CTHIn ForceLegislation
Digital ID (Transitional and Consequential Provisions) Rules 2024
Table 1 — Entities taken to be approved Table 1 — Entities taken to be approved as accredited entities immediately after commencement
Start here
Get a plain-English read of Table 1 — Entities taken to be approved
Turn the raw legal text into a practical explanation grounded in Digital ID (Transitional and Consequential Provisions) Rules 2024.
Table 1 – Entities taken to be approved as accredited entities immediately after commencement
Note: See rule 2.1 (Entities taken to be accredited immediately after commencement).
<table cellspacing="0" cellpadding="0" style="width:100%; border-collapse:collapse"><thead><tr><td colspan="4" style="width:415.65pt; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Entities taken to be approved as accredited entities immediately after commencement</span></p></td></tr><tr><td style="width:25.7pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Item</span></p></td><td style="width:70.05pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 1</span></p><p class="TableHeading"><span>Entity</span></p></td><td style="width:99.5pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 2</span></p><p class="TableHeading"><span>Kind of accredited entity</span></p></td><td style="width:188pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="TableHeading"><span>Column 3</span></p><p class="TableHeading"><span>Conditions</span></p></td></tr></thead><tbody><tr><td style="width:25.7pt; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>1</span></p></td><td style="width:70.05pt; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Australian Postal Corporation</span></p></td><td style="width:99.5pt; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Accredited identity service provider</span></p></td><td style="width:188pt; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span class="normaltextrun">(a)</span><span style="width:3.1pt; text-indent:0pt; display:inline-block"> </span><span class="normaltextrun">The entity’s </span><span>accredited</span><span class="normaltextrun"> services must only be provided:</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span class="normaltextrun">(i)</span><span style="width:10.11pt; text-indent:0pt; display:inline-block"> </span><span class="normaltextrun">for the purpose of the service known as </span><span>Digital iD™; and</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(ii)</span><span style="width:7.33pt; text-indent:0pt; display:inline-block"> </span><span>directly through</span><span class="normaltextrun"> the entity’s </span><span>Digital iD™</span><span class="normaltextrun"> </span><span>mobile application.</span></p><p class="Tablea"><span class="normaltextrun">(b)</span><span style="width:2.54pt; text-indent:0pt; display:inline-block"> </span><span class="normaltextrun">The entity’s accredited services exclude services involving any of the following:</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(i)</span><span style="width:10.11pt; text-indent:0pt; display:inline-block"> </span><span>the creation and use of a Keypass credential; or</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(ii)</span><span style="width:7.33pt; text-indent:0pt; display:inline-block"> </span><span>the collection of biometric information of an individual; or</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(iii)</span><span style="width:4.55pt; text-indent:0pt; display:inline-block"> </span><span>the processes for biometric binding; or</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(iv)</span><span style="width:5.11pt; text-indent:0pt; display:inline-block"> </span><span>creating or using a one-off digital ID; or</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(v)</span><span style="width:7.89pt; text-indent:0pt; display:inline-block"> </span><span>in-person visual verification of documents or other credentials; or</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(vi)</span><span style="width:5.11pt; text-indent:0pt; display:inline-block"> </span><span>the collection of an individual’s image for verification purposes.</span></p><p class="Tablea"><span>(c)</span><span style="width:3.1pt; text-indent:0pt; display:inline-block"> </span><span>The entity’s accredited services may support identity proofing up to the IP level in the following table. The IP level required or achieved </span><span class="normaltextrun">will be dependent on which of the entity’s proofing scheme or rule has been selected by a relying party for their digital services.</span></p><p class="Tabletext"><span class="normaltextrun">Accredited proofing schemes/rules include:</span><span class="eop"></span></p><table cellspacing="0" cellpadding="0" style="width:100%; border-collapse:collapse"><tbody><tr><td style="width:115.5pt; border-top:1.5pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="paragraph" style="margin-top:0pt; font-size:10pt"><span class="normaltextrun" style="font-weight:bold">Scheme/rule</span></p></td><td style="width:46.25pt; border-top:1.5pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="paragraph" style="margin-top:0pt; font-size:10pt"><span class="normaltextrun" style="font-weight:bold">IP level</span></p></td></tr><tr><td style="width:115.5pt; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="paragraph" style="margin-top:0pt; font-size:10pt"><span class="normaltextrun">TDIF: TDIF IP2</span></p></td><td style="width:46.25pt; border-top:1.5pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="paragraph" style="margin-top:0pt; font-size:10pt"><span class="normaltextrun">IP2</span></p></td></tr><tr><td style="width:115.5pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="paragraph" style="margin-top:0pt; font-size:10pt"><span class="normaltextrun">TDIF: TDIF IP1 PLUS</span></p><p class="paragraph" style="margin-top:0pt; font-size:10pt"><span class="normaltextrun">STARS: 2-Star (rule 2)</span></p><p class="paragraph" style="margin-top:0pt; font-size:10pt"><span class="normaltextrun">STARS: 2-Star (rule 3)</span></p><p class="paragraph" style="margin-top:0pt; font-size:10pt"><span class="normaltextrun">STARS: 1-Star (rule 2)</span></p></td><td style="width:46.25pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="paragraph" style="margin-top:0pt; font-size:10pt"><span class="normaltextrun">IP1 Plus</span></p></td></tr><tr><td style="width:115.5pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="paragraph" style="margin-top:0pt; font-size:10pt"><span class="normaltextrun">STARS: 1-Star (rule 1)</span></p><p class="paragraph" style="margin-top:0pt; font-size:10pt"><span class="normaltextrun">STARS: 1-Star (rule 3)</span></p><p class="paragraph" style="margin-top:0pt; margin-left:0pt; text-indent:0.1pt; font-size:10pt"><span class="normaltextrun">AML KYC Safe Harbour – Premium</span></p><p class="paragraph" style="margin-top:0pt; margin-left:0pt; text-indent:0.1pt; font-size:10pt"><span class="normaltextrun">AML KYC Safe Harbour – Basic</span></p></td><td style="width:46.25pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="paragraph" style="margin-top:0pt; font-size:10pt"><span class="normaltextrun">IP1</span></p></td></tr></tbody></table><p class="Tablea"><span>(d)</span><span style="width:2.54pt; text-indent:0pt; display:inline-block"> </span><span>The entity must advise each of its relying parties and clearly express in any promotional material to relying parties:</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(i)</span><span style="width:10.11pt; text-indent:0pt; display:inline-block"> </span><span>that only the accredited</span><span class="normaltextrun"> proofing </span><span>schemes and rules specified in the table in paragraph</span><span> </span><span>(c) are accredited; and</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(ii)</span><span style="width:7.33pt; text-indent:0pt; display:inline-block"> </span><span>the equivalent IP level for each of the accredited</span><span class="normaltextrun"> proofing schemes and rules as specified in the table in</span><span> paragraph</span><span> </span><span>(c)</span><span class="normaltextrun">.</span></p><p class="Tablea"><span class="normaltextrun">(e)</span><span style="width:3.1pt; text-indent:0pt; display:inline-block"> </span><span class="normaltextrun">The entity’s accredited services may support binding of digital identities to AL2 level authenticators.</span></p></td></tr><tr><td style="width:25.7pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2</span></p></td><td style="width:70.05pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>ConnectID Pty Ltd</span></p></td><td style="width:99.5pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Accredited identity exchange provider</span></p></td><td style="width:188pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a)</span><span style="width:3.1pt; text-indent:0pt; display:inline-block"> </span><span>The entity’s accredited services must be </span><span class="normaltextrun">provided</span><span> only for the purposes of conveying, managing and coordinating the flow of data or other information between identity service providers and relying parties (</span><span style="font-weight:bold; font-style:italic">ConnectID participants</span><span>) in the identity exchange system known as ConnectID</span><span style="font-size:6.67pt; vertical-align:super">®</span><span> and operated by the entity.</span></p><p class="Tablea"><span>(b)</span><span style="width:2.54pt; text-indent:0pt; display:inline-block"> </span><span>The entity’s accredited services must be provided by way of a partly decentralised peer-to-peer-based identity exchange model or distributed technical approach which:</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(i)</span><span style="width:10.11pt; text-indent:0pt; display:inline-block"> </span><span>supports the interconnectivity of the ConnectID participants;</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(ii)</span><span style="width:7.33pt; text-indent:0pt; display:inline-block"> </span><span>must not require the end-user to directly engage with the ConnectID</span><span style="font-size:6.67pt; vertical-align:super">®</span><span> identity exchange;</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(iii)</span><span style="width:4.55pt; text-indent:0pt; display:inline-block"> </span><span>facilitates digital transactions between relying parties and accredited and unaccredited identity service providers;</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(iv)</span><span style="width:5.11pt; text-indent:0pt; display:inline-block"> </span><span>does not retain or access the information (other than system logs, transactional metadata and billing data) that is generated in, obtained from, or collected for the purposes of, the ConnectID</span><span style="font-size:6.67pt; vertical-align:super">®</span><span> identity exchange by the ConnectID participants and passes through the ConnectID</span><span style="font-size:6.67pt; vertical-align:super">®</span><span> identity exchange;</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(v)</span><span style="width:7.89pt; text-indent:0pt; display:inline-block"> </span><span>is subject to rules, procedures, standards and ConnectID participant contracts to govern each ConnectID participant’s access to and use of the ConnectID</span><span style="font-size:6.67pt; vertical-align:super">®</span><span> identity exchange, and is not inconsistent with the Digital ID Act, the Accreditation Rules and the Accreditation Data Standards; and</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(vi)</span><span style="width:5.11pt; text-indent:0pt; display:inline-block"> </span><span>must have an integrated ConnectID participant registry that is administered by the entity and contains the personal information of the ConnectID participant’s key business contacts.</span></p></td></tr><tr><td style="width:25.7pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>3</span></p></td><td style="width:70.05pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Makesure Consulting Pty Ltd</span></p></td><td style="width:99.5pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Accredited identity service provider</span></p></td><td style="width:188pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea"><span>(a)</span><span style="width:3.1pt; text-indent:0pt; display:inline-block"> </span><span>The entity’s accredited services must be provided only for the purposes of the RatifyID mobile application, which may only allow users to:</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(i)</span><span style="width:10.11pt; text-indent:0pt; display:inline-block"> </span><span>create a reusable digital ID up to the IP2 IP level; and</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(ii)</span><span style="width:7.33pt; text-indent:0pt; display:inline-block"> </span><span>bind an AL2 level authenticator to that digital ID.</span></p><p class="Tablea"><span>(b)</span><span style="width:2.54pt; text-indent:0pt; display:inline-block"> </span><span>The entity must only disclose personal information to a relying party that reasonably requires that information to enable the relying party to provide, or provide access to, the service requested by the individual.</span></p><p class="Tablea"><span>(c)</span><span style="width:3.1pt; text-indent:0pt; display:inline-block"> </span><span>The entity may only disclose, to any relying party within the class of industry segments specified in sub-column</span><span> </span><span>1 of a sub-item in the following table, the restricted attributes specified in sub-column</span><span> </span><span>2 of that sub-item if the restricted attributes to be disclosed:</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(i)</span><span style="width:10.11pt; text-indent:0pt; display:inline-block"> </span><span>have been collected and verified by the entity through direct interaction with an individual; and</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(ii)</span><span style="width:7.33pt; text-indent:0pt; display:inline-block"> </span><span>have been selected by the requesting relying party in the entity’s information technology system as a restricted attribute that is necessary for the requesting relying party to provide, or provide access to, a service to an individual.</span></p><table cellspacing="0" cellpadding="0" style="width:100%; border-collapse:collapse"><tbody><tr><td style="width:21.45pt; border-top:1.5pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span style="font-weight:bold">Sub-Item</span></p></td><td style="width:62.55pt; border-top:1.5pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span style="font-weight:bold">Sub-column</span><span style="font-weight:bold"> </span><span style="font-weight:bold">1</span></p><p class="Tabletext"><span style="font-weight:bold">Segment</span></p></td><td style="width:66.25pt; border-top:1.5pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span style="font-weight:bold">Sub-column</span><span style="font-weight:bold"> </span><span style="font-weight:bold">2</span></p><p class="Tabletext"><span style="font-weight:bold">Restricted attributes permitted to be disclosed</span></p></td></tr><tr><td style="width:21.45pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>1</span></p></td><td style="width:62.55pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Aviation infrastructure, security & operations</span></p></td><td style="width:66.25pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Aviation Security Identity Card reference number.</span></p></td></tr><tr><td style="width:21.45pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>2</span></p></td><td style="width:62.55pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Corrective services</span></p></td><td style="width:66.25pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Driver’s licence document number.</span></p><p class="Tabletext"><span>Passport document number.</span></p><p class="Tabletext"><span>Birth certificate document number.</span></p></td></tr><tr><td style="width:21.45pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>3</span></p></td><td style="width:62.55pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Delivery services</span></p></td><td style="width:66.25pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Driver’s licence document number.</span></p></td></tr><tr><td style="width:21.45pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>4</span></p></td><td style="width:62.55pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Healthcare</span></p></td><td style="width:66.25pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Medicare card Individual Reference Number and card number.</span></p></td></tr><tr><td style="width:21.45pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>5</span></p></td><td style="width:62.55pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>International travel</span></p></td><td style="width:66.25pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Passport document number.</span></p></td></tr><tr><td style="width:21.45pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>6</span></p></td><td style="width:62.55pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Labour hire</span></p></td><td style="width:66.25pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Driver’s licence document number.</span></p></td></tr><tr><td style="width:21.45pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>7</span></p></td><td style="width:62.55pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Maritime infrastructure, security & operations</span></p></td><td style="width:66.25pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Maritime Security Identity Card reference number.</span></p></td></tr><tr><td style="width:21.45pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>8</span></p></td><td style="width:62.55pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Vehicle hire</span></p><p class="Tabletext"><span></span></p></td><td style="width:66.25pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Driver’s licence document number.</span></p></td></tr></tbody></table><p class="Tablea"><span>(d)</span><span style="width:2.54pt; text-indent:0pt; display:inline-block"> </span><span>The entity must ensure, in relation to the entity’s accredited services provided through the RatifyID mobile application, that:</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(i)</span><span style="width:10.11pt; text-indent:0pt; display:inline-block"> </span><span>the accredited services are hosted by infrastructure situated in Australia;</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(ii)</span><span style="width:7.33pt; text-indent:0pt; display:inline-block"> </span><span>any personal information held by the entity is not disclosed to persons outside of Australia; and</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt"><span>(iii)</span><span style="width:4.55pt; text-indent:0pt; display:inline-block"> </span><span>third party access to the entity’s server is under the entity’s control and time limited.</span></p></td></tr><tr><td style="width:25.7pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext" style="page-break-inside:avoid; page-break-after:avoid"><span>4</span></p></td><td style="width:70.05pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext" style="page-break-inside:avoid; page-break-after:avoid"><span>OCR Labs Pty Ltd trading as IDVerse</span></p></td><td style="width:99.5pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext" style="page-break-inside:avoid; page-break-after:avoid"><span>Accredited identity service provider</span></p></td><td style="width:188pt; border-top:0.75pt solid #000000; border-bottom:0.75pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea" style="page-break-inside:avoid; page-break-after:avoid"><span>(a)</span><span style="width:3.1pt; text-indent:0pt; display:inline-block"> </span><span>The entity’s accredited services must be provided only for the purposes of the service known as iDKit which:</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt; page-break-inside:avoid; page-break-after:avoid"><span>(i)</span><span style="width:10.11pt; text-indent:0pt; display:inline-block"> </span><span>must only be capable of being ordered in the configuration that existed at the start of 8 July 2024 (</span><span style="font-weight:bold; font-style:italic">accredited configuration</span><span>);</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt; page-break-inside:avoid; page-break-after:avoid"><span>(ii)</span><span style="width:7.33pt; text-indent:0pt; display:inline-block"> </span><span>must not be changed from the accredited configuration; and</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt; page-break-inside:avoid; page-break-after:avoid"><span>(iii)</span><span style="width:4.55pt; text-indent:0pt; display:inline-block"> </span><span>must be limited to one-off digital IDs at the IP1 Plus, IP2, IP2 Plus, or IP3 IP levels.</span></p><p class="Tablea" style="page-break-inside:avoid; page-break-after:avoid"><span>(b)</span><span style="width:2.54pt; text-indent:0pt; display:inline-block"> </span><span>Subject to paragraph</span><span> </span><span>(c), the entity may collect biometric information of an individual for the purposes of verifying an individual’s identity or authenticating the individual to their digital ID.</span></p><p class="Tablea" style="page-break-inside:avoid; page-break-after:avoid"><span>(c)</span><span style="width:3.1pt; text-indent:0pt; display:inline-block"> </span><span>The entity must destroy the biometric information of an individual collected in accordance with the preceding condition immediately following successful biometric binding, unless:</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt; page-break-inside:avoid; page-break-after:avoid"><span>(i)</span><span style="width:10.11pt; text-indent:0pt; display:inline-block"> </span><span>the entity is authorised by section</span><span> </span><span>49 of the Digital ID Act to retain the information; and</span></p><p class="Tablei" style="margin-left:33.75pt; text-indent:-19.55pt; page-break-inside:avoid; page-break-after:avoid"><span>(ii)</span><span style="width:7.33pt; text-indent:0pt; display:inline-block"> </span><span>the entity complies with any requirements prescribed by the Accreditation Rules and the Accreditation Data Standards.</span></p></td></tr><tr><td style="width:25.7pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>5</span></p></td><td style="width:70.05pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Services Australia</span></p></td><td style="width:99.5pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tabletext"><span>Accredited attribute service provider</span></p></td><td style="width:188pt; border-top:0.75pt solid #000000; border-bottom:1.5pt solid #000000; padding-right:5.4pt; padding-left:5.4pt; vertical-align:top"><p class="Tablea" style="margin-left:0pt; text-indent:0pt"><span>The entity’s accredited services must be provided only for the purpose of issuing and managing the myGov linkID attribute.</span></p></td></tr></tbody></table>