Identity Document Verification Notice

To help ensure the integrity and security of the services and products we provide and to protect against identity theft, fraud, and misuse, we may ask you for your personal information to verify your identity.


This may include collecting your identity documents to verify your identity using a government operated identity document verification service. This document explains how OnePass mobile will collect, use, disclose and store your personal information.


If you have any specific needs or require this Notice in an alternative format, or if you need assistance due to any special circumstances, please contact us - see section 5 below for our contact details.


1. How we use the identity document verification service


We will use the government operated identity document verification service to confirm the authenticity of your identity documents (e.g. passport, driverʼs license, Medicare card). This is done by matching the identity information you provide to us against official government records held by the document issuer or official record holder via a government run data hub ("identity document verification service").


When your identity document information is submitted to the identity document verification service, we will receive a result that either confirms that your identity information matches official records, or it does not match. Your identity is only verified if the result is a match. We use the services of a third-party identity verification service provider, who passes your identity document information to the identity document verification service. Some of our service providers may operate outside Australia, so your identity document information may be sent overseas. They will collect, use, disclose and store your personal information in accordance with their privacy policies and legal requirements.


We do not store copies of your identity documents after verifying your identity. However, we may store some personal information for business needs (e.g. for auditing) and to comply with legal requirements (e.g. Telecommunications (Interception and Access) Act 1979). The identity document verification service itself does not store any of your personal information. For information on how the government operator of the identity document verification service will handle your personal information, see the Attorney-Generalʼs Departmentʼs 'Privacy Statement Identity Verification Servicesʼ at: idmatch.gov.au.


2. Our legal obligations


OnePass mobile is bound by the Privacy Act 1988 (the "Privacy Act") and the Identity Verification Services Act 2023 (the "IVS Act") and will handle your personal information in accordance with these laws and our Privacy Policy, available here.


We are required to obtain your consent before we verify your identity document using the identity document verification service.


We are also required to collect and verify identity information to comply with the requirements of Australian laws and regulations, which include for example, requirements to:

  • conduct identity checks for purchase of prepaid mobile service; and
  • implement multi-factor authentication (MFA) for high-risk transactions, such as SIM swaps, service activations, and changes of ownership.

Any third-party identity verification service provider we use will handle your personal information in accordance with their obligations under the Privacy Act and IVS Act.


3. How and why are we collecting your personal information


We collect your personal information through a number of ways, including through our website, in person interactions, email, online, through the OnePass mobile app, and written forms and through phone calls.


We collect your personal information to:

  • verify your identity; and
  • to provide you with our products, services and offerings that you have requested.

We may also use your personal information for the following secondary purposes:

  • detecting and protecting against fraudulent or criminal activity or misuse; and
  • for risk management.

4. Your rights in relation to your personal information


You can agree or refuse to consent to our collection and/or use of your personal information. You can also request access or corrections to your personal information and lodge complaints with us if you have any concerns with how we handle your personal information (see section 5 for how to make a complaint).


If you do not give your consent to us using the identity document verification service, we may not be able to verify your identity and, therefore, we may not be able to sell you our products and/or services. For example, we may be unable to provide you with a mobile phone or internet plan.


5. How to make a complaint


If you wish to make a complaint about the collection, use or disclosure of your personal information, you can contact us via:


You can also find out more about making a complaint by going to onepassmobile.com.au and clicking in the complaints link at the bottom of the page.


Further Information


For more information about the operation and management of the identity document verification service, visit the Government IDMatch website at idmatch.gov.au.


More information about how we handle your personal information is set out in our Privacy Policy, available here which outlines how you can access and seek correction of the personal information that we hold about you.