Last Updated: 21 September 2026 | Version: 2.4
AuthNTick Identity Services ("we," "us," "our") is committed to protecting the privacy and rights of individuals in relation to their personal information. This Privacy Policy and Collection Notice explains how we collect, use, hold, and disclose your personal information in accordance with: - The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) - The Information Privacy Act 2000 (Vic) and Information Privacy Principles (IPPs) - The Identity Verification Services Act 2023 (Cth) (IVS Act)
Where express consent is required for a particular service, including electronic identity verification, AuthNTick obtains that consent separately before the relevant verification is performed.
1. What is Personal Information? "Personal information" means any information that identifies you or from which you are reasonably identifiable. This includes, but is not limited to: - Name, aliases, and contact details (address, email, phone) - Date of birth and age - Identification documents (driver's licence, passport, Medicare card) - Sensitive information such as criminal history or Nationally Coordinated Criminal History Check results
2. Personal Information We Collect We collect personal information for the purpose of providing identity verification, Nationally Coordinated Criminal History Checks, and related services. This includes: - Identification and contact details - Consent to undertake a Nationally Coordinated Criminal History Check or identity verification check - Nationally Coordinated Criminal History Check results provided by the Australian Criminal Intelligence Commission (ACIC) - Identity document verification through a third-party verification system - Information provided by you or your authorised organisation
We collect personal information through: - Our website, email, online or written forms - Phone calls or other correspondence - Conversations with our representatives - Third parties, including ACIC, government agencies, or other authorised entities
3. Purpose of Collection Your personal information is collected to: - Verify your identity with document issuers or official record holders - Conduct and process your Nationally Coordinated Criminal History Check or background verification - Respond to inquiries or complaints - Meet legislative or regulatory requirements - Provide our products and services, including AGSVA sponsorship and background checks
4. Storage and Security Candidate Personal Information is held in secure electronic systems and, where necessary, in protected physical storage. We implement safeguards including encryption, role-restricted access, audit logging, secure transmission protocols, and controlled retention and destruction processes. Our data-handling practices - including how we store, protect, retain, and dispose of personal information - are governed by this Privacy Policy and Collection Notice and are designed to ensure the confidentiality, integrity, and security of all Candidate Personal Information.
Additional measures include: - Electronic information is stored in secure databases located in Australia - Paper records are stored securely with restricted access - Access limited to authorised personnel - Staff and volunteers trained in information security - Compliance with internal security policies - Regular audits and reviews
Retention differs by check type. See section 5A for how identity-verification information is handled, and section 5B for the separate retention and deletion process for Nationally Coordinated Criminal History Checks and Volunteer Police Checks.
5. Disclosure of Personal Information We may disclose personal information to: - Our employees and related bodies for Nationally Coordinated Criminal History Check and identity verification purposes - Organisations authorised by you to request a Nationally Coordinated Criminal History Check or identity verification check - Third-party service providers assisting with our services - Law enforcement or regulatory authorities, if required by law - Document issuers or official record holders through third-party systems for identity verification - Other organisations with your express consent
We do not disclose personal information to entities outside Australia without explicit consent.
5A. Identity verification
Why we collect identity information
We use identification information collected for electronic identity verification for the purpose of confirming your identity and completing the identity verification process associated with the service or check you are completing.
How electronic identity verification works
Where electronic identity verification is used, we may collect identification information from you. The information you provide may be checked against information held by the relevant document issuer or official record holder through third-party identity verification systems and services used to securely transmit and process the information required for the identity check.
The relevant legislation includes the Privacy Act 1988 (Cth) and the Identity Verification Services Act 2023 (Cth).
Information used for verification
Depending on the identity document you use, we may collect and submit information such as your name, date of birth, document number, card number, issuing authority and other document-specific information required to verify the document. We receive a verification outcome and may also receive a transaction or verification reference and error information.
Express consent
Before an electronic identity verification request is made, you will be asked to provide express consent. AuthNTick does not treat your use of our website or services, or your acceptance of this Privacy Policy, as a substitute for the express consent required to perform an electronic identity verification.
How identity information is handled
For new verification requests, we process personal and document information for the match without saving the submitted fields or uploaded identity-verification files. This includes licence, passport and card numbers and other document-specific matching fields.
We retain limited transaction, consent, security and audit records where required for compliance, security, record-keeping and accountability purposes. Verification audit information includes document category, verification outcome, timestamps and the associated check reference, rather than the submitted identity-document numbers.
Consent evidence is retained separately, including acceptance, consent timestamps, consent statement versions and candidate/check references. These audit records are separate from the identity-document matching information. Contact our Privacy Officer about retention, access, correction or a deletion request, including information submitted before this change.
If you do not consent
You do not have to consent to electronic identity verification. If you do not provide the required consent, AuthNTick cannot complete identity verification using that electronic method and will not submit your identity details for electronic verification. Declining consent is not a failed identity match.
Alternative verification methods
If you cannot or do not wish to use electronic identity verification, contact the organisation requesting your check or AuthNTick Support. An alternative identity verification method is available where required.
Do not send identity documents by email.
If electronic verification is unavailable
If electronic identity verification is temporarily unavailable, your verification may be delayed. Contact AuthNTick Support or the organisation requesting your check if you need assistance. We will advise you of the available next steps, including an alternative identity verification method where required.
Your privacy rights
You may request access to or correction of personal information we hold about you and may make a privacy complaint. See section 6: Your Rights and section 7: Complaints and Privacy Concerns for more information. You may also withdraw consent where applicable. Contact our Privacy Officer to request withdrawal of consent.
Withdrawal of consent does not necessarily require deletion of records that AuthNTick is legally permitted or required to retain. See section 6 for further information.
Questions and complaints
Contact our Privacy Officer if you have questions about how your identity information is handled or wish to make a privacy complaint. See section 7 for our contact details and complaint process.
5B. Nationally Coordinated Criminal History Checks and Volunteer Police Checks
Information collected for Nationally Coordinated Criminal History Checks and Volunteer Police Checks is subject to a separate retention and deletion process. Applicable application information and stored documents are retained for 12 months from check creation and then deleted in accordance with AuthNTick's NPC/VPC retention process.
This retention period does not apply to standalone electronic identity verification.
5C. Additional DISP Requirements
To meet DISP requirements under the AS 4811:2022 workforce screening principles, all prospective or current DISP Personnel must undergo additional checks, including: - Retrospective media check - Criminal History Check - Employment History Confirmation - Education and Qualification check
6. Your Rights You have the right to: - Access the personal information we hold about you - Request correction of inaccurate or incomplete information - Withdraw consent for collection or use, noting that this may prevent completion of checks
To request access to or correction of your personal information, contact our Privacy Officer using the details in section 7.
Note: Nationally Coordinated Criminal History Check results issued by ACIC cannot be corrected by us; requests must follow ACIC's Results Dispute process.
7. Complaints and Privacy Concerns If you believe your privacy has been breached, please contact our Privacy Officer: Email: privacy@authntick.com.au Tel: 1300 288 468 Mail: Privacy Officer, AuthNTick Identity Services, PO Box 5034, Kingsdene NSW 2118, Australia
If you are not satisfied with our response, you may contact: - Office of the Australian Information Commissioner (OAIC), GPO Box 2999, Canberra ACT 2601, Tel: 1300 363 992 | Email: enquiries@oaic.gov.au
8. Updates We may update this Privacy Policy and Collection Notice to reflect legislative changes, operational practices, or improvements in privacy protection. The current version is available here
9. Further Information For APP entities: More information is in our Privacy Policy. For non-APP entities: For enquiries about access, correction, or complaints, contact us using the details above.
AuthNTick Identity Services Website: authntick.com.au
About the author
Dev Tripathi
Editorial contributor and cybersecurity adviser
Dev Tripathi is a senior cybersecurity, risk and compliance professional with more than 20 years of experience. At AuthNTick, he contributes to and reviews guidance on Nationally Coordinated Criminal History Checks, identity verification, privacy, information security and workforce compliance.
Editorial references
Official and authoritative sources
Use these primary and authoritative references to confirm current requirements for the topic covered in this guide.
- Identity verification services IDMatch, Australian Government
- What is personal information? Office of the Australian Information Commissioner
- Use and disclosure of personal information Office of the Australian Information Commissioner
This guide is general information, not legal advice. Government processes and employer requirements can change, so check the linked source and the requesting organisation’s instructions before acting. Read our editorial and corrections policy.
Next step
Ready to move from research to action?
Use AuthNTick to complete secure Australian background checks, or speak with our team if you need the right workflow for your organisation.
