|
New Zealand is preparing to embrace Digital Identity – a secure way to prove who you are without relying on physical documents like passports or drivers’ licenses. This shift promises convenience, enhanced security, and smoother, more reliable access to services. But what exactly is digital identity, how does it work, and what safeguards are in place to protect your information?
What is digital identity? A digital identity is an electronic version of your real-world identity, used to verify who you are when accessing certain goods or services. Instead of providing your passport or drivers’ license, you can use trusted digital credentials. Credentials are verified pieces of information that belong to you, which a relying party can request to confirm they meet their requirements or expectations. Digital credentials are:
New Zealand is currently rolling out the necessary facilities to support digital identity services, with additional providers expected to enter the market in coming years. Digital identity is expected to play a vital role within New Zealand society, supporting the following services:
What Could Go Wrong? A perfect implementation of digital identity services offers many benefits over traditional physical documents. However, an insecure implementation could result in your personal information being leaked, or your identity being impersonated. Some consequences include:
Introducing the Trust Framework Authority: To address these risks, New Zealand has established the Trust Framework Authority (TFA) under the Digital Identity Services Trust Framework (DISTF) Act 2023. The TFA is the regulator of digital identity service providers, ensuring that all providers meet strict security, privacy, and trust standards under the DISTF (accreditation). The TFA is responsible for:
The TFA ensures that any implementation of digital identity in New Zealand is secure, trustworthy, fair, and transparent. Independent Evaluators The role of independent privacy and security evaluators is to assess whether a provider meets the privacy, security, and regulatory requirements outlined in the DISTF. The assessment performed by the independent evaluator helps to inform TFA to make a final accreditation decision. PrivSec Consulting are approved independent security evaluators, which allows us to help you achieve accreditation under the DISTF. Final Thoughts Digital Identity is coming, bringing both opportunities and risks. With the TFA’s safeguards, New Zealand is taking a cautious, regulated approach to ensure that the information of New Zealanders is protected. If you are a provider, a relying party, or just want to chat with an expert on Digital Identity Services within New Zealand, please reach out at [email protected] References:
Author: Kent Wolstenholme Comments are closed.
|