Following consultation, the rules that underpin Australia’s Digital ID System have been amended to better support individuals.
A key amendment made was establishing a redress framework.
The redress framework is about improving support provided to people who are impacted by digital ID fraud incidents and cyber security incidents should they occur within the Australian Government Digital ID System.
We heard how important it is to notify affected individuals in a timely way, provide clear and accessible complaints handling processes, and ensure robust oversight on technical issue resolution.
The redress framework sets in place new requirements on service providers.
The new measures include the following requirements for attribute providers and digital ID providers:
- make reasonable attempts to notify individuals should they be affected by cyber security and digital ID fraud incidents
- publish cyber security and digital ID fraud incident management policies
- publish complaints handling policies
- refer unresolved technical issues to the System Administrator within 28 days.
The new measures also empower the System Administrator to make recommendations regarding investigations into cyber security and fraud incidents. This strengthens oversight and accountability, helping ensure that incidents are investigated promptly and thoroughly.
Other amendments to the Digital ID Rules and Digital ID Accreditation Rules include:
- Providing the option for individuals to give consent to share their details with a service (relying party) for up to 7 years when acting on behalf of a business, rather than needing to do it every year.
- Deferring the start date of obligations on digital ID providers related to individuals requesting temporary suspensions of their digital ID.
- Updating the Protective Security Policy Framework requirements for accredited entities.
- Streamlining applications for government relying parties after a machinery of government change.
- Authorising the Digital ID Data Standards Chair to use the Digital ID Accreditation Trustmark.
For more information on these amendments, visit the consultation page. These amended rules commenced on 19 November 2025.
Consultation on the proposed changes ran from 18 September 2025 to 17 October 2025. Thank you to all who participated and provided their feedback.
The amendment Rules are available on the Federal Register of Legislation:
- Digital ID (Accreditation) Amendment (PSPF and Other Measures) Rules 2025 - Federal Register of Legislation
- Digital ID Amendment (Redress Framework and Other Measures) Rules 2025 - Federal Register of Legislation
Download a copy of the Outcomes paper [PDF 304KB]
