DVS Identity Verification Privacy Notice

This notice explains how your personal information is collected, used and disclosed when your identity is verified as part of your onboarding or ongoing engagement with the organisation you are applying to or working with (your employer or engaging organisation), and what rights you have in relation to that information.

Who is collecting your information

The organisation you are applying to or working with (your employer or engaging organisation) is the primary collector of your personal information for the purposes of identity verification. They use Zipline.io Pty Ltd (Zipline.io) as their technology platform to facilitate this process. Zipline.io operates the identity verification system on their behalf.

Zipline.io holds a Document Verification Service (DVS) Business User Participation Agreement with the Australian Government's Attorney-General's Department (OAC: RZI0), and accesses the DVS on behalf of the organisation you are working with for the purposes described below.

How the DVS is used

The information you provide from your identity document (such as your name, date of birth, and document number) may be electronically submitted to the Australian Government's Document Verification Service (DVS) - a secure government system administered by the Attorney-General's Department.

In most but not all cases, this is only used if you:

  1. Upload an Australian passport that is within 3 years of expiry as a form of identification
  2. Upload a digital driver's licence
  3. Upload a digital Medicare card

The DVS checks whether the details you have provided match the records held by the relevant government agency that issued your document (for example, the passport office or a state driver licence authority). The DVS returns a simple match or no-match result. It does not provide access to any additional information held by the issuing agency.

This verification is conducted for the purpose of worker screening - to confirm your identity as part of your application or ongoing engagement with the organisation you are working with.

Your information may be submitted to the DVS via Zipline's approved Gateway Service Provider, RapidID, which acts as an intermediary in transmitting your verification request to the DVS.

Our legal obligations

The organisation you are working with and Zipline.io collect your identification information under the following legal framework:

  • The Identity Verification Services Act 2023 (Cth), which governs the operation of the DVS and requires that your express consent is obtained before any identity verification request is made
  • The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), which govern how your personal information must be handled, stored, used and disclosed
  • The engaging organisation's own privacy obligations as applicable to its industry and jurisdiction

Your identification information will only be used for the purpose for which it was collected - confirming your identity for worker screening - and will not be used for data profiling, online tracking, marketing or any other secondary purpose.

Your rights

You have the following rights in relation to the personal information collected for identity verification:

  • Access: You may request access to the personal information the organisation you are working with, or Zipline.io, holds about you
  • Correction: You may request that inaccurate or out-of-date personal information be corrected
  • Complaints: You have the right to make a complaint if you believe your personal information has been mishandled (see below)
  • Withdrawal of consent: You may withdraw your consent to identity verification at any time, however this may affect the engaging organisation's ability to process your application or engagement (see below)

For information about how the DVS operates and how the Attorney-General's Department handles personal information in connection with the DVS, visit idmatch.gov.au.

What happens if you do not consent

Providing your consent to identity verification via the DVS is voluntary. However, if you choose not to consent:

  • The organisation you are working with may be unable to complete your identity verification electronically
  • They may offer an alternative method of identity verification - a representative will advise you of available options
  • If no alternative method is available or completed, the organisation may be unable to progress your application or engagement

You will not be penalised solely for declining to consent, but the practical consequence may be that your onboarding or engagement cannot be completed without a verified identity.

How to make a complaint

If you have a question or complaint about the collection, use or disclosure of your identification information in connection with this identity verification process, you can contact Zipline's support team:

Email: support@zipline.io

You may also direct complaints to the organisation you are applying to or working with using the contact details in their privacy policy.

If you are not satisfied with the response you receive, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

For information about making complaints in relation to the DVS specifically, visit idmatch.gov.au.

Further information

For more information about how the organisation you are working with handles your personal information, please refer to their Privacy Policy, available on their website or on request.

For more information about how Zipline.io handles personal information, please contact support@zipline.io.

‍