Accreditation Rules means rules made under section 168 for the purposes of the provisions in which the term occurs.
accredited attribute service provider means an attribute service provider that is accredited under section 15 as an accredited attribute service provider.
accredited entity: each of the following is an accredited entity:
(a) an accredited attribute service provider;
(b) an accredited identity exchange provider;
(c) an accredited identity service provider;
(d) if Accreditation Rules are made for the purposes of paragraph 14(1)(d)—an entity that is accredited to provide services of a kind prescribed by the Accreditation Rules for the purposes of that paragraph.
accredited identity exchange provider means an identity exchange provider that is accredited under section 15 as an accredited identity exchange provider.
accredited identity service provider means an identity service provider that is accredited under section 15 as an accredited identity service provider.
accredited service, of an accredited entity, means the services provided, or proposed to be provided, by the entity in the entity’s capacity as a particular kind of accredited entity.
Note: Conditions may be imposed on an entity’s accredited services, including specifying the manner in which such services must be provided or excluding specific services from the entity’s accreditation altogether (see section 17).
Note: Example: Acme Co is an accredited identity service provider. Under its conditions of accreditation, its accredited service is generating, managing, maintaining and verifying information relating to the identity of an individual. Its conditions exclude from its accreditation the provision of the following services:
(a) generating, binding, managing and distributing authenticators to an individual;
(b) binding, managing and distributing authenticators generated by an individual.
adverse or qualified security assessment means an adverse security assessment, or a qualified security assessment, within the meaning of Part IV of the Australian Security Intelligence Organisation Act 1979.
affected entity: see section 137.
AFP Minister means the Minister administering the Australian Federal Police Act 1979.
AGDIS Register means the register kept under section 121.
APP entity has the same meaning as in the Privacy Act 1988.
APP‑equivalent agreement: see section 34.
attribute of an individual: see section 10.
attribute service provider means an entity that provides, or proposes to provide, a service that verifies and manages an attribute of an individual.
Australia when used in a geographical sense, includes the external Territories.
Australian entity means any of the following:
(a) an Australian citizen or a permanent resident of Australia;
(b) a body corporate incorporated by or under a law of the Commonwealth or a State or Territory;
(c) a Commonwealth entity, or a Commonwealth company, within the meaning of the Public Governance, Performance and Accountability Act 2013;
(d) a person or body that is an agency within the meaning of the Freedom of Information Act 1982;
(e) a body specified, or the person holding an office specified, in Part I of Schedule 2 to the Freedom of Information Act 1982;
(f) a department or authority of a State;
(g) a department or authority of a Territory;
(h) a partnership formed in Australia;
(i) a trust created in Australia;
(j) an unincorporated association that:
(i) has a governing body; and
(ii) has its central management or control in Australia.
Australian Government Digital ID System: see subsection 58(2).
authenticator means the technology for authenticating an individual’s digital ID.
Note: Passwords and cryptographic keys are examples of authenticators.
biometric information of an individual:
(a) means information about any measurable biological characteristic relating to an individual that could be used to identify the individual or verify the individual’s identity; and
(b) includes biometric templates.
civil penalty provision has the same meaning as in the Regulatory Powers Act.
compliance assessment: see section 131.
cyber security incident means one or more acts, events or circumstances that involve:
(a) unauthorised access to, modification of or interference with a system, service or network; or
(b) an unauthorised attempt to gain access to, modify or interfere with a system, service or network; or
(c) unauthorised impairment of the availability, reliability, security or operation of a system, service or network; or
(d) an unauthorised attempt to impair the availability, reliability, security or operation of a system, service or network.
decision‑maker for a reviewable decision means:
(a) for a decision under section 27 or 73—the Minister; or
(b) for a decision under section 130—the System Administrator; or
(c) otherwise—the Digital ID Regulator.
digital ID of an individual means a distinct electronic representation of the individual that enables the individual to be sufficiently distinguished when interacting online with services.
Digital ID Accredited Entities Register means the register kept under section 120.
Digital ID Data Standards means the standards made under section 99.
Digital ID Data Standards Chair means:
(a) if a person holds an appointment under section 105—that person; or
(b) otherwise—the Minister.
digital ID fraud incident means an act, event or circumstance that:
(a) occurs in connection with:
(i) an accredited service of an accredited entity; or
(ii) a service that a participating relying party is approved to provide, or provide access to, within the Australian Government Digital ID System; and
(b) results in any of the following being, or suspected of being, compromised or rendered unreliable:
(i) a digital ID of an individual;
(ii) an attribute of an individual;
(iii) an authenticator relating to an individual;
(iv) a representation relating to an attribute of an individual;
(v) a representation relating to a digital ID of an individual.
Digital ID Regulator: see section 90.
Digital ID Rules means the rules made under section 168 for the purposes of the provisions in which the term occurs.
digital ID system means a federation of entities that facilitates, manages or relies on services that provide for either or both of the following in an online environment:
(a) the verification of the identity of individuals;
(b) the authentication of a digital ID of, or information associated with, individuals.
Note: Entities in the federation may include one or more relying parties, identity exchanges, identity service providers, attribute service providers and other kinds of service providers.
digital ID trustmark: see subsection 117(2).
enforcement body has the same meaning as in the Privacy Act 1988.
enforcement related activity has the same meaning as in the Privacy Act 1988.
entity means any of the following:
(a) an individual;
(b) a body corporate;
(c) a Commonwealth entity, or a Commonwealth company, within the meaning of the Public Governance, Performance and Accountability Act 2013;
(d) a person or body that is an agency within the meaning of the Freedom of Information Act 1982;
(e) a body specified, or the person holding an office specified, in Part I of Schedule 2 to the Freedom of Information Act 1982;
(f) a department or authority of a State;
(g) a department or authority of a Territory;
(h) a partnership;
(i) an unincorporated association that has a governing body;
(j) a trust.
entrusted person: see subsection 151(2).
identity exchange provider means an entity that provides, or proposes to provide, a service that conveys, manages and coordinates the flow of data or other information between participants in a digital ID system.
identity service provider means an entity that provides, or proposes to provide, a service that:
(a) generates, manages, maintains or verifies information relating to the identity of an individual; and
(b) generates, binds, manages or distributes authenticators to an individual; and
(c) binds, manages or distributes authenticators generated by an individual.
law enforcement agency has the same meaning as in the Australian Crime Commission Act 2002.
one‑to‑many matching: see subsection 48(4).
paid work means work for financial gain or reward (whether as an employee, a self‑employed person or otherwise).
participate: an entity participates in the Australian Government Digital ID System at a particular time if, at that time:
(a) the entity holds an approval under section 62 to participate in the system; and
(b) either:
(i) the entity is directly connected to an accredited entity that is participating in the Australian Government Digital ID System; or
(ii) the entity is an accredited entity that is directly connected to a participating relying party.
participating relying party: a relying party is a participating relying party if:
(a) the relying party holds an approval under section 62 to participate in the Australian Government Digital ID System; and
(b) the participation start day for the relying party has arrived or passed.
participation start day for an entity means the day notified to the entity by the Digital ID Regulator for the purposes of paragraph 62(6)(d) as the day on which the entity must begin to participate in the Australian Government Digital ID System.
personal information:
(a) means information or an opinion about an identified individual, or an individual who is reasonably identifiable:
(i) whether the information or opinion is true or not; and
(ii) whether the information or opinion is recorded in a material form or not; and
(b) to the extent not already covered by paragraph (a), includes an attribute of an individual.
privacy impact assessment has the meaning given by subsection 33D(3) of the Privacy Act 1988.
protected information: see subsection 151(4).
Regulatory Powers Act means the Regulatory Powers (Standard Provisions) Act 2014.
relying party means an entity that relies, or seeks to rely, on an attribute of an individual that is provided by an accredited entity to:
(a) provide a service to the individual; or
(b) enable the individual to access a service.
restricted attribute of an individual: see section 11.
reviewable decision: see section 137.
Secretary means the Secretary of the Department.
security, other than in the following provisions, has its ordinary meaning:
shielded person means a person to whom one or more of the following paragraphs apply:
(a) the person has acquired or used an assumed identity under Part IAC of the Crimes Act 1914 or a corresponding assumed identity law within the meaning of that Part;
(b) an authority for the person to acquire or use an assumed identity has been granted under that Part or such a law;
(c) a witness identity protection certificate has been given for the person under Part IACA of the Crimes Act 1914;
(d) a corresponding witness identity protection certificate has been given for the person under a corresponding witness identity protection law within the meaning of Part IACA of the Crimes Act 1914;
(e) the person is a participant as defined in the Witness Protection Act 1994;
(f) the person is or was on a witness protection program conducted by a State or Territory in which a complementary witness protection law (as defined in the Witness Protection Act 1994) is in force;
(g) the person is involved in administering such a program under such a law and the person has acquired an identity under that law.
State or Territory privacy authority means a State or Territory authority (within the meaning of the Privacy Act 1988) that has functions to protect the privacy of individuals (whether or not the authority has other functions).
System Administrator: see section 94.
this Act includes:
(a) the Accreditation Rules; and
(b) the Digital ID Data Standards; and
(c) the Digital ID Rules; and
(d) the service levels determined under section 80; and
(e) the Regulatory Powers Act as it applies in relation to this Act.
verifiable credential means a tamper‑evident credential with authorship that can be cryptographically verified.