Privacy Code of Practice (General) 2003
Current version for 24 September 2018 to date (accessed 5 July 2020 at 05:34)
Part 7 Clause 19
19   Collection, use and disclosure for document validation services
(1)  Despite the information protection principles, the Registry of Births, Deaths and Marriages may collect, use or disclose personal information for the verification (by way of a validation service) of personal information contained in a proof of identity document issued by the Registrar of Births, Deaths and Marriages if:
(a)  the document has been presented to a government or non-government agency or organisation authorised to use the validation service, and
(b)  the collection, use or disclosure is in accordance with any applicable operating protocols of the validation service.
(2)  In this clause:
validation service means:
(a)  the CertValid certificate validation service operated by the Registry of Births, Deaths and Marriages, or
(b)  the National Document Verification Service managed by the Commonwealth Attorney-General’s Department.