Governance
Who decides what
Roles and decision rights for registers and identity, the delegations the gate enforces, and the guardrails that stop agents.
Roles
| Role | Kind | Responsibilities | Decision rights |
|---|---|---|---|
| AUDITOR Internal audit | INTERNAL | Verifies the evidence chain and tests decisions against delegations. | No decisions. Unrestricted read of the chain. |
| DATA_STEWARD Data steward | INTERNAL | Owns data quality across registers and the link to the other services' records. | Recommends merges; decides none. |
| DEPUTY_REGISTRAR Deputy registrar | INTERNAL | Delegate for routine registrations and extracts the agent could not settle. | Registration where the Act requires a delegate; entitlement to a record. No deregistration, no merges. |
| IDENTITY_PROVIDER Digital identity scheme | EXTERNAL | The national or state scheme that asserts identity attributes at a level of assurance. | None here. |
| REGISTRAR Registrar | INTERNAL | Owns the public register and the standard condition sets. | Publishes standard conditions; corrects the register. |
| REGISTRY_OFFICER Registry officer | INTERNAL | Keys counter applications, records responses and corrections with a reason. | Corrections with a reason; no registrations, deregistrations or merges. |
| SUBJECT Person or business on a register | EXTERNAL | Asserts identity with consent, applies, lodges returns, asks for suppression, requests extracts. | Responds to show cause; seeks review. |
| TRIBUNAL External review tribunal | EXTERNAL | External merits review. | Sets aside or varies on external review. |
Delegations
| Role | Decision | Note |
|---|---|---|
| REGISTRAR | registration | Register or refuse where the Act requires the registrar or delegate. |
| DEPUTY_REGISTRAR | registration | Register or refuse where the Act requires the registrar or delegate. |
| REGISTRAR | deregistration | Deregister, suspend or reinstate after show cause. |
| REGISTRAR | register merge | Confirm two identities are one person or business and merge their records. |
| REGISTRAR | record entitlement | Decide a disputed entitlement to a record beyond the public view. |
| DEPUTY_REGISTRAR | record entitlement | Decide a disputed entitlement to a record beyond the public view. |
| REGISTRAR | identity dispute | Resolve an identity the scheme could not confirm or that conflicts with the register. |
| REGISTRAR | suppression | Suppress or unsuppress a subject's details on a public register. |
Guardrails
GL-RG-01 Registration and deregistration where the Act requires a delegate are a person's
Where a register requires the registrar or delegate, the agent assesses and recommends; the delegate decides. Deregistration and suspension follow show cause.
GL-RG-02 A duplicate is a finding, not a fact
The agent scores candidate duplicates and shows its matchers. No two identities are merged, and no other service's view changes, until the registrar confirms.
GL-RG-03 Identity is verified through the scheme, with consent
Identity is asserted through the jurisdiction's digital identity scheme only with the person's consent; the level reached and the attributes asserted are recorded; no identity document copies are stored.
GL-RG-04 History is never overwritten
Every change to an entry keeps what was there before, what replaced it, the reason, who made it and where it came from.
GL-RG-05 Suppression for safety
A subject with a safety flag has address and contact withheld from every public view and every extract; only the registrar may lift it.
GL-RG-06 Entitlement to a record comes from the access rules
The public view is anyone's. A full record is the subject's at IAL2, or a third party's on a basis the rules allow. A disputed entitlement is the registrar's decision.
GL-RG-07 Tell us once
One identity across services. A change on the register propagates to the linked records with its source, never the other way round without consent.
GL-RG-08 Statutory clocks visible
Every application carries its statutory decision date; deemed outcomes are never allowed to operate by accident.