IVS user compliance guide

  • Information
Download
IVS user compliance guide: know your obligations [PDF]

Why your obligations matter

If your organisation uses the IVS, you must understand and meet your obligations to stay compliant and to maintain access to the service. The IVS includes the Document Verification Service (DVS).

There are different types of IVS access for different types of users. If you're unsure which is right for your organisation, our user profiles explain the available access arrangements and help you identify the option that best aligns with your business model. You can access the IVS as a:

Learn more about IVS user profiles and access types.

What you need to do

If your organisation uses the IVS, you must:

  • complete an annual self-audit of your use
  • submit an annual compliance statement
  • address and resolve any non-compliance identified.

To maintain access to the IVS, you must comply with these requirements. We will notify you when your compliance reporting is due.

Learn more about compliance reporting requirements.

Complete your annual compliance statement

All organisations with a participation agreement must submit an annual compliance statement. This includes:

  • organisations that access the IVS through a gateway service provider
  • organisations that have not conducted any transactions during the reporting period.

Learn more about completing a compliance statement.

Participate in the independent audit program if selected

Private sector organisations may be selected to participate in the DVS independent audit program. If your organisation is selected, participation is mandatory. You must remediate any compliance issues identified.

Learn more about the DVS independent audit program.

Address non-compliance promptly

If you identify a compliance issue during a self-audit or compliance reporting activity, you must take prompt action to address it. Prompt action helps maintain compliance and ensure your ongoing access to the IVS.

Learn more about the audit and compliance remediation process.

Understand your consent obligations

Participation agreements include strict requirements for getting an individual's express consent before you verify their identity through the IVS.

To meet your consent obligations:

  • review the consent guidance available on the IDMatch website
  • use the collection notice template to help explain how personal information will be collected and handled.

Learn more about consent obligations for private sector and government users or visit OAIC guidance on consent.

Stay informed

Keep up to date with your obligations by checking these useful resources.

Get help

Contact your gateway service provider first if you have questions about your obligations.

Contact us

You can email us at the following addresses.