8 March 2022
45 Pipitea St
Wel ington 6011
Phone 0800 25 78 87
fyi.org.nz
dia.govt.nz
fyi-request-18513-
[email address]
Tēnā koe Maxwel ,
OIA2122-0571
Thank you for your email of 10 February 2022 requesting the fol owing information under
the Official Information Act 1982 (the Act):
“
…correspondence between the Department of Internal Affairs and any related
government agencies, with respect to the alignment of a digital identity and the health
records of NZ citizens, using the proposed Digital Identity Trust Framework (currently
under Select Committee review…inclusion of any correspondence material which
discusses the alignment of any data from My Health Account and/or My COVID Record
(overseen by the Ministry of Health) and it's potential integration and use under the
Digital Identity Trust Framework”
I am refusing your request under section 18(e) of the Act as the information you have
requested does not exist. The Digital Identity Services Trust Framework Bill (the Bil ) does
not intend to al ow for the integration of data from multiple sources into a single location.
The Digital Identity Services Trust Framework (the Trust Framework) will enable
New Zealanders to prove their identities online in a private, secure and convenient way,
similar to how we currently present our physical drivers licenses or passports to prove who
we are. People wil be able to inform those that need to know about changes without
needing to show documents in-person, for example, when starting a new job, moving
schools or enrol ing with a new GP.
The Trust Framework wil also provide benefits to New Zealand businesses. Businesses wil
have greater confidence in the information they rely on while saving resources by spending
less time handling physical documents.
The Trust Framework has eight principles; these include being people-centred and privacy-
enabling. Being people-centred means that people wil only have a digital identity if they
want to create and use one. Physical identification such as driver licences and passports wil
remain available for proof of identity for those who do not want to opt-in to the Trust
Framework.
We understand New Zealanders want to have control over their information and how it is
used. People wil retain ownership and control over their data. Any sharing of identity data
under the Trust Framework will need that person’s permission on a case-by-case basis.
Being privacy-enabling means that organisations may only ask for the minimum amount of
data needed for a particular purpose. Col ection and use of this data must fol ow the
requirements in the Privacy Act 2020. Recognising New Zealanders’ need for privacy, the
Trust Framework will not have a central database where data from different sources will or
can be connected.
The Trust Framework rules also prohibit the correlation of user data for tracking purposes.
The other principles of the Trust Framework can be found at the fol owing link:
www.digital.govt.nz/digital-government/programmes-and-projects/digital-identity-
programme/trust-framework/trust-framework-principles/.
The Trust Framework will have an accreditation scheme for service providers to demonstrate
their suitability and trustworthiness regarding the management of data. Accreditation will
also show service providers’ commitment to the principles of the Trust Framework.
Public sector entities, such the Ministry of Health, may apply to have their service
accredited. Accredited digital identity services wil have a trust mark to enable people and
businesses to distinguish between them and non-accredited digital identity services.
Thank you for your interest in the Trust Framework Bill.
Nāku noa, nā
Steve Cutting
Tumuaki | Acting Director | Ministerial, Monitoring and Capability Group
Page 2 of 2
