AL2 means the authentication level specified as AL2 in rule 3.1 of the Accreditation Data Standards.\n\n> Designated Identity Exchange Provider means Services Australia in its capacity as an accredited identity exchange provider while participating in the Australian Government Digital ID System.\n\n> Digital ID Act means the Digital ID Act 2024.\n\n> myGov linkID means a special attribute that links a person with a service available through myGov that the person seeks to access.\n\n> one-off digital ID: see rule 5.3 of the Accreditation Rules.\n\n#### 1.5 Schedules\n\n Each instrument that is specified in a Schedule to this instrument is amended or repealed as set out in the applicable items in the Schedule concerned, and any other item in a Schedule to this instrument has effect according to its terms.\n\nChapter 2—Transitional and application rules\n\n## Part 1—Accreditation\n\n#### 2.1 Entities taken to be accredited immediately after commencement\n\n For the purposes of item 4 of the table in item 2 of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have decided for the purposes of subsection 15(2) of the Digital ID Act to accredit an entity specified in column 1 of an item in Table 1 of Schedule 1 as the kind of accredited entity specified in column 2 of the item; and\n (b) have imposed the conditions, if any, specified in column 3 of the item on the entity’s accreditation for the purposes of paragraph 17(2)(a) of the Digital ID Act.\n\n## Part 2—Approval to participate in the Australian Government Digital ID System\n\n#### 2.2 Accredited entities taken to be approved to participate in the Australian Government Digital ID System immediately after commencement\n\n For the purposes of item 4 of the table in subitem 4(1) of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have approved an entity specified in column 1 of an item in the following table to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as the kind of accredited entity specified in column 2 of the item; and\n (b) have imposed the conditions specified in column 3 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n\n```html\n

Accredited entities taken to be approved to participate in the Australian Government Digital ID System

Item

Column 1

Entity

Column 2

Kind of accredited entity

Column 3

Conditions

1

Services Australia

Accredited attribute service provider

The entity must:

(a) provide its accredited services to issue and manage the myGov linkID attribute; and

(b) directly connect to the Designated Identity Exchange Provider.

2

Services Australia

Accredited identity exchange provider

The entity must undertake all of the following if, during a reporting period for the entity, the entity has informed a participating relying party, in accordance with section 2.2.1 of Schedule 1 to the AGDIS Data Standards, which accredited identity service provider an individual used to authenticate (the disclosure):

(a) arrange, in respect of that reporting period, an independent audit of the entity’s compliance with:

(i) section 2.2.1.4 and the data representation in Table 30 of Schedule 3 to the AGDIS Data Standards in relation to the disclosure; and

(ii) any requirements in the federation protocol used by the participating relying party in relation to the disclosure;

(b) provide the auditor’s findings in relation to that reporting period to the Digital ID Regulator before the end of the next reporting period; and

(c) publish the auditor’s findings in relation to that reporting period on the entity’s website.

\n```\n\n#### 2.3 Relying parties taken to be approved to participate in the Australian Government Digital ID System immediately after commencement\n\n For the purposes of item 10 of the table in subitem 4(2) of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have approved an entity specified in column 1 of an item in Table 2 of Schedule 1 to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as a participating relying party; and\n (b) have imposed the conditions specified in column 2 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n\n#### 2.4 Relying parties taken to be approved to participate in the Australian Government Digital ID System on a specified date after commencement\n\n (1) Subitem 4(2) of Schedule 1 to the Act has effect in relation to an entity mentioned in subrule (2) with the modifications prescribed in that subrule.\n (2) For the purposes of item 10 of the table in subitem 4(2) of Schedule 1 to the Act, the Digital ID Regulator is taken, on the specified date, to:\n (a) have approved an entity specified in column 1 of an item in Table 3 of Schedule 1 to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as a participating relying party; and\n (b) have imposed the conditions specified in column 2 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n (3) Item 5 of Schedule 1 to the Act has effect in relation to an entity mentioned in subrule (2) with the modifications prescribed in subrules (4) to (11).\n (4) Item 5 of Schedule 1 to the Act applies in relation to an entity that holds an approval to participate in the Australian Government Digital ID System because of the operation of subitem 4(2) of Schedule 1 to the Act as modified by this rule.\n (5) For the purposes of paragraph 62(5)(a) of the Digital ID Act:\n (a) the Digital ID Regulator is taken to have given written notice of the decision to approve the entity to participate in the Australian Government Digital ID System; and\n (b) the notice referred to in paragraph (a) is taken to have complied with subsection 62(6) of the Digital ID Act.\n (6) For the purposes of paragraph 62(6)(a) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity that the day the entity’s approval to participate in the Australian Government Digital ID System comes into force is the specified date.\n (7) For the purposes of paragraph 62(6)(c) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity of the conditions set out in column 2 of the item in Table 3 of Schedule 1 that relates to the entity.\n (8) For the purposes of paragraph 62(6)(d) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity that the day on which the entity must begin to participate in the Australian Government Digital ID System is the specified date.\n (9) For the purposes of paragraph 64(1)(c) of the Digital ID Act, the entity is taken to have begun participating in the Australian Government Digital ID System on the specified date.\n (10) A decision taken to have been made because of the operation of paragraph 4(2)(b) of Schedule 1 to the Act as modified by this rule is not a reviewable decision for the purposes of the Digital ID Act.\n (11) In this rule:\n\n> specified date, in relation to an entity mentioned in subrule (2), means the date specified in column 3 of the item in Table 3 in Schedule 1 that relates to the entity.\n\n## Part 3—Transitional liability arrangements\n\n#### 2.5 Application of statutory contract provisions in the Digital ID Act\n\n (1) Division 2 of Part 3 of Chapter 4 of the Digital ID Act does not apply until the earlier of the following:\n (a) 2 years after commencement; and\n (b) the first date on which rules made under subsection 85(5) of the Digital ID Act commence.\n (2) For the avoidance of doubt, this rule does not limit or modify the power of the Minister to make rules in accordance with subsection 85(5) or section 87 of the Digital ID Act.\n\n## Part 4—Other modifications to the Act\n\n#### 2.6 References to myGovID in the Act\n\n References to ‘myGovID’ in the Act are taken to be references to ‘myID’.\n\n## Part 5—Other modifications to the Digital ID Act\n\n#### 2.7 Conditions on accreditation relating to restricted attributes of individuals\n\n Subsections 18(2) and (3) of the Digital ID Act (about conditions relating to restricted attributes of individuals) do not apply in relation to:\n (a) the conditions taken to be imposed under paragraph (h) of column 3 of item 2 of the table in item 2 of Schedule 1 to the Act; and\n (b) the conditions taken to be imposed under paragraph (c) of column 3 of item 3 of Table 1 in Schedule 1.","sortOrder":5},{"sectionNumber":"2.1","sectionType":"section","heading":"Entities taken to be accredited immediately after commencement","content":"#### 2.1 Entities taken to be accredited immediately after commencement\n\n For the purposes of item 4 of the table in item 2 of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have decided for the purposes of subsection 15(2) of the Digital ID Act to accredit an entity specified in column 1 of an item in Table 1 of Schedule 1 as the kind of accredited entity specified in column 2 of the item; and\n (b) have imposed the conditions, if any, specified in column 3 of the item on the entity’s accreditation for the purposes of paragraph 17(2)(a) of the Digital ID Act.","sortOrder":6},{"sectionNumber":"Part 2","sectionType":"part","heading":"Approval to participate in the Australian Government Digital ID System","content":"Chapter 1—Preliminary\n\n#### 1.1 Name\n\n These rules are the Digital ID (Transitional and Consequential Provisions) Rules 2024.\n\n#### 1.2 Commencement\n\n These rules commence at the same time as the Digital ID (Transitional and Consequential Provisions) Act 2024 commences.\n\n#### 1.3 Authority\n\n These rules are made under item 10 of Schedule 1 to the Digital ID (Transitional and Consequential Provisions) Act 2024.\n\n> Note 1: Item 10 of Schedule 1 to the Act (the Schedule) relevantly provides that:\n\n (a) the Minister may make rules prescribing matters required or permitted by the Schedule to be prescribed by the rules, or necessary or convenient to be prescribed for carrying out or giving effect to the Schedule;\n (b) without limiting the rule-making power mentioned in paragraph (a), the rules may prescribe matters of a transitional nature (including prescribing any saving or application provisions) relating to the enactment of the Schedule or the Digital ID Act;\n (c) rules made for the purposes of item 10 of the Schedule before the end of 12 months after commencement may provide that the Act or the Digital ID Act have effect with any modifications prescribed by the rules; and\n (d) subject to the limitations in subitem 10(4) of the Schedule, the Act does not limit the rules that may be made.\n\n> Note 2: Subitem 10(4) of the Schedule provides that, to avoid doubt, the rules may not do the following:\n\n (a) create an offence or civil penalty;\n (b) provide powers of arrest or detention, or entry, search or seizure;\n (c) impose a tax;\n (d) set an amount to be appropriated from the Consolidated Revenue Fund under an appropriation in the Act;\n (e) directly amend the text of the Act or the Digital ID Act.\n\n#### 1.4 Definitions\n\n> Note 1: A number of expressions used in these rules are defined in the Act, including the following:\n\n commencement;\n driver’s licence;\n medicare card;\n myGov;\n passport.\n\n> Note 2: A number of expressions used in these rules are defined in the Digital ID Act, including the following:\n\n accredited entity;\n attribute;\n digital ID;\n participating relying party;\n personal information.\n\n> Note 3: A number of expressions used in these rules are defined in the Accreditation Rules, including the following:\n\n biometric binding;\n identity proofing;\n IP level;\n reporting period;\n special attribute.\n\n (1) Expressions defined in the Digital ID Act and the Accreditation Rules have the same meaning in these rules.\n (2) In these rules:\n\n> Act means the Digital ID (Transitional and Consequential Provisions) Act 2024.\n\n> Accreditation Data Standards means the Digital ID (Accreditation) Data Standards 2024.\n\n> Accreditation Rules means the Digital ID (Accreditation) Rules 2024.\n\n> AGDIS Data Standards means the Digital ID (AGDIS) Data Standards 2024.\n\n> AL2 means the authentication level specified as AL2 in rule 3.1 of the Accreditation Data Standards.\n\n> Designated Identity Exchange Provider means Services Australia in its capacity as an accredited identity exchange provider while participating in the Australian Government Digital ID System.\n\n> Digital ID Act means the Digital ID Act 2024.\n\n> myGov linkID means a special attribute that links a person with a service available through myGov that the person seeks to access.\n\n> one-off digital ID: see rule 5.3 of the Accreditation Rules.\n\n#### 1.5 Schedules\n\n Each instrument that is specified in a Schedule to this instrument is amended or repealed as set out in the applicable items in the Schedule concerned, and any other item in a Schedule to this instrument has effect according to its terms.\n\nChapter 2—Transitional and application rules\n\n## Part 1—Accreditation\n\n#### 2.1 Entities taken to be accredited immediately after commencement\n\n For the purposes of item 4 of the table in item 2 of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have decided for the purposes of subsection 15(2) of the Digital ID Act to accredit an entity specified in column 1 of an item in Table 1 of Schedule 1 as the kind of accredited entity specified in column 2 of the item; and\n (b) have imposed the conditions, if any, specified in column 3 of the item on the entity’s accreditation for the purposes of paragraph 17(2)(a) of the Digital ID Act.\n\n## Part 2—Approval to participate in the Australian Government Digital ID System\n\n#### 2.2 Accredited entities taken to be approved to participate in the Australian Government Digital ID System immediately after commencement\n\n For the purposes of item 4 of the table in subitem 4(1) of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have approved an entity specified in column 1 of an item in the following table to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as the kind of accredited entity specified in column 2 of the item; and\n (b) have imposed the conditions specified in column 3 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n\n```html\n

Accredited entities taken to be approved to participate in the Australian Government Digital ID System

Item

Column 1

Entity

Column 2

Kind of accredited entity

Column 3

Conditions

1

Services Australia

Accredited attribute service provider

The entity must:

(a) provide its accredited services to issue and manage the myGov linkID attribute; and

(b) directly connect to the Designated Identity Exchange Provider.

2

Services Australia

Accredited identity exchange provider

The entity must undertake all of the following if, during a reporting period for the entity, the entity has informed a participating relying party, in accordance with section 2.2.1 of Schedule 1 to the AGDIS Data Standards, which accredited identity service provider an individual used to authenticate (the disclosure):

(a) arrange, in respect of that reporting period, an independent audit of the entity’s compliance with:

(i) section 2.2.1.4 and the data representation in Table 30 of Schedule 3 to the AGDIS Data Standards in relation to the disclosure; and

(ii) any requirements in the federation protocol used by the participating relying party in relation to the disclosure;

(b) provide the auditor’s findings in relation to that reporting period to the Digital ID Regulator before the end of the next reporting period; and

(c) publish the auditor’s findings in relation to that reporting period on the entity’s website.

\n```\n\n#### 2.3 Relying parties taken to be approved to participate in the Australian Government Digital ID System immediately after commencement\n\n For the purposes of item 10 of the table in subitem 4(2) of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have approved an entity specified in column 1 of an item in Table 2 of Schedule 1 to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as a participating relying party; and\n (b) have imposed the conditions specified in column 2 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n\n#### 2.4 Relying parties taken to be approved to participate in the Australian Government Digital ID System on a specified date after commencement\n\n (1) Subitem 4(2) of Schedule 1 to the Act has effect in relation to an entity mentioned in subrule (2) with the modifications prescribed in that subrule.\n (2) For the purposes of item 10 of the table in subitem 4(2) of Schedule 1 to the Act, the Digital ID Regulator is taken, on the specified date, to:\n (a) have approved an entity specified in column 1 of an item in Table 3 of Schedule 1 to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as a participating relying party; and\n (b) have imposed the conditions specified in column 2 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n (3) Item 5 of Schedule 1 to the Act has effect in relation to an entity mentioned in subrule (2) with the modifications prescribed in subrules (4) to (11).\n (4) Item 5 of Schedule 1 to the Act applies in relation to an entity that holds an approval to participate in the Australian Government Digital ID System because of the operation of subitem 4(2) of Schedule 1 to the Act as modified by this rule.\n (5) For the purposes of paragraph 62(5)(a) of the Digital ID Act:\n (a) the Digital ID Regulator is taken to have given written notice of the decision to approve the entity to participate in the Australian Government Digital ID System; and\n (b) the notice referred to in paragraph (a) is taken to have complied with subsection 62(6) of the Digital ID Act.\n (6) For the purposes of paragraph 62(6)(a) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity that the day the entity’s approval to participate in the Australian Government Digital ID System comes into force is the specified date.\n (7) For the purposes of paragraph 62(6)(c) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity of the conditions set out in column 2 of the item in Table 3 of Schedule 1 that relates to the entity.\n (8) For the purposes of paragraph 62(6)(d) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity that the day on which the entity must begin to participate in the Australian Government Digital ID System is the specified date.\n (9) For the purposes of paragraph 64(1)(c) of the Digital ID Act, the entity is taken to have begun participating in the Australian Government Digital ID System on the specified date.\n (10) A decision taken to have been made because of the operation of paragraph 4(2)(b) of Schedule 1 to the Act as modified by this rule is not a reviewable decision for the purposes of the Digital ID Act.\n (11) In this rule:\n\n> specified date, in relation to an entity mentioned in subrule (2), means the date specified in column 3 of the item in Table 3 in Schedule 1 that relates to the entity.\n\n## Part 3—Transitional liability arrangements\n\n#### 2.5 Application of statutory contract provisions in the Digital ID Act\n\n (1) Division 2 of Part 3 of Chapter 4 of the Digital ID Act does not apply until the earlier of the following:\n (a) 2 years after commencement; and\n (b) the first date on which rules made under subsection 85(5) of the Digital ID Act commence.\n (2) For the avoidance of doubt, this rule does not limit or modify the power of the Minister to make rules in accordance with subsection 85(5) or section 87 of the Digital ID Act.\n\n## Part 4—Other modifications to the Act\n\n#### 2.6 References to myGovID in the Act\n\n References to ‘myGovID’ in the Act are taken to be references to ‘myID’.\n\n## Part 5—Other modifications to the Digital ID Act\n\n#### 2.7 Conditions on accreditation relating to restricted attributes of individuals\n\n Subsections 18(2) and (3) of the Digital ID Act (about conditions relating to restricted attributes of individuals) do not apply in relation to:\n (a) the conditions taken to be imposed under paragraph (h) of column 3 of item 2 of the table in item 2 of Schedule 1 to the Act; and\n (b) the conditions taken to be imposed under paragraph (c) of column 3 of item 3 of Table 1 in Schedule 1.","sortOrder":7},{"sectionNumber":"2.2","sectionType":"section","heading":"Accredited entities taken to be approved to participate in the Australian Government Digital ID System immediately after commencement","content":"#### 2.2 Accredited entities taken to be approved to participate in the Australian Government Digital ID System immediately after commencement\n\n For the purposes of item 4 of the table in subitem 4(1) of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have approved an entity specified in column 1 of an item in the following table to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as the kind of accredited entity specified in column 2 of the item; and\n (b) have imposed the conditions specified in column 3 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n\n```html\n

Accredited entities taken to be approved to participate in the Australian Government Digital ID System

Item

Column 1

Entity

Column 2

Kind of accredited entity

Column 3

Conditions

1

Services Australia

Accredited attribute service provider

The entity must:

(a) provide its accredited services to issue and manage the myGov linkID attribute; and

(b) directly connect to the Designated Identity Exchange Provider.

2

Services Australia

Accredited identity exchange provider

The entity must undertake all of the following if, during a reporting period for the entity, the entity has informed a participating relying party, in accordance with section 2.2.1 of Schedule 1 to the AGDIS Data Standards, which accredited identity service provider an individual used to authenticate (the disclosure):

(a) arrange, in respect of that reporting period, an independent audit of the entity’s compliance with:

(i) section 2.2.1.4 and the data representation in Table 30 of Schedule 3 to the AGDIS Data Standards in relation to the disclosure; and

(ii) any requirements in the federation protocol used by the participating relying party in relation to the disclosure;

(b) provide the auditor’s findings in relation to that reporting period to the Digital ID Regulator before the end of the next reporting period; and

(c) publish the auditor’s findings in relation to that reporting period on the entity’s website.

\n```","sortOrder":8},{"sectionNumber":"2.3","sectionType":"section","heading":"Relying parties taken to be approved to participate in the Australian Government Digital ID System immediately after commencement","content":"#### 2.3 Relying parties taken to be approved to participate in the Australian Government Digital ID System immediately after commencement\n\n For the purposes of item 10 of the table in subitem 4(2) of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have approved an entity specified in column 1 of an item in Table 2 of Schedule 1 to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as a participating relying party; and\n (b) have imposed the conditions specified in column 2 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.","sortOrder":9},{"sectionNumber":"2.4","sectionType":"section","heading":"Relying parties taken to be approved to participate in the Australian Government Digital ID System on a specified date after commencement","content":"#### 2.4 Relying parties taken to be approved to participate in the Australian Government Digital ID System on a specified date after commencement\n\n (1) Subitem 4(2) of Schedule 1 to the Act has effect in relation to an entity mentioned in subrule (2) with the modifications prescribed in that subrule.\n (2) For the purposes of item 10 of the table in subitem 4(2) of Schedule 1 to the Act, the Digital ID Regulator is taken, on the specified date, to:\n (a) have approved an entity specified in column 1 of an item in Table 3 of Schedule 1 to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as a participating relying party; and\n (b) have imposed the conditions specified in column 2 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n (3) Item 5 of Schedule 1 to the Act has effect in relation to an entity mentioned in subrule (2) with the modifications prescribed in subrules (4) to (11).\n (4) Item 5 of Schedule 1 to the Act applies in relation to an entity that holds an approval to participate in the Australian Government Digital ID System because of the operation of subitem 4(2) of Schedule 1 to the Act as modified by this rule.\n (5) For the purposes of paragraph 62(5)(a) of the Digital ID Act:\n (a) the Digital ID Regulator is taken to have given written notice of the decision to approve the entity to participate in the Australian Government Digital ID System; and\n (b) the notice referred to in paragraph (a) is taken to have complied with subsection 62(6) of the Digital ID Act.\n (6) For the purposes of paragraph 62(6)(a) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity that the day the entity’s approval to participate in the Australian Government Digital ID System comes into force is the specified date.\n (7) For the purposes of paragraph 62(6)(c) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity of the conditions set out in column 2 of the item in Table 3 of Schedule 1 that relates to the entity.\n (8) For the purposes of paragraph 62(6)(d) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity that the day on which the entity must begin to participate in the Australian Government Digital ID System is the specified date.\n (9) For the purposes of paragraph 64(1)(c) of the Digital ID Act, the entity is taken to have begun participating in the Australian Government Digital ID System on the specified date.\n (10) A decision taken to have been made because of the operation of paragraph 4(2)(b) of Schedule 1 to the Act as modified by this rule is not a reviewable decision for the purposes of the Digital ID Act.\n (11) In this rule:\n\n> specified date, in relation to an entity mentioned in subrule (2), means the date specified in column 3 of the item in Table 3 in Schedule 1 that relates to the entity.","sortOrder":10},{"sectionNumber":"Part 3","sectionType":"part","heading":"Transitional liability arrangements","content":"Chapter 1—Preliminary\n\n#### 1.1 Name\n\n These rules are the Digital ID (Transitional and Consequential Provisions) Rules 2024.\n\n#### 1.2 Commencement\n\n These rules commence at the same time as the Digital ID (Transitional and Consequential Provisions) Act 2024 commences.\n\n#### 1.3 Authority\n\n These rules are made under item 10 of Schedule 1 to the Digital ID (Transitional and Consequential Provisions) Act 2024.\n\n> Note 1: Item 10 of Schedule 1 to the Act (the Schedule) relevantly provides that:\n\n (a) the Minister may make rules prescribing matters required or permitted by the Schedule to be prescribed by the rules, or necessary or convenient to be prescribed for carrying out or giving effect to the Schedule;\n (b) without limiting the rule-making power mentioned in paragraph (a), the rules may prescribe matters of a transitional nature (including prescribing any saving or application provisions) relating to the enactment of the Schedule or the Digital ID Act;\n (c) rules made for the purposes of item 10 of the Schedule before the end of 12 months after commencement may provide that the Act or the Digital ID Act have effect with any modifications prescribed by the rules; and\n (d) subject to the limitations in subitem 10(4) of the Schedule, the Act does not limit the rules that may be made.\n\n> Note 2: Subitem 10(4) of the Schedule provides that, to avoid doubt, the rules may not do the following:\n\n (a) create an offence or civil penalty;\n (b) provide powers of arrest or detention, or entry, search or seizure;\n (c) impose a tax;\n (d) set an amount to be appropriated from the Consolidated Revenue Fund under an appropriation in the Act;\n (e) directly amend the text of the Act or the Digital ID Act.\n\n#### 1.4 Definitions\n\n> Note 1: A number of expressions used in these rules are defined in the Act, including the following:\n\n commencement;\n driver’s licence;\n medicare card;\n myGov;\n passport.\n\n> Note 2: A number of expressions used in these rules are defined in the Digital ID Act, including the following:\n\n accredited entity;\n attribute;\n digital ID;\n participating relying party;\n personal information.\n\n> Note 3: A number of expressions used in these rules are defined in the Accreditation Rules, including the following:\n\n biometric binding;\n identity proofing;\n IP level;\n reporting period;\n special attribute.\n\n (1) Expressions defined in the Digital ID Act and the Accreditation Rules have the same meaning in these rules.\n (2) In these rules:\n\n> Act means the Digital ID (Transitional and Consequential Provisions) Act 2024.\n\n> Accreditation Data Standards means the Digital ID (Accreditation) Data Standards 2024.\n\n> Accreditation Rules means the Digital ID (Accreditation) Rules 2024.\n\n> AGDIS Data Standards means the Digital ID (AGDIS) Data Standards 2024.\n\n> AL2 means the authentication level specified as AL2 in rule 3.1 of the Accreditation Data Standards.\n\n> Designated Identity Exchange Provider means Services Australia in its capacity as an accredited identity exchange provider while participating in the Australian Government Digital ID System.\n\n> Digital ID Act means the Digital ID Act 2024.\n\n> myGov linkID means a special attribute that links a person with a service available through myGov that the person seeks to access.\n\n> one-off digital ID: see rule 5.3 of the Accreditation Rules.\n\n#### 1.5 Schedules\n\n Each instrument that is specified in a Schedule to this instrument is amended or repealed as set out in the applicable items in the Schedule concerned, and any other item in a Schedule to this instrument has effect according to its terms.\n\nChapter 2—Transitional and application rules\n\n## Part 1—Accreditation\n\n#### 2.1 Entities taken to be accredited immediately after commencement\n\n For the purposes of item 4 of the table in item 2 of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have decided for the purposes of subsection 15(2) of the Digital ID Act to accredit an entity specified in column 1 of an item in Table 1 of Schedule 1 as the kind of accredited entity specified in column 2 of the item; and\n (b) have imposed the conditions, if any, specified in column 3 of the item on the entity’s accreditation for the purposes of paragraph 17(2)(a) of the Digital ID Act.\n\n## Part 2—Approval to participate in the Australian Government Digital ID System\n\n#### 2.2 Accredited entities taken to be approved to participate in the Australian Government Digital ID System immediately after commencement\n\n For the purposes of item 4 of the table in subitem 4(1) of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have approved an entity specified in column 1 of an item in the following table to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as the kind of accredited entity specified in column 2 of the item; and\n (b) have imposed the conditions specified in column 3 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n\n```html\n

Accredited entities taken to be approved to participate in the Australian Government Digital ID System

Item

Column 1

Entity

Column 2

Kind of accredited entity

Column 3

Conditions

1

Services Australia

Accredited attribute service provider

The entity must:

(a) provide its accredited services to issue and manage the myGov linkID attribute; and

(b) directly connect to the Designated Identity Exchange Provider.

2

Services Australia

Accredited identity exchange provider

The entity must undertake all of the following if, during a reporting period for the entity, the entity has informed a participating relying party, in accordance with section 2.2.1 of Schedule 1 to the AGDIS Data Standards, which accredited identity service provider an individual used to authenticate (the disclosure):

(a) arrange, in respect of that reporting period, an independent audit of the entity’s compliance with:

(i) section 2.2.1.4 and the data representation in Table 30 of Schedule 3 to the AGDIS Data Standards in relation to the disclosure; and

(ii) any requirements in the federation protocol used by the participating relying party in relation to the disclosure;

(b) provide the auditor’s findings in relation to that reporting period to the Digital ID Regulator before the end of the next reporting period; and

(c) publish the auditor’s findings in relation to that reporting period on the entity’s website.

\n```\n\n#### 2.3 Relying parties taken to be approved to participate in the Australian Government Digital ID System immediately after commencement\n\n For the purposes of item 10 of the table in subitem 4(2) of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have approved an entity specified in column 1 of an item in Table 2 of Schedule 1 to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as a participating relying party; and\n (b) have imposed the conditions specified in column 2 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n\n#### 2.4 Relying parties taken to be approved to participate in the Australian Government Digital ID System on a specified date after commencement\n\n (1) Subitem 4(2) of Schedule 1 to the Act has effect in relation to an entity mentioned in subrule (2) with the modifications prescribed in that subrule.\n (2) For the purposes of item 10 of the table in subitem 4(2) of Schedule 1 to the Act, the Digital ID Regulator is taken, on the specified date, to:\n (a) have approved an entity specified in column 1 of an item in Table 3 of Schedule 1 to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as a participating relying party; and\n (b) have imposed the conditions specified in column 2 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n (3) Item 5 of Schedule 1 to the Act has effect in relation to an entity mentioned in subrule (2) with the modifications prescribed in subrules (4) to (11).\n (4) Item 5 of Schedule 1 to the Act applies in relation to an entity that holds an approval to participate in the Australian Government Digital ID System because of the operation of subitem 4(2) of Schedule 1 to the Act as modified by this rule.\n (5) For the purposes of paragraph 62(5)(a) of the Digital ID Act:\n (a) the Digital ID Regulator is taken to have given written notice of the decision to approve the entity to participate in the Australian Government Digital ID System; and\n (b) the notice referred to in paragraph (a) is taken to have complied with subsection 62(6) of the Digital ID Act.\n (6) For the purposes of paragraph 62(6)(a) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity that the day the entity’s approval to participate in the Australian Government Digital ID System comes into force is the specified date.\n (7) For the purposes of paragraph 62(6)(c) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity of the conditions set out in column 2 of the item in Table 3 of Schedule 1 that relates to the entity.\n (8) For the purposes of paragraph 62(6)(d) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity that the day on which the entity must begin to participate in the Australian Government Digital ID System is the specified date.\n (9) For the purposes of paragraph 64(1)(c) of the Digital ID Act, the entity is taken to have begun participating in the Australian Government Digital ID System on the specified date.\n (10) A decision taken to have been made because of the operation of paragraph 4(2)(b) of Schedule 1 to the Act as modified by this rule is not a reviewable decision for the purposes of the Digital ID Act.\n (11) In this rule:\n\n> specified date, in relation to an entity mentioned in subrule (2), means the date specified in column 3 of the item in Table 3 in Schedule 1 that relates to the entity.\n\n## Part 3—Transitional liability arrangements\n\n#### 2.5 Application of statutory contract provisions in the Digital ID Act\n\n (1) Division 2 of Part 3 of Chapter 4 of the Digital ID Act does not apply until the earlier of the following:\n (a) 2 years after commencement; and\n (b) the first date on which rules made under subsection 85(5) of the Digital ID Act commence.\n (2) For the avoidance of doubt, this rule does not limit or modify the power of the Minister to make rules in accordance with subsection 85(5) or section 87 of the Digital ID Act.\n\n## Part 4—Other modifications to the Act\n\n#### 2.6 References to myGovID in the Act\n\n References to ‘myGovID’ in the Act are taken to be references to ‘myID’.\n\n## Part 5—Other modifications to the Digital ID Act\n\n#### 2.7 Conditions on accreditation relating to restricted attributes of individuals\n\n Subsections 18(2) and (3) of the Digital ID Act (about conditions relating to restricted attributes of individuals) do not apply in relation to:\n (a) the conditions taken to be imposed under paragraph (h) of column 3 of item 2 of the table in item 2 of Schedule 1 to the Act; and\n (b) the conditions taken to be imposed under paragraph (c) of column 3 of item 3 of Table 1 in Schedule 1.","sortOrder":11},{"sectionNumber":"2.5","sectionType":"section","heading":"Application of statutory contract provisions in the Digital ID Act","content":"#### 2.5 Application of statutory contract provisions in the Digital ID Act\n\n (1) Division 2 of Part 3 of Chapter 4 of the Digital ID Act does not apply until the earlier of the following:\n (a) 2 years after commencement; and\n (b) the first date on which rules made under subsection 85(5) of the Digital ID Act commence.\n (2) For the avoidance of doubt, this rule does not limit or modify the power of the Minister to make rules in accordance with subsection 85(5) or section 87 of the Digital ID Act.","sortOrder":12},{"sectionNumber":"Part 4","sectionType":"part","heading":"Other modifications to the Act","content":"Chapter 1—Preliminary\n\n#### 1.1 Name\n\n These rules are the Digital ID (Transitional and Consequential Provisions) Rules 2024.\n\n#### 1.2 Commencement\n\n These rules commence at the same time as the Digital ID (Transitional and Consequential Provisions) Act 2024 commences.\n\n#### 1.3 Authority\n\n These rules are made under item 10 of Schedule 1 to the Digital ID (Transitional and Consequential Provisions) Act 2024.\n\n> Note 1: Item 10 of Schedule 1 to the Act (the Schedule) relevantly provides that:\n\n (a) the Minister may make rules prescribing matters required or permitted by the Schedule to be prescribed by the rules, or necessary or convenient to be prescribed for carrying out or giving effect to the Schedule;\n (b) without limiting the rule-making power mentioned in paragraph (a), the rules may prescribe matters of a transitional nature (including prescribing any saving or application provisions) relating to the enactment of the Schedule or the Digital ID Act;\n (c) rules made for the purposes of item 10 of the Schedule before the end of 12 months after commencement may provide that the Act or the Digital ID Act have effect with any modifications prescribed by the rules; and\n (d) subject to the limitations in subitem 10(4) of the Schedule, the Act does not limit the rules that may be made.\n\n> Note 2: Subitem 10(4) of the Schedule provides that, to avoid doubt, the rules may not do the following:\n\n (a) create an offence or civil penalty;\n (b) provide powers of arrest or detention, or entry, search or seizure;\n (c) impose a tax;\n (d) set an amount to be appropriated from the Consolidated Revenue Fund under an appropriation in the Act;\n (e) directly amend the text of the Act or the Digital ID Act.\n\n#### 1.4 Definitions\n\n> Note 1: A number of expressions used in these rules are defined in the Act, including the following:\n\n commencement;\n driver’s licence;\n medicare card;\n myGov;\n passport.\n\n> Note 2: A number of expressions used in these rules are defined in the Digital ID Act, including the following:\n\n accredited entity;\n attribute;\n digital ID;\n participating relying party;\n personal information.\n\n> Note 3: A number of expressions used in these rules are defined in the Accreditation Rules, including the following:\n\n biometric binding;\n identity proofing;\n IP level;\n reporting period;\n special attribute.\n\n (1) Expressions defined in the Digital ID Act and the Accreditation Rules have the same meaning in these rules.\n (2) In these rules:\n\n> Act means the Digital ID (Transitional and Consequential Provisions) Act 2024.\n\n> Accreditation Data Standards means the Digital ID (Accreditation) Data Standards 2024.\n\n> Accreditation Rules means the Digital ID (Accreditation) Rules 2024.\n\n> AGDIS Data Standards means the Digital ID (AGDIS) Data Standards 2024.\n\n> AL2 means the authentication level specified as AL2 in rule 3.1 of the Accreditation Data Standards.\n\n> Designated Identity Exchange Provider means Services Australia in its capacity as an accredited identity exchange provider while participating in the Australian Government Digital ID System.\n\n> Digital ID Act means the Digital ID Act 2024.\n\n> myGov linkID means a special attribute that links a person with a service available through myGov that the person seeks to access.\n\n> one-off digital ID: see rule 5.3 of the Accreditation Rules.\n\n#### 1.5 Schedules\n\n Each instrument that is specified in a Schedule to this instrument is amended or repealed as set out in the applicable items in the Schedule concerned, and any other item in a Schedule to this instrument has effect according to its terms.\n\nChapter 2—Transitional and application rules\n\n## Part 1—Accreditation\n\n#### 2.1 Entities taken to be accredited immediately after commencement\n\n For the purposes of item 4 of the table in item 2 of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have decided for the purposes of subsection 15(2) of the Digital ID Act to accredit an entity specified in column 1 of an item in Table 1 of Schedule 1 as the kind of accredited entity specified in column 2 of the item; and\n (b) have imposed the conditions, if any, specified in column 3 of the item on the entity’s accreditation for the purposes of paragraph 17(2)(a) of the Digital ID Act.\n\n## Part 2—Approval to participate in the Australian Government Digital ID System\n\n#### 2.2 Accredited entities taken to be approved to participate in the Australian Government Digital ID System immediately after commencement\n\n For the purposes of item 4 of the table in subitem 4(1) of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have approved an entity specified in column 1 of an item in the following table to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as the kind of accredited entity specified in column 2 of the item; and\n (b) have imposed the conditions specified in column 3 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n\n```html\n

Accredited entities taken to be approved to participate in the Australian Government Digital ID System

Item

Column 1

Entity

Column 2

Kind of accredited entity

Column 3

Conditions

1

Services Australia

Accredited attribute service provider

The entity must:

(a) provide its accredited services to issue and manage the myGov linkID attribute; and

(b) directly connect to the Designated Identity Exchange Provider.

2

Services Australia

Accredited identity exchange provider

The entity must undertake all of the following if, during a reporting period for the entity, the entity has informed a participating relying party, in accordance with section 2.2.1 of Schedule 1 to the AGDIS Data Standards, which accredited identity service provider an individual used to authenticate (the disclosure):

(a) arrange, in respect of that reporting period, an independent audit of the entity’s compliance with:

(i) section 2.2.1.4 and the data representation in Table 30 of Schedule 3 to the AGDIS Data Standards in relation to the disclosure; and

(ii) any requirements in the federation protocol used by the participating relying party in relation to the disclosure;

(b) provide the auditor’s findings in relation to that reporting period to the Digital ID Regulator before the end of the next reporting period; and

(c) publish the auditor’s findings in relation to that reporting period on the entity’s website.

\n```\n\n#### 2.3 Relying parties taken to be approved to participate in the Australian Government Digital ID System immediately after commencement\n\n For the purposes of item 10 of the table in subitem 4(2) of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have approved an entity specified in column 1 of an item in Table 2 of Schedule 1 to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as a participating relying party; and\n (b) have imposed the conditions specified in column 2 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n\n#### 2.4 Relying parties taken to be approved to participate in the Australian Government Digital ID System on a specified date after commencement\n\n (1) Subitem 4(2) of Schedule 1 to the Act has effect in relation to an entity mentioned in subrule (2) with the modifications prescribed in that subrule.\n (2) For the purposes of item 10 of the table in subitem 4(2) of Schedule 1 to the Act, the Digital ID Regulator is taken, on the specified date, to:\n (a) have approved an entity specified in column 1 of an item in Table 3 of Schedule 1 to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as a participating relying party; and\n (b) have imposed the conditions specified in column 2 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n (3) Item 5 of Schedule 1 to the Act has effect in relation to an entity mentioned in subrule (2) with the modifications prescribed in subrules (4) to (11).\n (4) Item 5 of Schedule 1 to the Act applies in relation to an entity that holds an approval to participate in the Australian Government Digital ID System because of the operation of subitem 4(2) of Schedule 1 to the Act as modified by this rule.\n (5) For the purposes of paragraph 62(5)(a) of the Digital ID Act:\n (a) the Digital ID Regulator is taken to have given written notice of the decision to approve the entity to participate in the Australian Government Digital ID System; and\n (b) the notice referred to in paragraph (a) is taken to have complied with subsection 62(6) of the Digital ID Act.\n (6) For the purposes of paragraph 62(6)(a) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity that the day the entity’s approval to participate in the Australian Government Digital ID System comes into force is the specified date.\n (7) For the purposes of paragraph 62(6)(c) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity of the conditions set out in column 2 of the item in Table 3 of Schedule 1 that relates to the entity.\n (8) For the purposes of paragraph 62(6)(d) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity that the day on which the entity must begin to participate in the Australian Government Digital ID System is the specified date.\n (9) For the purposes of paragraph 64(1)(c) of the Digital ID Act, the entity is taken to have begun participating in the Australian Government Digital ID System on the specified date.\n (10) A decision taken to have been made because of the operation of paragraph 4(2)(b) of Schedule 1 to the Act as modified by this rule is not a reviewable decision for the purposes of the Digital ID Act.\n (11) In this rule:\n\n> specified date, in relation to an entity mentioned in subrule (2), means the date specified in column 3 of the item in Table 3 in Schedule 1 that relates to the entity.\n\n## Part 3—Transitional liability arrangements\n\n#### 2.5 Application of statutory contract provisions in the Digital ID Act\n\n (1) Division 2 of Part 3 of Chapter 4 of the Digital ID Act does not apply until the earlier of the following:\n (a) 2 years after commencement; and\n (b) the first date on which rules made under subsection 85(5) of the Digital ID Act commence.\n (2) For the avoidance of doubt, this rule does not limit or modify the power of the Minister to make rules in accordance with subsection 85(5) or section 87 of the Digital ID Act.\n\n## Part 4—Other modifications to the Act\n\n#### 2.6 References to myGovID in the Act\n\n References to ‘myGovID’ in the Act are taken to be references to ‘myID’.\n\n## Part 5—Other modifications to the Digital ID Act\n\n#### 2.7 Conditions on accreditation relating to restricted attributes of individuals\n\n Subsections 18(2) and (3) of the Digital ID Act (about conditions relating to restricted attributes of individuals) do not apply in relation to:\n (a) the conditions taken to be imposed under paragraph (h) of column 3 of item 2 of the table in item 2 of Schedule 1 to the Act; and\n (b) the conditions taken to be imposed under paragraph (c) of column 3 of item 3 of Table 1 in Schedule 1.","sortOrder":13},{"sectionNumber":"2.6","sectionType":"section","heading":"References to myGovID in the Act","content":"#### 2.6 References to myGovID in the Act\n\n References to ‘myGovID’ in the Act are taken to be references to ‘myID’.","sortOrder":14},{"sectionNumber":"Part 5","sectionType":"part","heading":"Other modifications to the Digital ID Act","content":"Chapter 1—Preliminary\n\n#### 1.1 Name\n\n These rules are the Digital ID (Transitional and Consequential Provisions) Rules 2024.\n\n#### 1.2 Commencement\n\n These rules commence at the same time as the Digital ID (Transitional and Consequential Provisions) Act 2024 commences.\n\n#### 1.3 Authority\n\n These rules are made under item 10 of Schedule 1 to the Digital ID (Transitional and Consequential Provisions) Act 2024.\n\n> Note 1: Item 10 of Schedule 1 to the Act (the Schedule) relevantly provides that:\n\n (a) the Minister may make rules prescribing matters required or permitted by the Schedule to be prescribed by the rules, or necessary or convenient to be prescribed for carrying out or giving effect to the Schedule;\n (b) without limiting the rule-making power mentioned in paragraph (a), the rules may prescribe matters of a transitional nature (including prescribing any saving or application provisions) relating to the enactment of the Schedule or the Digital ID Act;\n (c) rules made for the purposes of item 10 of the Schedule before the end of 12 months after commencement may provide that the Act or the Digital ID Act have effect with any modifications prescribed by the rules; and\n (d) subject to the limitations in subitem 10(4) of the Schedule, the Act does not limit the rules that may be made.\n\n> Note 2: Subitem 10(4) of the Schedule provides that, to avoid doubt, the rules may not do the following:\n\n (a) create an offence or civil penalty;\n (b) provide powers of arrest or detention, or entry, search or seizure;\n (c) impose a tax;\n (d) set an amount to be appropriated from the Consolidated Revenue Fund under an appropriation in the Act;\n (e) directly amend the text of the Act or the Digital ID Act.\n\n#### 1.4 Definitions\n\n> Note 1: A number of expressions used in these rules are defined in the Act, including the following:\n\n commencement;\n driver’s licence;\n medicare card;\n myGov;\n passport.\n\n> Note 2: A number of expressions used in these rules are defined in the Digital ID Act, including the following:\n\n accredited entity;\n attribute;\n digital ID;\n participating relying party;\n personal information.\n\n> Note 3: A number of expressions used in these rules are defined in the Accreditation Rules, including the following:\n\n biometric binding;\n identity proofing;\n IP level;\n reporting period;\n special attribute.\n\n (1) Expressions defined in the Digital ID Act and the Accreditation Rules have the same meaning in these rules.\n (2) In these rules:\n\n> Act means the Digital ID (Transitional and Consequential Provisions) Act 2024.\n\n> Accreditation Data Standards means the Digital ID (Accreditation) Data Standards 2024.\n\n> Accreditation Rules means the Digital ID (Accreditation) Rules 2024.\n\n> AGDIS Data Standards means the Digital ID (AGDIS) Data Standards 2024.\n\n> AL2 means the authentication level specified as AL2 in rule 3.1 of the Accreditation Data Standards.\n\n> Designated Identity Exchange Provider means Services Australia in its capacity as an accredited identity exchange provider while participating in the Australian Government Digital ID System.\n\n> Digital ID Act means the Digital ID Act 2024.\n\n> myGov linkID means a special attribute that links a person with a service available through myGov that the person seeks to access.\n\n> one-off digital ID: see rule 5.3 of the Accreditation Rules.\n\n#### 1.5 Schedules\n\n Each instrument that is specified in a Schedule to this instrument is amended or repealed as set out in the applicable items in the Schedule concerned, and any other item in a Schedule to this instrument has effect according to its terms.\n\nChapter 2—Transitional and application rules\n\n## Part 1—Accreditation\n\n#### 2.1 Entities taken to be accredited immediately after commencement\n\n For the purposes of item 4 of the table in item 2 of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have decided for the purposes of subsection 15(2) of the Digital ID Act to accredit an entity specified in column 1 of an item in Table 1 of Schedule 1 as the kind of accredited entity specified in column 2 of the item; and\n (b) have imposed the conditions, if any, specified in column 3 of the item on the entity’s accreditation for the purposes of paragraph 17(2)(a) of the Digital ID Act.\n\n## Part 2—Approval to participate in the Australian Government Digital ID System\n\n#### 2.2 Accredited entities taken to be approved to participate in the Australian Government Digital ID System immediately after commencement\n\n For the purposes of item 4 of the table in subitem 4(1) of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have approved an entity specified in column 1 of an item in the following table to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as the kind of accredited entity specified in column 2 of the item; and\n (b) have imposed the conditions specified in column 3 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n\n```html\n

Accredited entities taken to be approved to participate in the Australian Government Digital ID System

Item

Column 1

Entity

Column 2

Kind of accredited entity

Column 3

Conditions

1

Services Australia

Accredited attribute service provider

The entity must:

(a) provide its accredited services to issue and manage the myGov linkID attribute; and

(b) directly connect to the Designated Identity Exchange Provider.

2

Services Australia

Accredited identity exchange provider

The entity must undertake all of the following if, during a reporting period for the entity, the entity has informed a participating relying party, in accordance with section 2.2.1 of Schedule 1 to the AGDIS Data Standards, which accredited identity service provider an individual used to authenticate (the disclosure):

(a) arrange, in respect of that reporting period, an independent audit of the entity’s compliance with:

(i) section 2.2.1.4 and the data representation in Table 30 of Schedule 3 to the AGDIS Data Standards in relation to the disclosure; and

(ii) any requirements in the federation protocol used by the participating relying party in relation to the disclosure;

(b) provide the auditor’s findings in relation to that reporting period to the Digital ID Regulator before the end of the next reporting period; and

(c) publish the auditor’s findings in relation to that reporting period on the entity’s website.

\n```\n\n#### 2.3 Relying parties taken to be approved to participate in the Australian Government Digital ID System immediately after commencement\n\n For the purposes of item 10 of the table in subitem 4(2) of Schedule 1 to the Act, the Digital ID Regulator is taken, immediately after commencement, to:\n (a) have approved an entity specified in column 1 of an item in Table 2 of Schedule 1 to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as a participating relying party; and\n (b) have imposed the conditions specified in column 2 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n\n#### 2.4 Relying parties taken to be approved to participate in the Australian Government Digital ID System on a specified date after commencement\n\n (1) Subitem 4(2) of Schedule 1 to the Act has effect in relation to an entity mentioned in subrule (2) with the modifications prescribed in that subrule.\n (2) For the purposes of item 10 of the table in subitem 4(2) of Schedule 1 to the Act, the Digital ID Regulator is taken, on the specified date, to:\n (a) have approved an entity specified in column 1 of an item in Table 3 of Schedule 1 to participate in the Australian Government Digital ID System for the purposes of section 62 of the Digital ID Act as a participating relying party; and\n (b) have imposed the conditions specified in column 2 of the item on the entity’s approval for the purposes of paragraph 64(2)(a) of the Digital ID Act.\n (3) Item 5 of Schedule 1 to the Act has effect in relation to an entity mentioned in subrule (2) with the modifications prescribed in subrules (4) to (11).\n (4) Item 5 of Schedule 1 to the Act applies in relation to an entity that holds an approval to participate in the Australian Government Digital ID System because of the operation of subitem 4(2) of Schedule 1 to the Act as modified by this rule.\n (5) For the purposes of paragraph 62(5)(a) of the Digital ID Act:\n (a) the Digital ID Regulator is taken to have given written notice of the decision to approve the entity to participate in the Australian Government Digital ID System; and\n (b) the notice referred to in paragraph (a) is taken to have complied with subsection 62(6) of the Digital ID Act.\n (6) For the purposes of paragraph 62(6)(a) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity that the day the entity’s approval to participate in the Australian Government Digital ID System comes into force is the specified date.\n (7) For the purposes of paragraph 62(6)(c) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity of the conditions set out in column 2 of the item in Table 3 of Schedule 1 that relates to the entity.\n (8) For the purposes of paragraph 62(6)(d) of the Digital ID Act, the Digital ID Regulator is taken to have notified the entity that the day on which the entity must begin to participate in the Australian Government Digital ID System is the specified date.\n (9) For the purposes of paragraph 64(1)(c) of the Digital ID Act, the entity is taken to have begun participating in the Australian Government Digital ID System on the specified date.\n (10) A decision taken to have been made because of the operation of paragraph 4(2)(b) of Schedule 1 to the Act as modified by this rule is not a reviewable decision for the purposes of the Digital ID Act.\n (11) In this rule:\n\n> specified date, in relation to an entity mentioned in subrule (2), means the date specified in column 3 of the item in Table 3 in Schedule 1 that relates to the entity.\n\n## Part 3—Transitional liability arrangements\n\n#### 2.5 Application of statutory contract provisions in the Digital ID Act\n\n (1) Division 2 of Part 3 of Chapter 4 of the Digital ID Act does not apply until the earlier of the following:\n (a) 2 years after commencement; and\n (b) the first date on which rules made under subsection 85(5) of the Digital ID Act commence.\n (2) For the avoidance of doubt, this rule does not limit or modify the power of the Minister to make rules in accordance with subsection 85(5) or section 87 of the Digital ID Act.\n\n## Part 4—Other modifications to the Act\n\n#### 2.6 References to myGovID in the Act\n\n References to ‘myGovID’ in the Act are taken to be references to ‘myID’.\n\n## Part 5—Other modifications to the Digital ID Act\n\n#### 2.7 Conditions on accreditation relating to restricted attributes of individuals\n\n Subsections 18(2) and (3) of the Digital ID Act (about conditions relating to restricted attributes of individuals) do not apply in relation to:\n (a) the conditions taken to be imposed under paragraph (h) of column 3 of item 2 of the table in item 2 of Schedule 1 to the Act; and\n (b) the conditions taken to be imposed under paragraph (c) of column 3 of item 3 of Table 1 in Schedule 1.","sortOrder":15},{"sectionNumber":"2.7","sectionType":"section","heading":"Conditions on accreditation relating to restricted attributes of individuals","content":"#### 2.7 Conditions on accreditation relating to restricted attributes of individuals\n\n Subsections 18(2) and (3) of the Digital ID Act (about conditions relating to restricted attributes of individuals) do not apply in relation to:\n (a) the conditions taken to be imposed under paragraph (h) of column 3 of item 2 of the table in item 2 of Schedule 1 to the Act; and\n (b) the conditions taken to be imposed under paragraph (c) of column 3 of item 3 of Table 1 in Schedule 1.","sortOrder":16},{"sectionNumber":"Table 1 — Entities taken to be approved ","sectionType":"section","heading":"Table 1 — Entities taken to be approved as accredited entities immediately after commencement","content":"#### Table 1 – Entities taken to be approved as accredited entities immediately after commencement\n\n> Note: See rule 2.1 (Entities taken to be accredited immediately after commencement).\n\n```html\n

Entities taken to be approved as accredited entities immediately after commencement

Item

Column 1

Entity

Column 2

Kind of accredited entity

Column 3

Conditions

1

Australian Postal Corporation

Accredited identity service provider

(a) The entity’s accredited services must only be provided:

(i) for the purpose of the service known as Digital iD™; and

(ii) directly through the entity’s Digital iD™ mobile application.

(b) The entity’s accredited services exclude services involving any of the following:

(i) the creation and use of a Keypass credential; or

(ii) the collection of biometric information of an individual; or

(iii) the processes for biometric binding; or

(iv) creating or using a one-off digital ID; or

(v) in-person visual verification of documents or other credentials; or

(vi) the collection of an individual’s image for verification purposes.

(c) The entity’s accredited services may support identity proofing up to the IP level in the following table. The IP level required or achieved will be dependent on which of the entity’s proofing scheme or rule has been selected by a relying party for their digital services.

Accredited proofing schemes/rules include:

Scheme/rule

IP level

TDIF: TDIF IP2

IP2

TDIF: TDIF IP1 PLUS

STARS: 2-Star (rule 2)

STARS: 2-Star (rule 3)

STARS: 1-Star (rule 2)

IP1 Plus

STARS: 1-Star (rule 1)

STARS: 1-Star (rule 3)

AML KYC Safe Harbour – Premium

AML KYC Safe Harbour – Basic

IP1

(d) The entity must advise each of its relying parties and clearly express in any promotional material to relying parties:

(i) that only the accredited proofing schemes and rules specified in the table in paragraph (c) are accredited; and

(ii) the equivalent IP level for each of the accredited proofing schemes and rules as specified in the table in paragraph (c).

(e) The entity’s accredited services may support binding of digital identities to AL2 level authenticators.

2

ConnectID Pty Ltd

Accredited identity exchange provider

(a) The entity’s accredited services must be provided only for the purposes of conveying, managing and coordinating the flow of data or other information between identity service providers and relying parties (ConnectID participants) in the identity exchange system known as ConnectID® and operated by the entity.

(b) The entity’s accredited services must be provided by way of a partly decentralised peer-to-peer-based identity exchange model or distributed technical approach which:

(i) supports the interconnectivity of the ConnectID participants;

(ii) must not require the end-user to directly engage with the ConnectID® identity exchange;

(iii) facilitates digital transactions between relying parties and accredited and unaccredited identity service providers;

(iv) does not retain or access the information (other than system logs, transactional metadata and billing data) that is generated in, obtained from, or collected for the purposes of, the ConnectID® identity exchange by the ConnectID participants and passes through the ConnectID® identity exchange;

(v) is subject to rules, procedures, standards and ConnectID participant contracts to govern each ConnectID participant’s access to and use of the ConnectID® identity exchange, and is not inconsistent with the Digital ID Act, the Accreditation Rules and the Accreditation Data Standards; and

(vi) must have an integrated ConnectID participant registry that is administered by the entity and contains the personal information of the ConnectID participant’s key business contacts.

3

Makesure Consulting Pty Ltd

Accredited identity service provider

(a) The entity’s accredited services must be provided only for the purposes of the RatifyID mobile application, which may only allow users to:

(i) create a reusable digital ID up to the IP2 IP level; and

(ii) bind an AL2 level authenticator to that digital ID.

(b) The entity must only disclose personal information to a relying party that reasonably requires that information to enable the relying party to provide, or provide access to, the service requested by the individual.

(c) The entity may only disclose, to any relying party within the class of industry segments specified in sub-column 1 of a sub-item in the following table, the restricted attributes specified in sub-column 2 of that sub-item if the restricted attributes to be disclosed:

(i) have been collected and verified by the entity through direct interaction with an individual; and

(ii) have been selected by the requesting relying party in the entity’s information technology system as a restricted attribute that is necessary for the requesting relying party to provide, or provide access to, a service to an individual.

Sub-Item

Sub-column 1

Segment

Sub-column 2

Restricted attributes permitted to be disclosed

1

Aviation infrastructure, security & operations

Aviation Security Identity Card reference number.

2

Corrective services

Driver’s licence document number.

Passport document number.

Birth certificate document number.

3

Delivery services

Driver’s licence document number.

4

Healthcare

Medicare card Individual Reference Number and card number.

5

International travel

Passport document number.

6

Labour hire

Driver’s licence document number.

7

Maritime infrastructure, security & operations

Maritime Security Identity Card reference number.

8

Vehicle hire

Driver’s licence document number.

(d) The entity must ensure, in relation to the entity’s accredited services provided through the RatifyID mobile application, that:

(i) the accredited services are hosted by infrastructure situated in Australia;

(ii) any personal information held by the entity is not disclosed to persons outside of Australia; and

(iii) third party access to the entity’s server is under the entity’s control and time limited.

4

OCR Labs Pty Ltd trading as IDVerse

Accredited identity service provider

(a) The entity’s accredited services must be provided only for the purposes of the service known as iDKit which:

(i) must only be capable of being ordered in the configuration that existed at the start of 8 July 2024 (accredited configuration);

(ii) must not be changed from the accredited configuration; and

(iii) must be limited to one-off digital IDs at the IP1 Plus, IP2, IP2 Plus, or IP3 IP levels.

(b) Subject to paragraph (c), the entity may collect biometric information of an individual for the purposes of verifying an individual’s identity or authenticating the individual to their digital ID.

(c) The entity must destroy the biometric information of an individual collected in accordance with the preceding condition immediately following successful biometric binding, unless:

(i) the entity is authorised by section 49 of the Digital ID Act to retain the information; and

(ii) the entity complies with any requirements prescribed by the Accreditation Rules and the Accreditation Data Standards.

5

Services Australia

Accredited attribute service provider

The entity’s accredited services must be provided only for the purpose of issuing and managing the myGov linkID attribute.

\n```","sortOrder":17},{"sectionNumber":"Table 2 — Relying parties taken to be ap","sectionType":"section","heading":"Table 2 — Relying parties taken to be approved to participate in the Australian Government Digital ID System immediately after commencement","content":"#### Table 2 – Relying parties taken to be approved to participate in the Australian Government Digital ID System immediately after commencement\n\n> Note: See rule 2.3 (Relying parties taken to be approved to participate in the Australian Government Digital ID System immediately after commencement).\n\n```html\n

Relying parties taken to be approved to participate in the Australian Government Digital ID System immediately after commencement

Item

Column 1

Entity

Column 2

Conditions

1

Australian Capital Territory Chief Minister, Treasury, and Economic Development Directorate (as represented by the ACT Revenue Office)

The entity:

(a) is approved to provide the service known as ACT Revenue Office Self Service Portal within the Australian Government Digital ID System; and

(b) must directly connect to the Designated Identity Exchange Provider.

2

Australian Communications and Media Authority

The entity:

(a) is approved to provide the service known as ACMA Lodgement Facility within the Australian Government Digital ID System; and

(b) must directly connect to the Designated Identity Exchange Provider.

3

Australian Electoral Commission

The entity:

(a) is approved to provide the service known as AEC EmployMe within the Australian Government Digital ID System; and

(b) must directly connect to the Designated Identity Exchange Provider.

4

Australian Financial Security Authority

The entity:

(a) is approved to provide the service known as Online Insolvency Services within the Australian Government Digital ID System;

(b) is approved to provide access to the service known as Professionals and Creditors Services Portal; and

(c) must directly connect to the Designated Identity Exchange Provider.

5

Australian Maritime Safety Authority

The entity:

(a) is approved to provide the service known as SARweb within the Australian Government Digital ID System; and

(b) must directly connect to the Designated Identity Exchange Provider.

6

Australian Prudential Regulation Authority

The entity:

(a) is approved to provide the following services within the Australian Government Digital ID System:

(i) the service known as APRA Connect;

(ii) the service known as APRA Connect (External Test);

(iii) the service known as APRA Extranet; and

(b) must directly connect to the Designated Identity Exchange Provider.

7

Australian Skills Quality Authority

The entity:

(a) is approved to provide the service known as ASQA Portal Services within the Australian Government Digital ID System; and

(b) must directly connect to the Designated Identity Exchange Provider.

8

Australian Trade and Investment Commission

The entity:

(a) is approved to provide the service known as Export Market Development Grants Online Portal within the Australian Government Digital ID System; and

(b) must directly connect to the Designated Identity Exchange Provider.

9

Commissioner of State Revenue (Victoria)

The entity:

(a) is approved to provide the service known as PTX Express within the Australian Government Digital ID System; and

(b) must directly connect to the Designated Identity Exchange Provider.

10

Commissioner of Taxation

The entity:

(a) is approved to provide the service known as Australian Business Register (ABR) Explorer within the Australian Government Digital ID System; and

(b) must directly connect to the Designated Identity Exchange Provider.

11

Commonwealth Department of Agriculture, Fisheries and Forestry

The entity:

(a) is approved to provide the service known as Digital Services Gateway within the Australian Government Digital ID System;

(b) is approved to provide access to the following services:

(i) the service known as Biosecurity Portal;

(ii) the service known as Export Service;

(iii) the service known as Online Services; and

(c) must directly connect to the Designated Identity Exchange Provider.

12

Commonwealth Department of Defence

The entity:

(a) is approved to provide the following services within the Australian Government Digital ID System:

(i) the service known as Defence Industry Security Program Member Portal;

(ii) the service known as Employer Support Payment Scheme; and

(b) must directly connect to the Designated Identity Exchange Provider.

13

Commonwealth Department of Education

The entity:

(a) is approved to provide the service known as the Department of Education Online Services within the Australian Government Digital ID System;

(b) is approved to provide access to the following:

(i) the service known as Educator Funding System;

(ii) the service known as Higher Education Loan Program (HELP) Debt Reduction; and

(c) must directly connect to the Designated Identity Exchange Provider.

14

Commonwealth Department of Employment and Workplace Relations

The entity:

(a) is approved to provide the following services within the Australian Government Digital ID System:

(i) the service known as DEWR Exchange;

(ii) the service known as SkillSelect;

(iii) the service known as Unique Student Identifier (USI) Organisation Portal;

(b) is approved to provide access to the following services:

(i) the service known as Apprenticeships Data Management System (ADMS) for Businesses;

(ii) the service known as Assessing Authority Reporting system;

(iii) the service known as Employment Security Access Management (eSAM);

(iv) the service known as Employment Services System (ESS Web);

(v) the service known as Fair Entitlements Guarantee Insolvency Practitioners (FEG IP) Online;

(vi) the service known as Federal Safety Commissioner (FSC) Online Portal;

(vii) the service known as Federal Safety Officer (FSO) Online Portal;

(viii) the service known as Jobs and Skills Australia Data Sharing Platform;

(ix) the service known as National Training Registration;

(x) the service known as Schools USI;

(xi) the service known as Workforce Australia Online for Businesses;

(xii) the service known as Workforce Australia Online for Providers; and

(c) must directly connect to the Designated Identity Exchange Provider.

15

Commonwealth Department of Health and Aged Care

The entity:

(a) is approved to provide the service known as Health Authentication Gateway within the Australian Government Digital ID System;

(b) is approved to provide access to the following services:

(i) the service known as Aged Care Financial Report Portal;

(ii) the service known as Department of Health and Aged Care API Catalogue;

(iii) the service known as Government Provider Management System;

(iv) the service known as Health Business Services Portal;

(v) the service known as Health Data Portal;

(vi) the service known as Health Products Portal;

(vii) the service known as Hearing Services Online Portal;

(viii) the service known as Medical Costs Finder Portal;

(ix) the service known as My Aged Care Assessor Portal;

(x) the service known as My Aged Care Hospital Portal;

(xi) the service known as My Aged Care Service Provider Portal;

(xii) the service known as National Occupational Respiratory Disease Registry;

(xiii) the service known as Office of the Gene Technology Regulator Online Services Portal;

(xiv) the service known as Pharmaceuticals Benefit Schemes Approved Suppliers Portal;

(xv) the service known as Primary Health Networks Program Electronic Reporting System; and

(c) must directly connect to the Designated Identity Exchange Provider.

16

Commonwealth Department of Home Affairs

The entity:

(a) is approved to provide the service known as DHA Authentication Broker within the Australian Government Digital ID System;

(b) is approved to provide access to the following services:

(i) the service known as AusCheck Portal;

(ii) the service known as Digital Verification Platform;

(iii) the service known as Online Revenue Receipting; and

(c) must directly connect to the Designated Identity Exchange Provider.

17

Commonwealth Department of Industry, Science and Resources

The entity:

(a) is approved to provide the service known as DISR Online Services within the Australian Government Digital ID System;

(b) is approved to provide access to the following services:

(i) the service known as Business Registration Service;

(ii) the service known as Climate Active Portal;

(iii) the service known as Commercial Building Disclosure Assessor Portal;

(iv) the service known as National Measurement Institute Service Portal;

(v) the service known as R&D Tax Incentive Customer Portal; and

(c) must directly connect to the Designated Identity Exchange Provider.

18

Commonwealth Department of Social Services

The entity:

(a) is approved to provide the following services within the Australian Government Digital ID System:

(i) the service known as DSS Portal;

(ii) the service known as Humanitarian Settlement Program;

(b) is approved to provide access to the following services:

(i) the service known as Data Exchange Portal;

(ii) the service known as Disability Case Portal;

(iii) the service known as Grant Recipient Portal;

(iv) the service known as National Rental Affordability Scheme Portal; and

(c) must directly connect to the Designated Identity Exchange Provider.

19

Commonwealth Department of the Prime Minister and Cabinet

The entity:

(a) is approved to provide the service known as Dataplace Portal within the Australian Government Digital ID System; and

(b) must directly connect to the Designated Identity Exchange Provider.

20

Commonwealth Department of the Treasury

The entity:

(a) is approved to provide the following services within the Australian Government Digital ID System;

(i) the service known as Foreign Investment Portal;

(ii) the service known as Treasury Authentication Broker;

(b) is approved to provide access to the following services:

(i) the service known as Franchise Disclosure Register;

(ii) the service known as Payment Times Reporting Portal; and

(c) must directly connect to the Designated Identity Exchange Provider.

21

Health Administration Corporation

The entity:

(a) is approved to provide the service known as NSW Health Online Services within the Australian Government Digital ID System;

(b) is approved to provide access to the service known as Isolated Patients Travel and Accommodation Assistance Scheme; and

(c) must directly connect to the Designated Identity Exchange Provider.

22

New South Wales Department of Education

The entity:

(a) is approved to provide the service known as NSW BusinessHub within the Australian Government Digital ID System;

(b) is approved to provide access to the following services:

(i) the service known as Assisted School Travel Program Contractor Mobile Dashboard;

(ii) the service known as Assisted School Travel Program Online;

(iii) the service known as Early Childhood Contract Management System;

(iv) the service known as ECEC Digital Hub;

(v) the service known as Smart and Skilled Applications Portal;

(vi) the service known as State Training Services Online; and

(c) must directly connect to the Designated Identity Exchange Provider.

23

Northern Territory Department of Corporate and Digital Development

The entity:

(a) is approved to provide the following services within the Australian Government Digital ID System:

(i) the service known as InvoiceNTG;

(ii) the service known as Motor Vehicle Registry for Business;

(iii) the service known as Vocational Education and Training Provider Portal; and

(b) must directly connect to the Designated Identity Exchange Provider.

24

Queensland Department of Customer Services, Open Data and Small and Family Business

The entity:

(a) is approved to provide the following services within the Australian Government Digital ID System:

(i) the service known as Queensland Digital Identity Logon (Business);

(ii) the service known as Queensland Digital Identity Logon (Individual);

(b) is approved to provide access to the following services:

(i) the service known as Biosecurity Management;

(ii) the service known as Business Launchpad;

(iii) the service known as Care Service Application Approval System;

(iv) the service known as Cathodic Protection Registrations Online;

(v) the service known as Change of Address;

(vi) the service known as Child Safety and Personal History Screening Check;

(vii) the service known as Children’s Health Queensland Specialist Online Advice;

(viii) the service known as Community Recovery Grant;

(ix) the service known as Dam Safety;

(x) the service known as DESBT Partner Portal;

(xi) the service known as DFV Live List;

(xii) the service known as Electrical Safety Audit Portal;

(xiii) the service known as Leecare;

(xiv) the service known as Legal Practitioner Portal;

(xv) the service known as Liquor, Gaming and Fair Trading Portal;

(xvi) the service known as Metro North Virtual Ward;

(xvii) the service known as MyNIISQ Portal;

(xviii) the service known as myQld;

(xix) the service known as Payment Gateway;

(xx) the service known as Practising Certificate Scheme Portal;

(xxi) the service known as Prequalification Online Portal;

(xxii) the service known as QCase;

(xxiii) the service known as QPortal;

(xxiv) the service known as QRIDA Application Portal;

(xxv) the service known as QRIDA MyAccount Portal;

(xxvi) the service known as QSpatial Live;

(xxvii) the service known as QTranscripts;

(xxviii) the service known as Queensland CTP Claim Portal;

(xxix) the service known as Queensland Seniors Card;

(xxx) the service known as Queensland Voluntary Assisted Dying Review Board Information Management System;

(xxxi) the service known as Quiz – online training;

(xxxii) the service known as Rental Subsidy Scheme;

(xxxiii) the service known as RSHQ Enterprise Operating Solution;

(xxxiv) the service known as Safe Food Production Queensland Accreditation;

(xxxv) the service known as Skills Maintenance Portal;

(xxxvi) the service known as Smoking Products Supplier Licensing Scheme;

(xxxvii) the service known as Spatial Portal;

(xxxviii) the service known as Thrive;

(xxxix) the service known as WaterIQ Customer Portal;

(xl) the service known as YouFor2032; and

(c) must directly connect to the Designated Identity Exchange Provider.

25

Services Australia

The entity:

(a) is approved to provide the service known as Provider Digital Access within the Australian Government Digital ID System:

(b) is approved to provide access to the following services:

(i) the service known as Aged Care Provider Portal;

(ii) the service known as Australian Immunisation Register;

(iii) the service known as Business Hub;

(iv) the service known as Child Care Subsidy Provider Entry Point;

(v) the service known as DVA Webclaim;

(vi) the service known as Ex-Service Organisation Portal;

(vii) the service known as Health Professional Online Services;

(viii) the service known as Health Providers Portal;

(ix) the service known as HOTSPUR Portal;

(x) the service known as HousingVic Online Services;

(xi) the service known as Land Tax Assessments;

(xii) the service known as My Health Record National Provider Portal;

(xiii) the service known as National Disability Insurance Scheme Applications Portal;

(xiv) the service known as National Disability Insurance Scheme Commission Portal;

(xv) the service known as National Disability Insurance Scheme myplace Provider Portal;

(xvi) the service known as National Disability Insurance Worker Screening Database;

(xvii) the service known as Pharmaceutical Benefits Scheme Online;

(xviii) the service known as Practice Incentives Program;

(xix) the service known as RAPTOR Portal;

(xx) the service known as Tertiary Collection of Student Information;

(xxi) the service known as Transport Providers Portal;

(xxii) the service known as Veterans’ Home Care Provider Portal;

(xxiii) the service known as Victorian Concessions and Allowances; and

(c) must directly connect to the Designated Identity Exchange Provider.

26

South Australian Department of Treasury and Finance

The entity:

(a) is approved to provide the service known as South Australian Government Identity Broker within the Australian Government Digital ID System;

(b) is approved to provide access to the following services:

(i) the service known as Electronic Child Abuse Reporting Line;

(ii) the service known as Housing Connect;

(iii) the service known as Immunisation Records Inventory System; and

(c) must directly connect to the Designated Identity Exchange Provider.

27

Tasmanian State Revenue Office

The entity:

(a) is approved to provide the service known as Tasmanian Revenue Online within the Australian Government Digital ID System; and

(b) must directly connect to the Designated Identity Exchange Provider.

28

Western Australian Department of the Premier and Cabinet

The entity:

(a) is approved to provide the service known as WA Identity Gateway within the Australian Government Digital ID System;

(b) is approved to provide access to the following services:

(i) the service known as ACHknowledge Portal;

(ii) the service known as BondsOnline;

(iii) the service known as Brands Portal;

(iv) the service known as DEMIRS Grants Platform;

(v) the service known as DEMIRS Online Forms;

(vi) the service known as DEMIRS Resources Online;

(vii) the service known as DoTDirect;

(viii) the service known as Environment Online;

(ix) the service known as FuelWatch;

(x) the service known as Geophysical Survey Index (MAGIX);

(xi) the service known as Learning Management System;

(xii) the service known as Offers;

(xiii) the service known as Online Licence Search;

(xiv) the service known as PetsWA;

(xv) the service known as Planning Online Portal;

(xvi) the service known as Recruitment Advertising Management System;

(xvii) the service known as Revenue Online;

(xviii) the service known as ServiceWA;

(xix) the service known as Short-Term Rental Accommodation Incentive Scheme;

(xx) the service known as Short-Term Rental Accommodation Register;

(xxi) the service known as WA Firearm Licensing Portal;

(xxii) the service known as WA Police Online Forms;

(xxiii) the service known as WA Relationship Authorisation Manager; and

(c) must directly connect to the Designated Identity Exchange Provider.

29

Workplace Gender Equality Agency

The entity:

(a) is approved to provide the service known as WGEA Employer Portal within the Australian Government Digital ID System; and

(b) must directly connect to the Designated Identity Exchange Provider.

\n```","sortOrder":18},{"sectionNumber":"Table 3 — Relying parties taken to be ap","sectionType":"section","heading":"Table 3 — Relying parties taken to be approved to participate in the Australian Government Digital ID System on a specified date after commencement","content":"#### Table 3 – Relying parties taken to be approved to participate in the Australian Government Digital ID System on a specified date after commencement\n\n> Note: See rule 2.4 (Relying parties taken to be approved to participate in the Australian Government Digital ID System on a specified date after commencement).\n\n```html\n

Relying parties taken to be approved to participate in the Australian Government Digital ID System on the specified date

Item

Column 1

Entity

Column 2

Conditions

Column 3

Specified date

1

Australian Maritime Safety Authority

The entity:

(a) is approved to provide access to the service known as myAMSA; and

(b) must directly connect to the Designated Identity Exchange Provider.

27 May 2025

2

Commissioner of Taxation

The entity:

(a) is approved to provide the following services within the Australian Government Digital ID System:

(i) the service known as ATO Access Manager;

(ii) the service known as ATO API Portal;

(iii) the service known as Australian Business Register for Business;

(iv) the service known as Australian Business Register for Tax Agents;

(v) the service known as Australian Business Registry Services;

(vi) the service known as Departing Australia Superannuation Payment Online Intermediary Application;

(vii) the service known as Departing Australia Superannuation Payment Online Application System for Funds;

(viii) the service known as Online Services for Agents;

(ix) the service known as Online Services for Business;

(x) the service known as Online Services for Digital Partners;

(xi) the service known as Online Services for Digital Service Providers;

(xii) the service known as Online Services for Foreign Investors;

(xiii) the service known as Online Services for Government Partners;

(xiv) the service known as Online Services for Superannuation Enquiry Service; and

(b) must directly connect to the Designated Identity Exchange Provider.

17 March 2025

3

Commonwealth Department of Finance

The entity:

(a) is approved to provide the service known as Contractor Reporting, Integrity Information Solution within the Australian Government Digital ID System; and

(b) must directly connect to the Designated Identity Exchange Provider.

31 January 2025

4

Homes Tasmania

The entity:

(a) is approved to provide the service known as Housing Connect within the Australian Government Digital ID System; and

(b) must directly connect to the Designated Identity Exchange Provider.

31 January 2025

5

South Australian Department of Treasury and Finance

The entity:

(a) is approved to provide access to the following services:

(i) the service known as Rural Generalist Program South Australia Training Management System;

(ii) the service known as SA Forms;

(iii) the service known as SA.GOV.AU Dashboard;

(iv) the service known as South Australian Donor Conception Register; and

(b) must directly connect to the Designated Identity Exchange Provider.

3 February 2025

\n```","sortOrder":19}],"analysis":{"flash_summary_failed":{"failed":true,"reason":"Unauthenticated. Configure AI_GATEWAY_API_KEY or use a provider module. Learn more: https://ai-sdk.dev/unauthenticated-ai-gateway","source":"analysis-cron"},"kimi_summary":{"_metrics":{"completionTokens":579},"content_quality":"ok","complexity_score":7,"scope_assessment":{"changed":false,"description":"The legislation remains tightly focused on its original purpose: transitional arrangements for the Digital ID Act 2024. It does not expand beyond facilitating the smooth transition of existing providers and services into the new regulatory framework."},"complexity_factors":["Multiple nested tables with entity-specific conditions (Tables 1, 2, and 3)","Extensive cross-referencing to the Digital ID Act, Accreditation Rules, and AGDIS Data Standards","Conditional logic with multiple sub-conditions (e.g., rule 2.2 item 2 has 6 nested sub-conditions for ConnectID)","Defined terms imported from three separate instruments (the Act, Digital ID Act, and Accreditation Rules)","Temporal triggers and modification rules that alter how other provisions apply","Specific technical restrictions (IP levels, authentication levels, biometric handling rules)","Rule 2.4 contains 11 subrules modifying how approval decisions are treated"],"plain_english_summary":"This instrument provides temporary \"training wheels\" to launch Australia’s new Digital ID regime: it automatically treats existing digital identity providers as accredited, pre‑approves many government agencies (largely routed through Services Australia), and delays complex liability rules for two years. It also updates branding (myGovID → myID) and imposes tailored operating conditions on specific providers.\n\nIt affects current digital ID users, government verifiers, private identity providers and the Digital ID Regulator by preventing a legal gap during the transition."},"flash_summary":{"complexity_score":8,"scope_assessment":{"changed":false,"description":"These Rules are narrowly framed as transitional and consequential measures to operationalise the Digital ID Act. They mainly (a) treat named organisations as already accredited or approved, (b) attach specific operational conditions to those names, (c) delay a discrete statutory regime for a limited period, and (d) map a name (myGovID to myID). Those are administrative extensions of the Act’s purpose rather than additions that broaden the statutory scheme’s long‑term scope. The Rules do include limited carve‑outs (e.g. rule 2.7 excluding subsections 18(2)–(3) in relation to particular imposed conditions) and bespoke technical/hosting requirements for particular providers; those are targeted modifications for transition rather than a material growth of the legislative scope beyond the Act’s stated transitional purpose."},"complexity_factors":["Large number of named entities and services in three detailed tables (Tables 1–3) — dozens of relying-party services and multiple accredited entities with bespoke conditions","Extensive cross-references to other instruments: Digital ID Act, Accreditation Rules, Accreditation Data Standards, AGDIS Data Standards, and federation protocols","Multiple conditional mechanics: some approvals are immediate, others take effect on specified dates, and some rules modify the operation of items in Schedule 1 with nested subrules (see rule 2.4(3)–(11))","Several bespoke carve‑outs and exceptions (e.g. rule 2.7 excluding subsections 18(2)–(3) for specific conditions)","Deferred commencement of a major regime component (pause of Division 2 of Part 3 of Chapter 4 for up to 2 years or until replacement rules commence) — conditional legal timing (rule 2.5)","Operational prescriptions with technical and procedural detail (data residency, hosting, biometric destruction, AL2/ IP levels, federation protocol compliance)","Audit, reporting and publication obligations tied to reporting periods and federation disclosures (Services Australia item requires independent audit and public publication)","Some decisions are declared not reviewable (limits on administrative review) which adds legal nuance","Rule-making power constraints and possibilities (Minister may modify Acts within 12 months subject to limits in subitem 10(4)) creating further conditional complexity"],"plain_english_summary":"**What these Rules do (mechanics)\n\n- The Rules implement transitional and consequential measures needed so the new Digital ID regime (the Digital ID Act and related Standards) can start operating immediately. They exercise the regulation-making power in item 10 of Schedule 1 to the Digital ID (Transitional and Consequential Provisions) Act 2024.\n\n- They treat a prescribed list of named organisations as already accredited or already approved to participate in the Australian Government Digital ID System at the moment these laws start (or on specified later dates). (See rule 2.1 and rules 2.2–2.4 and Tables 1–3.)\n\n- For those named entities the Rules set specific conditions on their accreditation or approval (for example: what services they may provide, technical limits, hosting and data residency, audit and publication obligations, and which attributes they may disclose). Those conditions are set out in Table 1 (accredited entities) and Tables 2–3 (participating relying parties). (See Tables 1–3.)\n\n- The Rules delay the operational effect of certain statutory contract provisions in the Digital ID Act (Division 2 of Part 3 of Chapter 4) until the earlier of two years after commencement or when replacement rules under subsection 85(5) commence. (See rule 2.5.)\n\n- The Rules make a textual mapping: references to 'myGovID' in the Digital ID (Transitional and Consequential Provisions) Act are to be read as 'myID'. (See rule 2.6.)\n\n- The Rules carve out limited exceptions to the application of the Digital ID Act’s safeguards about conditions relating to restricted attributes for particular conditions imposed on the named accreditations. In short, subsections 18(2) and (3) of the Digital ID Act do not apply to certain conditions listed in Schedule 1. (See rule 2.7.)\n\n- Where specific audit or publication obligations apply (for example to Services Australia where it discloses which accredited identity service provider an individual used), the named entity must commission an independent audit, provide the findings to the Digital ID Regulator and publish the findings on its website. (See Table in rule 2.2, item for Services Australia.)\n\n\nWho is affected\n\n- Named accredited entities (Table 1) — e.g. Australian Postal Corporation (for its Digital iD™ mobile app), ConnectID Pty Ltd (ConnectID exchange operator), Makesure Consulting Pty Ltd (RatifyID), OCR Labs Pty Ltd (iDKit / IDVerse), Services Australia (as attribute service provider) — are taken to be accredited and must meet the particular conditions attached to them.\n\n- Named participating relying parties (Tables 2 and 3) — dozens of Commonwealth, state and territory agencies and specific services — are taken to be approved to participate in the Australian Government Digital ID System and must meet the conditions attached (notably to connect directly to the Designated Identity Exchange Provider).\n\n- The Digital ID Regulator and the Minister: the Rules operate by treating the Regulator as having made accreditation/approval decisions and imposed conditions; the Minister retains power to make further rules under the Act. (See rule 1.3 and notes.)\n\n- End users (individuals and relying-party customers) are affected indirectly: the named providers will operate under the specified technical, data residency and disclosure limits, and some biometric handling and attribute-disclosure rules apply.\n\n\nWhy it matters (concrete consequences, not politics)\n\n- Operational continuity and legal status: the Rules give immediate legal effect to a set of existing providers and services so the Digital ID System can operate from day one without each named provider going through a fresh accreditation/approval process. (See rules 2.1–2.4 and Tables 1–3.)\n\n- Compliance and operational constraints: named entities face concrete obligations — e.g. limits on which proofing or biometric functions they may perform, obligations to host infrastructure in Australia, limits on cross-border disclosure, destruction of biometric data after binding unless a statutory exception applies, and requirements to connect to the designated exchange provider. These impose compliance, operational and possibly hosting costs on the named organisations. (See relevant Table entries, e.g. Australia Post (Table 1 item 1), Makesure/RatifyID (Table 1 item 3), OCR Labs/iDKit (Table 1 item 4), Services Australia (Table 1 item 5), and many conditions in Tables 2–3.)\n\n- Audit and transparency obligations: certain entities must arrange independent audits of particular disclosures and publish and provide results to the Regulator — creating ongoing audit costs and public transparency of compliance. (See rule 2.2, Services Australia item in Table.)\n\n- Temporary change to liability and contract risk: the statutory contract provisions in the Digital ID Act (which affect liability and contractual terms) are paused for up to two years (or until replacement rules take effect). That reduces immediate statutory exposure for providers but shifts the timing of legal risk and may affect bargaining positions between providers and relying parties. (See rule 2.5.)\n\n- Limited legal recourse: some of the administrative actions the Rules create (treating the Regulator as having made decisions/notifications) are declared not to be reviewable decisions under the Digital ID Act in certain cases (see rule 2.4(10)). That removes a review path for the affected named entities in those specific instances.\n\n\nCosts, incentives, trade‑offs, and implementation risks (testing the purpose-claim that these are transitional measures)\n\n- Who pays: the specified accredited entities and relying parties bear the direct costs — compliance work, implementing technical connections to the Designated Identity Exchange Provider, audits, and (where required) hosting and data-residency arrangements in Australia. (See Tables 1–3 and rule 2.2.)\n\n- Who decides: the Rules treat the Digital ID Regulator as having already decided certain accreditations/approvals and the Minister retains the power to make further rules under the Schedule. The Regulator is therefore the key decision-maker in accreditation, but the Rules pre-populate its decision record for named entities. (See rule 1.3 and rules 2.1–2.4.)\n\n- Behaviour changes required: named entities must connect to the Designated Identity Exchange Provider, limit or enable particular features (e.g. Australia Post cannot collect biometric data or create one-off IDs under its accredited services; OCR Labs must destroy biometric data after binding unless authorised), and publish audit reports when disclosures are made. Relying parties must connect and begin participating by specified dates. (See Tables 1–3.)\n\n- Concentrated benefits vs diffuse costs: the Rules grant immediate accreditation/participation status to a discrete list of named providers and government services (concentrated, identifiable beneficiaries). The compliance costs and any competitive exclusion effects are spread more diffusely across other potential private-sector identity providers and relying parties who are not named. The instrument itself records those named beneficiaries (Tables 1–3).\n\n- Competitive and market effects: because the Rules name specific providers and set precise operational limits and permissions, they shape which market actors can offer particular Digital ID services from the start (e.g. ConnectID’s decentralised exchange model; Australia Post’s mobile-only Digital iD™). That could lock in particular technical architectures and commercial relationships for the transitional period.\n\n- Trade-offs and opportunity cost: the decision to delay statutory contract provisions for up to two years reduces immediate legal exposure for providers and may accelerate take-up, but it postpones the arrival of statutory protections and remedies for relying parties and users that the Digital ID Act intends. (See rule 2.5.)\n\n- Implementation risks: the Rules cross-reference multiple external instruments (the Accreditation Rules, Accreditation Data Standards, AGDIS Data Standards and federation protocols). Effective operation depends on those instruments being available, consistent, and implemented by the named parties. There is also the practical task of connecting many relying parties to the Designated Identity Exchange Provider and ensuring audit/reporting systems operate.\n\n\nKey sections to check in the Rules (quick map)\n\n- Immediate accreditation / conditions: rule 2.1 and Table 1.\n- Approved participants and conditions: rules 2.2–2.4 and Tables 2–3.\n- Audit and publication requirement for identity exchange disclosures: rule 2.2 (Services Australia item).\n- Delay of statutory contract provisions: rule 2.5.\n- Textual replacement of myGovID with myID: rule 2.6.\n- Exclusions from the Digital ID Act’s restricted-attribute condition rules: rule 2.7.\n\n\nBottom-line summary\n\nThese Rules are transitional machinery. They (a) declare a set of named providers and government services to be accredited or approved for participation immediately or on specified dates, (b) attach bespoke conditions to those accreditations/approvals (technical limits, data-residency, disclosure and audit obligations), (c) delay certain statutory contract rules for up to two years, and (d) make a few limited textual and application exceptions. The effect is to create an operational starting point for the Australian Government Digital ID System while shifting some legal exposures and imposing concrete compliance obligations on the named providers. (See rules 2.1–2.7 and Tables 1–3.)"}},"importantCases":[],"_links":{"self":"/api/acts/digital-id-transitional-and-consequential-provisions-rules-2024","history":"/api/acts/digital-id-transitional-and-consequential-provisions-rules-2024/history","analysis":"/api/acts/digital-id-transitional-and-consequential-provisions-rules-2024/analysis","conflicts":"/api/acts/digital-id-transitional-and-consequential-provisions-rules-2024/conflicts","importantCases":"/api/acts/digital-id-transitional-and-consequential-provisions-rules-2024/important-cases","documents":"/api/acts/digital-id-transitional-and-consequential-provisions-rules-2024/documents"}}