TF provider
An organisation accredited to provide digital identity services.
How the laws define this
Under all three legal instruments, a TF provider delivers digital identity services subject to regulatory requirements and oversight administered by the Trust Framework Authority. Whether operating or providing these services, entities falling under the framework must meet obligations regarding accreditation and compliance. The primary distinction among these sources involves who can be a provider and whether active accreditation is required. The Digital Identity Services Trust Framework Bill limits providers strictly to an organisation that already holds accreditation to operate accredited digital identity services. Conversely, the Digital Identity Services Trust Framework Act 2023 expands eligibility to include an individual or organisation, defining a provider as any such entity that provides digital identity services and may apply to participate as an accredited provider. Aligning on legal personality with the Act, the Digital Identity Services Trust Framework Regulations 2024 (SL 2024/197) covers an organisation or person, but like the Bill, requires the provider to actually be accredited to operate one or more digital identity services.
Synthesised from the 3 statutory definitions below. Each one is quoted in full, with its source.
What it triggers
- Under the Digital Identity Services Trust Framework Act 2023 (In Force), TF providers must meet the Act’s requirements and are subject to oversight by the TF authority.source
- Under the Digital Identity Services Trust Framework Regulations 2024 (SL 2024/197), TF providers are subject to accreditation, reporting, complaints, evaluation, and compliance obligations administered by the Trust Framework Authority.
- Under the Digital Identity Services Trust Framework Bill, TF providers must meet the Act's requirements on governance, privacy, security, recordkeeping and use of accreditation marks.
Definitions (3)
An organisation that holds accreditation from the TF authority to operate one or more accredited digital identity services under the Trust Framework; TF providers must meet the Act's requirements on governance, privacy, security, recordkeeping and use of accreditation marks.
An individual or organisation that provides digital identity services, and which may apply to participate in the trust framework as an accredited provider subject to the Act’s requirements and oversight by the TF authority.
An organisation or person accredited under the Digital Identity Services Trust Framework Act and these Regulations to operate one or more digital identity services, and subject to the Accreditation, reporting, complaints, evaluation, and compliance obligations administered by the Trust Framework Authority.
Not to be confused with
A Credential Service Provider is an entity that issues or manages identity credentials, while a TF provider is an accredited organisation or person operating digital identity services under the TF regime.
Questions and answers
What obligations do TF providers have under New Zealand law?
TF providers must meet requirements on governance, privacy, security, recordkeeping and use of accreditation marks. They are subject to accreditation, reporting, complaints, evaluation, and compliance obligations administered by the Trust Framework Authority. They are overseen by the TF authority.
Who oversees TF providers?
The TF authority provides oversight to TF providers under the Digital Identity Services Trust Framework Act 2023. It also administers accreditation, reporting, complaints, evaluation, and compliance obligations under the Regulations.
Related Terms
accredited digital identity service
A digital identity service accredited under the TF regime....
TF register
Public register of accredited providers and services....
accreditation mark
Approved mark indicating a service is accredited under the TF....
Trust Framework Authority (TF authority)
Operational body administering accreditation, enforcement, and the register....
Credential Service Provider
Entity that issues or manages identity credentials....