Where data is stored
To protect the original record, the government agency that issued an identity document will continue to store information in its own secure system.
In most cases, the Identity Verification Services access information directly from these systems. The exception is driver licence information (see below).
States and territories provide the Australian Government with a copy of driver licence information as part of the National Driver Licence Facial Recognition Solution (NDLFRS). This is done under the authority of state and territory laws that permit this type of information sharing.
The National Driver Licence Facial Recognition Solution is now under construction with Tasmania, Victoria and South Australia the first states to provide their data.
The Attorney-General’s Department house the National Driver Licence Facial Recognition Solution in a data centre located in Canberra and certified under the Australian Government’s protective security requirements.
The National Driver Licence Facial Recognition Solution is not yet operational.
All Identity Verification Services requests and responses are transmitted in an encrypted format. As the operator of the Identity Verification Services, the Attorney-General’s Department cannot view, edit or modify this information, or track an individual's use of the services.
Who can use the Identity Verification Services?
Approved organisations in Australia and New Zealand can use the Document Verification Service (DVS), while only approved Australian organisations can access the Face Verification Service (FVS). Use of the services must be reasonable, necessary and proportionate to a user’s functions or activities.
The Document Verification Service is currently used by more than 2,600 government and private sector organisations.
The Face Verification Service is only used by Australian Government agencies.
In the future, local government, state and territory governments and private sector organisations will use the Face Verification Service subject to Participation Agreements that outline strong privacy, security and oversight requirements for them to access the services, including provision of the expressed consent from individuals.