Australia Enacts Digital ID Act 2024 to Enhance Online Identity Verification

Australia has taken a significant step in its digital transformation journey with the implementation of the Digital ID Act 2024. The new legislation, which came into effect on December 1, 2024, aims to provide individuals with secure, convenient, and voluntary ways to verify their identities online, building upon the country’s existing biometric authentication framework to enhance access to government and business services.

The Digital ID Act 2024 was passed by both houses of the Australian Parliament earlier this year, receiving support from Labor, Greens, and the Teals in the lower house. The Australian Competition and Consumer Commission (ACCC) has been designated as the primary digital ID regulator, tasked with accrediting digital ID services, approving participating services, and enforcing compliance. Meanwhile, the Office of the Australian Information Commissioner (OAIC) will oversee privacy aspects, ensuring accredited providers meet high standards for security and privacy, including strict controls on biometric data handling and storage.

Participation in the digital ID system is voluntary, allowing individuals to choose whether to use it. However, businesses can require digital ID for certain services, provided alternative methods are available for those who opt out. This aspect has sparked concerns about the potential for mandatory use in the future. The system builds upon Australia’s existing investment in mobile biometrics, which has paved the way for millions in funding for identity matching services.

The Australian Government Digital ID System (AGDIS) is being rolled out in four phases. Phase 1 has already been implemented, with myID available on over 185 government services. In Phase 2, state and territory government services can now apply to join the AGDIS as relying services. By December 2026, private sector services will be able to apply to join the AGDIS in Phase 3, and accredited private sector providers, attribute providers, and exchange providers can apply to join by the same deadline in Phase 4. This rollout aligns with Australia’s broader regional strategy, including its AUD $3 million investment in digital identity infrastructure for Pacific Island nations.

Digital ID service providers can apply for accreditation, which involves meeting high standards for security, privacy, usability, accessibility, risk management, and fraud control. Accredited providers will display a Digital ID accreditation trustmark. The system emphasizes strong privacy and security standards, requiring accredited providers to protect user information and keep it private. The OAIC will handle complaints and conduct investigations of data breaches.

Source: The Epoch Times

–

December 3, 2024 – by Cass Kennedy