These updates are available now and help organisations apply the Standards to business processes that prevent identity fraud.
Why organisations need identification management
Organisations rely on identification management for many of their everyday interactions with New Zealanders — when someone opens a bank account, signs up for an online service or shares personal information.
Good identification processes help organisations get the right information about their customers, and from the right person. These processes are outlined in standards that can be applied anywhere, for any channel, whether in person or online.
A review of the existing standards
The updated New Zealand Identification Standards have now been published on this website.
This update follows a review that looked at how the standards were working in practice and where they needed to evolve.
The review began one year after the Standards were written into the Digital Identity Services Trust Framework Rules , which were published in . To receive accreditation from the Trust Framework Authority, digital identity services and products must follow the Identification Standards.
The review focused on technical changes proposed to several controls in the Identification Standards. Nineteen responses from experts and agencies were received from to .
This provided valuable feedback and insights to improve the Identification Standards. The focus was on technical improvements that would make the standards clearer, more inclusive and easier to apply.
What’s changed
- A new control has been added to strengthen how organisations manage risk by making sure they use evidence of the right quality.
- An existing control has been updated so that, in some situations, a strong biometric can be used on its own instead of needing 2 separate factors.
- Some language has been revised to better reflect inclusive, internationally aligned practice.
- The former Federation Assurance Standard has been split into 2 clearer parts: one for Credential Providers who issue physical and digital credentials and one for Facilitation Providers, who provide services such as digital wallets, hubs and exchanges.
- More guidance and practical use cases have been added to help organisations apply the standards with confidence.
Who these standards are for
These standards are intended for use by public and private sector organisations and individuals who:
- enrol Entities as a Relying Party
- issue Credentials as a Credential Provider
- facilitate the presentation of Credentials as a Facilitation Provider.
These standards are technical and require an understanding of identification concepts, assurance practices and related technologies.
If you’re new to this area, you can develop your skills and capability with guidance and training resources on this website:
View Identification Management training resources
The next review of the Identification Standards is planned for late .
Published
20 July 2026
