About the trust framework for digital identity

The Digital Identity Services Trust Framework Act 2023 came into effect on 1 July 2024. Its purpose is to create a digital identity environment that is safe and trusted by the people that use it.

Digital Identity Services Trust Framework Act 2023 — New Zealand Legislation

The Act sets out the legal framework for digital identity services in New Zealand. The framework includes rules and regulations for accredited digital identity services to help protect people’s information and privacy. The rules and regulations are currently being finalised.

Rules and regulations for digital identity services

The Act establishes:

• the Trust Framework Board
• the Māori Advisory Group
• an accreditation authority, called the Trust Framework Authority, within a public service department — the Department of Internal Affairs
• remedies for breaches, offences and penalties for accredited providers
• a complaints process.

Service providers

Digital identity service providers can become accredited under the trust framework. This means they have proven that their systems and processes meet the framework’s legislation, rules and regulations.

Providers of digital identity services

Trust Framework Authority

The digital identity services regulator is called the Trust Framework Authority. The role of the Trust Framework Authority is to accredit digital identity service providers.

Trust Framework Authority

Benefits of having a framework and regulator

• People can have greater trust and confidence in how their personal and organisational information is used online when using accredited digital identity services.
• Businesses and organisations can trust that the information they receive from accredited digital identity services is correct and belongs to the right person or organisation.
• Everyone using or providing accredited digital identity services can do so in a trusted, sustainable and consistent way.