Privacy Demonstrated Amendment of Successful compliance with all subscriber personal amendment of National Privacy information requires personal information Principles (NPPs), the either: should result in Information Privacy (i) re-proving their of the Principles (IPP’s) as identity, as in the credential. applicable and all initial registration Australian Privacy process, or Principles (APP’s) (ii) by using their should the 2012 credentials to Amendment Bill authenticate their become law. revision. Key Management Documented Key Full Gatekeeper Gatekeeper High Management Plan accreditation Assurance (KMP) assessed by accreditation. commercial IRAP Specifications for assessor (see hardware tokens from Gatekeeper PKI EPL Framework for details of KMP requirements). REQUIREMENT LOA 1 LOA 2 LOA 3 LOA 4
Privacy Demonstrated compliance with all National Privacy Principles (NPPs), the Information Privacy Principles (IPP’s) as applicable and all Australian Privacy Principles (APP’s) should the 2012 Amendment Bill become law. Amendment of subscriber personal information requires either: (i) re-proving their identity, as in the initial registration process, or (ii) by using their credentials to authenticate their revision. Successful amendment of personal information should result in of the credential. Key Management Documented Key Management Plan (KMP) assessed by commercial IRAP assessor (see Gatekeeper PKI Framework for details of KMP requirements). Full Gatekeeper accreditation Gatekeeper High Assurance accreditation. Specifications for hardware tokens from EPL REQUIREMENT LOA 1 LOA 2 LOA 3 LOA 4
draft-commercial-service-provider.docx