Identity Information Confirmation Act 2012
Checking for alerts... Loading...
Version as at 15 June 2023
Identity Information Confirmation Act 2012
Public Act |
2012 No 124 |
|
Date of assent |
18 December 2012 |
|
Commencement |
see section 2 |
Note
The Parliamentary Counsel Office has made editorial and format changes to this version using the powers under subpart 2 of Part 3 of the Legislation Act 2019.
Note 4 at the end of this version provides a list of the amendments included in it.
This Act is administered by the Department of Internal Affairs.
Contents
The Parliament of New Zealand enacts as follows:
1 Title
This Act is the Identity Information Confirmation Act 2012.
2 Commencement
This Act comes into force on the day after the date on which it receives the Royal assent.
Part 1 Preliminary provisions
3 Overview
(1)
This section is a guide to the general scheme and effect of this Act, but does not affect the interpretation or application of the other provisions of the Act.
(2)
Part 1 deals with preliminary matters, including the purpose of this Act and interpretation.
(3)
Part 2 relates to the confirmation service and miscellaneous matters, including—
(a)
provisions that govern the use of the confirmation service:
(b)
provisions relating to confirmation agreements:
(c)
provisions relating to information and reporting requirements:
(d)
the protection of the Crown from liability:
(e)
the relationship between this Act and other enactments:
(f)
consequential amendments to other enactments.
(4)
The Schedule sets out consequential amendments to other enactments.
4 Purpose
The purpose of this Act is to facilitate the use of an electronic service that allows agencies to confirm identity information about individuals so as to—
(a)
contribute to the prevention of crime (particularly identity-related crimes); and
(b)
ensure that agencies can use and, if necessary, record confirmed identity information.
5 Interpretation
In this Act, unless the context otherwise requires,—
action—
(a)
includes failure to act; and
(b)
also includes any policy or practice
adverse action means any action that may adversely affect the rights, benefits, privileges, obligations, or interests of any specific individual
agency—
(a)
means a person or body of persons (whether corporate or unincorporate and whether in the public sector or private sector); but
(b)
does not include an intermediary
applicable database means any file, register, device, or computer system in or on which information is recorded under each of the following:
(b)
the Citizenship Act 1977:
(c)
chief executive means the chief executive of the department
confirmation service means the service provided by the responsible officials for the purposes of this Act
department means the department of State that, with the authority of the Prime Minister, is for the time being responsible for the administration of either or both of the Citizenship Act 1977 and the Passports Act 1992
identity information, in relation to an individual,—
(a)
means any or all of the following information that the individual provides to an agency for the purpose of establishing the individual’s identity with the agency:
(i)
the individual’s full name:
(ii)
the individual’s gender:
(iii)
the individual’s date of birth:
(iv)
the individual’s place of birth; and
(b)
includes any other recorded information relating to the individual (for example, a document or part of a document relating to the individual such as a passport or the passport’s number, or the photograph in the passport) that the individual provides to an agency for the purpose of establishing the individual’s identity with the agency; and
(c)
also includes any information about the status of any other recorded information referred to in paragraph (b) (for example, the status of the individual’s passport or citizenship record)
identity information check means a check that is carried out for the purpose described in section 7
intermediary means a person or body of persons (whether corporate or unincorporate and whether in the public sector or private sector) who or that—
(a)
is a party to a confirmation agreement with the responsible officials; and
(b)
submits, on behalf of an agency, an individual’s identity information for an identity information check in accordance with a separate agreement between the intermediary and the agency (whether or not for reward or in conjunction with any other business or activity)
Privacy Commissioner means the person who holds that office under section 13 of the Privacy Act 2020
recorded information means information that is recorded in or on any or all of the applicable databases
Registrar-General has the meaning given to it in section 4 of the Births, Deaths, Marriages, and Relationships Registration Act 2021
responsible officials means either or both of the following (as the case may be):
(a)
the Registrar-General:
(b)
the chief executive.
Section 5 applicable-database paragraph (a): amended, on 15 June 2023, by section 147 of the Births, Deaths, Marriages, and Relationships Registration Act 2021 (2021 No 57).
Section 5 Privacy Commissioner: amended, on 1 December 2020, by section 217 of the Privacy Act 2020 (2020 No 31).
Section 5 Registrar-General: amended, on 15 June 2023, by section 147 of the Births, Deaths, Marriages, and Relationships Registration Act 2021 (2021 No 57).
6 Act binds the Crown
This Act binds the Crown.
Part 2 Provisions relating to confirmation service and miscellaneous matters
Subpart 1—Use of confirmation service
7 Purpose of confirmation service
The purpose of the confirmation service is to allow an agency or intermediary to check whether an individual’s identity information is consistent with any recorded information.
8 Conditions for using confirmation service
(1)
An agency or intermediary may use the confirmation service for an identity information check if—
(a)
the individual has consented (in written or electronic form) to the check before it is carried out; and
(b)
the agency or intermediary has given the confirmation service an assurance (in written or electronic form) that the individual has consented to the check; and
(c)
the agency or intermediary is a party to a confirmation agreement that complies with section 11; and
(d)
in the case of an intermediary, the identity information check is on behalf of an agency that has been approved by the responsible officials under section 13(a) and is listed as such in the confirmation agreement between the intermediary and the responsible officials; and
(e)
the check is carried out in accordance with the agreement; and
(f)
the agency or intermediary has made an arrangement to pay or has paid any fees and charges payable under the agreement.
(2)
For the purposes of subsection (1)(a), an individual may consent to an identity information check on—
(a)
a one-off basis (that is, for each identity information check); or
(b)
an ongoing basis (that is, for a series of identity information checks, whether repeated or otherwise).
(3)
An individual who consents to an identity information check may withdraw the consent before—
(a)
the check is carried out, in the case of a consent given on a one-off basis; or
(b)
all of the checks, or any further checks, are carried out, in the case of a consent given on an ongoing basis.
9 How to use confirmation service
(1)
If the conditions specified in section 8 have been complied with, an agency or intermediary must, in order to use the confirmation service for an identity information check, submit an individual’s identity information by any electronic or other means approved by the responsible officials.
(2)
On receiving the individual’s identity information, the confirmation service must carry out a search of any or all of the applicable databases (as the case may be) for any recorded information about the individual.
(3)
If it is impracticable for the confirmation service to comply with subsection (2) for any reason, the confirmation service must advise the agency or intermediary that the identity information check cannot be processed and may ask the agency or intermediary to resubmit the individual’s identity information.
(4)
The confirmation service must not, at any stage, supply to the agency or intermediary any recorded information about the individual who is the subject of the search.
(5)
However, subsection (4) does not limit or prevent the disclosure of—
(a)
information, under section 117 of the Births, Deaths, Marriages, and Relationships Registration Act 2021, that the individual is dead or that name change information exists in relation to the individual:
(b)
any information about the status of any other recorded information in relation to the individual (for example, whether a passport has been cancelled).
(6)
After carrying out the search referred to in subsection (2), the confirmation service must supply to the agency or intermediary information about the search result and, in particular, whether any or all of the individual’s identity information submitted to the service is consistent with any recorded information.
(7)
Without limiting subsection (6), the information that may be supplied under that subsection generally includes, subject to subsection (4), one of the following search results:
| Result | Description |
| Consistent | Identity information is consistent with recorded information. |
| Not consistent | Identity information is not consistent with recorded information. |
| Exception | One or more of the circumstances described in subsection (5) apply (for example, the identity information may relate to an individual who is dead), including information about which of those circumstances apply. |
(8)
For the purposes of subsections (6) and (7), identity information may be treated as consistent with recorded information despite any variation between them because of pronunciation or punctuation.
Example
The name “Michele”
is treated as consistent with the name “Michèle”
despite the accent written above the first letter “e”
in the latter.
The name “Steel-Baker”
is treated as consistent with the name “Steel Baker”
despite the absence of the hyphen in the latter.
Section 9(5)(a): amended, on 15 June 2023, by section 147 of the Births, Deaths, Marriages, and Relationships Registration Act 2021 (2021 No 57).
Subpart 2—Confirmation agreements
10 Parties to confirmation agreement
(1)
The responsible officials may enter into a confirmation agreement with an agency or intermediary if satisfied that it is appropriate to do so after having regard to the following:
(a)
the nature of the agency’s or intermediary’s undertaking or activity and whether the agency or intermediary has a genuine need to use the confirmation service in carrying out that undertaking or activity:
(b)
the agency’s or intermediary’s policies and practices in relation to—
(i)
the security of information; and
(ii)
the privacy of individuals:
(c)
any other matter that the responsible officials consider to be relevant.
(2)
For the purposes of subsection (1), a confirmation agreement must be entered into by—
(a)
the Registrar-General, if the agreement relates to identity information checks against any recorded information under the Births, Deaths, Marriages, and Relationships Registration Act 2021:
(b)
the chief executive, if the agreement relates to identity information checks against any recorded information under either or both of the Citizenship Act 1977 and the Passports Act 1992.
(3)
To avoid doubt, the responsible officials—
(a)
have the sole discretion to decide whether to enter into a confirmation agreement with an agency or intermediary; and
(b)
may decide not to do so if either or both of them, as the case may be, are not satisfied in accordance with subsection (1).
Section 10(2)(a): amended, on 15 June 2023, by section 147 of the Births, Deaths, Marriages, and Relationships Registration Act 2021 (2021 No 57).
11 General requirements for form and content of confirmation agreement
(1)
A confirmation agreement must be in writing.
(2)
A confirmation agreement must—
(a)
state the purpose of the agreement; and
(b)
specify which of the applicable databases it applies to.
(3)
A confirmation agreement must also specify the following terms or conditions:
(a)
how an agency or intermediary may use the confirmation service; and
(b)
the conditions for using the confirmation service, including the conditions specified in section 8; and
(c)
the fees and charges payable for using the confirmation service and how those fees and charges are to be paid; and
(d)
the grounds on which the agreement may be terminated, including the grounds that—
(i)
the responsible officials are satisfied, having regard to the matters in section 10(1), that it is no longer appropriate to continue with the agreement; and
(ii)
the agency or intermediary has breached, or is likely to breach, the agreement; and
(e)
the process that must be followed by the responsible officials before exercising any right to terminate the agreement; and
(f)
the process for monitoring the agency’s or intermediary’s compliance with the terms or conditions of the agreement, including the requirement for the agency or intermediary to keep, for monitoring purposes, records in respect of identity information checks and the requirement to provide those records to the responsible officials when requested; and
(g)
the requirement that the responsible officials consult the Privacy Commissioner about the terms or conditions of confirmation agreements, including the consultation requirements in sections 14 and 15.
(4)
A confirmation agreement may specify any other terms or conditions that the responsible officials consider to be appropriate.
(5)
A confirmation agreement may specify different terms or conditions from those contained in another confirmation agreement even though the agencies or intermediaries concerned belong—
(a)
in the same class; or
(b)
in different classes.
(6)
A confirmation agreement may be varied by further agreement between the parties.
(7)
This section does not prevent an intermediary from entering into a confirmation agreement as an agency that submits an individual’s identity information for an identity information check for its own purposes, rather than on behalf of another agency.
(8)
To avoid doubt, if an intermediary wishes to submit an individual’s identity information for an identity information check for its own purposes, the intermediary must enter into a confirmation agreement as an agency, rather than in its capacity as an intermediary.
12 Content of confirmation agreement with agency
In addition to the requirements in section 11, a confirmation agreement with an agency must specify—
(a)
how the agency must obtain an individual’s consent for an identity information check, including the requirement to use a form (if any) approved for the purpose by the responsible officials; and
(b)
how an individual may withdraw his or her consent for an identity information check; and
(c)
the circumstances in which an individual’s consent for an identity information check that is given on an ongoing basis must be treated as having expired (for example, if the individual ceases to be a customer of the agency or if a certain period of time has elapsed since the date on which the consent was given); and
(d)
an alternative process for dealing with an individual whose identity information cannot be confirmed using the confirmation service because, for example, there is no recorded information about the individual or the individual has not given his or her consent to an identity information check; and
(e)
the procedures that an agency must follow before taking adverse action against an individual as a result of using the confirmation service, including the requirement to give the individual a reasonable opportunity to make submissions or to be heard.
13 Content of confirmation agreement with intermediary
In addition to the requirements in section 11, a confirmation agreement with an intermediary must specify—
(a)
the requirement that the responsible officials must, having regard to the matters in section 10(1), approve an agency on whose behalf the intermediary is proposing to submit an individual’s identity information for an identity information check before the intermediary enters into a separate agreement with that agency; and
(b)
the requirement that the intermediary must—
(i)
list every agency that has been approved under paragraph (a) in its confirmation agreement; and
(ii)
remove an agency from that list if the agency’s approval under that paragraph is withdrawn by the responsible officials because the grounds in section 11(3)(d) on which a confirmation agreement may be terminated would have existed had the confirmation agreement been entered into directly with the agency; and
(c)
the requirement that the intermediary must not submit an individual’s identity information for an identity information check—
(i)
on behalf of an agency that has not been approved by the responsible officials under paragraph (a) or an agency whose approval under that paragraph has been withdrawn by the responsible officials; and
(ii)
if the intermediary has not entered with that agency into a separate agreement that complies with paragraph (d); and
(iii)
if that separate agreement is not in force (that is, if it has expired or has been revoked); and
(d)
the requirement that the intermediary and the agency must enter into a separate agreement that must—
(i)
be in writing; and
(ii)
include, subject to any necessary modifications, the terms or conditions set out in sections 11(3)(b) and (d) to (f) and 12; and
(e)
the condition that the intermediary must provide a copy of the separate agreement between the intermediary and an agency to the responsible officials when requested to do so (but subject to the right of the intermediary to withhold any commercially sensitive information); and
(f)
the condition that the intermediary must not retain, use, or store for its own purposes any information derived from an identity information check that was obtained on behalf of an agency.
14 Standard terms or conditions for confirmation agreement
(1)
The responsible officials may develop standard terms or conditions for a confirmation agreement that apply, or are proposed to apply, to particular agencies or intermediaries or classes of agencies or intermediaries, but must consult the Privacy Commissioner while doing so.
(2)
If the responsible officials are proposing to enter into a confirmation agreement that will contain terms or conditions that are materially different from the standard terms or conditions developed under subsection (1), the responsible officials may develop alternative terms or conditions for the proposed agreement, but must consult the Privacy Commissioner about those terms or conditions before entering into the agreement.
(3)
If the responsible officials are proposing to vary a confirmation agreement by amending any terms or conditions developed under subsection (1) or (2) that are contained in the agreement, the responsible officials must consult the Privacy Commissioner about the proposed amendments to those terms or conditions before varying the agreement.
(4)
However, the requirement to consult the Privacy Commissioner under subsection (3) does not apply if the variation relates to—
(a)
the fees and charges payable under the agreement; or
(b)
terms or conditions that are minor or incidental in nature; or
(c)
any changes to a confirmation agreement that relate to additions to, or deletions or substitutions from, the list of agencies approved under section 13(a).
15 Other requirements to consult Privacy Commissioner
(1)
If section 14(1) or (2) does not apply, the responsible officials must consult the Privacy Commissioner about the terms or conditions of a confirmation agreement.
(2)
The responsible officials must also consult the Privacy Commissioner if either or both of the responsible officials, as the case may be, are proposing to enter into a confirmation agreement that will allow a comparison of a photograph submitted by an individual for the purposes of an application under the Citizenship Act 1977 or the Passports Act 1992 (for example, an application for a grant of New Zealand citizenship or for a New Zealand passport) included in any recorded information about him or her against a copy of that photograph provided by the individual to an agency.
16 Periodic review of terms or conditions of confirmation agreements generally
(1)
The Privacy Commissioner may, at intervals not shorter than 12 months, require the responsible officials to—
(a)
review the terms or conditions of any confirmation agreement (whether or not they are standard terms or conditions developed under section 14); and
(b)
report on the outcome of the review to the Privacy Commissioner.
(2)
If, after a review under subsection (1), the Privacy Commissioner and the responsible officials agree that amendments to the terms or conditions of a confirmation agreement are required, the responsible officials must vary the confirmation agreement to include the amendments to the terms or conditions.
(3)
To avoid doubt, a variation to a confirmation agreement under subsection (2) applies only if the agency or intermediary that is party to the agreement agrees to it.
17 Fees and charges payable under confirmation agreement
(1)
A confirmation agreement may require the agency or intermediary that is party to the agreement to pay fees and charges to the responsible officials for using the confirmation service.
(2)
The fees and charges—
(a)
must be set at a level that is no more than is necessary to cover the cost of providing the confirmation service; and
(b)
may be set using different methods for different agencies or different classes of agencies.
Subpart 3—Information and reporting requirements
18 List of agencies and intermediaries
The responsible officials must—
(a)
maintain a list of—
(i)
agencies and intermediaries that are party to a confirmation agreement; and
(ii)
agencies that have been approved under section 13(a) in relation to each intermediary that has entered into a confirmation agreement:
(b)
publish that list on an Internet site that is under the responsible officials’ control in an electronic form that is publicly accessible (at all reasonable times) and is free of charge.
19 Privacy Commissioner may require periodic reports on operation of confirmation service
The Privacy Commissioner may, at intervals not shorter than 12 months, require the responsible officials to provide the Privacy Commissioner with a report on the operation of the confirmation service.
Subpart 4—Miscellaneous
Protection from liability
20 Protection from liability
(1)
There is no cause of action against the Crown, or a Minister of the Crown, or the responsible officials, or a delegate of the responsible officials, or an employee or a contractor of the department, to recover damages for any loss or damage that is due directly or indirectly to the use of the confirmation service for an identity information check.
(2)
Subsection (1) applies whether the loss or damage is caused by any person taking any action or failing to take any action, so long as the act or omission occurred in the exercise or performance of his or her functions, duties, or powers under any of the following:
(a)
this Act:
(c)
the Citizenship Act 1977:
(d)
the Passports Act 1992.
(3)
A person is not exempted from liability under subsection (1) for any act or omission to act that constitutes bad faith or gross negligence on the part of that person.
Section 20(2)(b): amended, on 15 June 2023, by section 147 of the Births, Deaths, Marriages, and Relationships Registration Act 2021 (2021 No 57).
Relationship with other enactments
21 Relationship between this Act and other enactments
(1)
If there is any inconsistency between this Act and any of the following Acts, or any regulations made under the following Acts, this Act prevails:
(b)
the Citizenship Act 1977:
(c)
the Passports Act 1992:
(d)
the Privacy Act 2020.
(2)
However, despite subsection (1), this Act must be read subject to sections 106, 107, and 110 of the Births, Deaths, Marriages, and Relationships Registration Act 2021. Accordingly, nothing in this Act authorises the giving of permission to inspect, or the disclosure of, any document containing information to which those sections apply.
(3)
The following provisions of the Births, Deaths, Marriages, and Relationships Registration Act 2021 apply for the purposes, and in connection with the operation, of the confirmation service:
(a)
clause 12 of Schedule 1; and
Section 21(1)(a): amended, on 15 June 2023, by section 147 of the Births, Deaths, Marriages, and Relationships Registration Act 2021 (2021 No 57).
Section 21(1)(d): replaced, on 1 December 2020, by section 217 of the Privacy Act 2020 (2020 No 31).
Section 21(2): amended, on 15 June 2023, by section 147 of the Births, Deaths, Marriages, and Relationships Registration Act 2021 (2021 No 57).
Section 21(3): replaced, on 15 June 2023, by section 147 of the Births, Deaths, Marriages, and Relationships Registration Act 2021 (2021 No 57).
Consequential amendments to other enactments
22 Consequential amendments to other enactments
The amendments specified in the Schedule are amended in the manner indicated in that schedule.
Schedule Consequential amendments to other enactments
Births, Deaths, Marriages, and Relationships Registration Act 1995 (1995 No 16)
New section 78K: insert after section 78J:
78K Disclosure of certain information for purposes of Identity Information Confirmation Act 2012
(1)
Any information specified in subsection (2) in relation to an individual about whom an identity information check was carried out under section 9 of the Identity Information Confirmation Act 2012 may be disclosed to an agency or intermediary (within the meaning of that Act) if the check indicates that death information or name change information is recorded for that individual.
(2)
The information referred to in subsection (1) is as follows:
(a)
that the individual is dead:
(b)
that name change information in relation to the individual exists.
New section 87AB: insert after section 87A:
87AB Access to information for purposes of Identity Information Confirmation Act 2012
Nothing in this Act limits access to information that is recorded under this Act if the access is for the purposes of, and in accordance with, the Identity Information Confirmation Act 2012.
Citizenship Act 1977 (1977 No 61)
New section 26C: insert after section 26B:
26C Access to information for purposes of Identity Information Confirmation Act 2012
Nothing in this Act limits access to information that is recorded under this Act if the access is for the purposes of, and in accordance with, the Identity Information Confirmation Act 2012.
Passports Act 1992 (1992 No 92)
New section 37A: insert after section 37:
37A Access to information for purposes of Identity Information Confirmation Act 2012
Nothing in this Act limits access to information that is recorded under this Act if the access is for the purposes of, and in accordance with, the Identity Information Confirmation Act 2012.
Notes
1 General
This is a consolidation of the Identity Information Confirmation Act 2012 that incorporates the amendments made to the legislation so that it shows the law as at its stated date.
2 Legal status
A consolidation is taken to correctly state, as at its stated date, the law enacted or made by the legislation consolidated and by the amendments. This presumption applies unless the contrary is shown.
Section 78 of the Legislation Act 2019 provides that this consolidation, published as an electronic version, is an official version. A printed version of legislation that is produced directly from this official electronic version is also an official version.
3 Editorial and format changes
The Parliamentary Counsel Office makes editorial and format changes to consolidations using the powers under subpart 2 of Part 3 of the Legislation Act 2019. See also PCO editorial conventions for consolidations.
4 Amendments incorporated in this consolidation
Births, Deaths, Marriages, and Relationships Registration Act 2021 (2021 No 57): section 147
Privacy Act 2020 (2020 No 31): section 217
Versions
Identity Information Confirmation Act 2012
RSS feed link copied, you can now paste this link into your feed reader.