Updated Digital Identity rules to bring safer, more secure and more connected ID services

22 July 2025

“The Department is improving its rules to deliver safer, more secure and more connected services in the digital world,” says Secretary for Internal Affairs, Paul James.

The new rules have been developed by the digital regulator, in close consultation with the private sector, digital identity vendors, and in line with international standards and best practice.

The new Digital Identity Services Trust Framework Rules will:

• support a wider range of documents, including photo IDs, licences, qualifications
• allow digital credentials to be presented online
• clarify that digital wallets should not just display credentials on a screen, instead they should support secure, real-time verification to keep information safe and private. Digital credentials must be checked to make sure it’s real
• protect your privacy by stopping an issuer from tracking your digital ID

“Digital identity allows you to prove who you are and information about yourself both online and in-person. Technology never stands still, and neither should regulation,” Mr James says.

“For everyday users, the new rules mean greater choice and control. In the future, whether renting a car, opening a bank account or accessing public services, people will be able to use trusted digital credentials residing on their own devices and presented only with their consent.

“The updated rules show we can move quickly, work hand-in-hand with industry, and deliver a better digital identity ecosystem for every New Zealander,” Mr James says.

The rules come into force on 24 July 2025.

The Trust Framework Board will shortly release additional guidance to assist with compliance with the amended rules.

Note to Editors

• The Trust Framework does not create a central database, track users, or allow organisations to exchange user information without consent.
• The use of digital identity services is always optional.
• With accredited digital wallets and apps, credentials remain encrypted on the user’s device; issuers have no visibility when a credential is presented.
• Consent is mandatory: people must give explicit permission before any information is shared.

ENDS

Media contact:
Media Desk
Department of Internal Affairs | Te Tari Taiwhenua
Mobile: +64 27 535 8639
Email: media@dia.govt.nz