
Where data is stored
To protect the original record, the government agency that issued an identity document will continue to store information in its own secure system.
In most cases, the Identity Verification Services access information directly from these systems. The exception is driver licence information (see below).
States and territories provide the Australian Government with a copy of driver licence information as part of the National Driver Licence Facial Recognition Solution (NDLFRS). This is done under the authority of state and territory laws that permit this type of information sharing.
We have commenced uploading Western Australian driver licences to the National Driver Licence Facial Recognition Solution, ready for their availability by the end of 2025.
The Attorney-General’s Department hosts the National Driver Licence Facial Recognition Solution. All services are accredited under the Australian Signals Directorate accreditation framework as set out in the Information Security Manual (ISM).
All Identity Verification Services requests and responses are transmitted in an encrypted format. As the operator of the Identity Verification Services, the Attorney-General’s Department cannot view, edit or modify this information, or track an individual's use of the services.
Who can use the Identity Verification Services?
Approved organisations in Australia and New Zealand can use the Document Verification Service (DVS), while only approved Australian organisations can access the Face Verification Service (FVS). Use of the services must be reasonable, necessary and proportionate to a user’s functions or activities.
The Document Verification Service is currently used by more than 2,600 government and private sector organisations.
The Face Verification Service is only used by Australian Government agencies.
In the future, local government, state and territory governments and private sector organisations will use the Face Verification Service subject to Participation Agreements that outline strong privacy, security and oversight requirements for them to access the services, including provision of the expressed consent from individuals.