Several submitters expressed concern that the bill provides immunity from liability in civil proceedings for accredited digital identity service providers over harms which have resulted from the use of their services, and the bill has been amended in response to this concern to establish that that immunity does not apply to any proceedings taken under the Privacy Act. A further amendment seeks to clarify who may make rules that comprise the trust framework. To make sure that the Minister's powers are clearly prescribed, the bill has now been amended to clarify that the Minister's power to make trust framework rules is limited to the technical standards set out in clause 19. 