Customs (Information Technology Requirements) Determination 2021

Part 1—Preliminary

1 Name

This instrument is the Customs (Information Technology Requirements) Determination 2021.

3 Authority

This instrument is made under section 126DA of the Customs Act 1901.

4 Definitions

Note: A number of expressions used in this instrument are defined in subsection 4(1) of the Customs Act 1901, including the following:

(a) customs broker

(b) duty;

(c) goods;

(d) importer;

(e) nominee;

(f) self-assessed clearance declaration;

(g) specified low value goods.

In this instrument:

ABN has the same meaning as in the A New Tax System (Australian Business Number) Act 1999.

Act means the Customs Act 1901.

API means Application Programming Interface, which acts as an intermediary that enables software applications to communicate with a server to access data and functions.

ATT Portal means the Australian Trusted Trader Portal, which is the website operated by the Department to receive nominations by entities to join the Australian Trusted Trader Programme.

Australia Travel Declaration has the meaning given by section 4 of the Customs Regulation.

Claim for the Return of Seized Goods web form means the website operated by the Department to process electronic applications for the return of seized goods.

Collector has the meaning given by section 8 of the Act.

Customs Regulation means the Customs Regulation 2015.

Department means the Department of Home Affairs.

EDI means Electronic Data Interchange.

Endpoint means a digital location where an Application Programming Interface (API) receives API calls, also known as API requests, for resources on its server.

Home Affairs Access Manager means the website that is used to manage access and permissions for external organisations to Departmental systems at https://am.homeaffairs.gov.au.

HTTPS means Hypertext Transfer Protocol Secure.

ICS means Integrated Cargo System.

MQ means the secure message delivery platform known as IBM MQ.

S/MIME means Secure/Multipurpose Internet Mail Extensions.

SMTP means Simple Mail Transfer Protocol.

Subdivision AA goods has the meaning given by section 71AAAA of the Act.

UN/EDIFACT means the international standard, known as Electronic Data Interchange for Administration, Commerce and Transport, administered by the United Nations.

Part 2—Information technology requirements for specified communications

6 Communicating import declaration for goods imported through the post

(1) Subsection (2) applies if:

(a) a person has personal property in goods:

(i) to which section 68 of the Act applies; and

(ii) that are intended to be entered for home consumption; and

(iii) that are imported into Australia through the post; and

(b) the person wishes to communicate with the Department electronically; and

(c) the communication is an import declaration under 71A of the Act for the goods, in an approved statement in accordance with section 71L of the Act.

(2) The communication may be by a SMTP email addressed to a nominated Department email address dedicated to the receipt of such messages.

7 Communicating application to move, alter or interfere with certain goods

(1) Subsection (2) applies if:

(a) a person wishes to communicate with the Department electronically; and

(b) the communication is an application under section 119AA or 119AB of the Act, in an approved statement, for permission to move, alter or interfere with goods in a particular way.

(2) The communication must be by a SMTP email addressed to a nominated Department email address dedicated to the receipt of such messages.

8 Communicating nomination to participate in Australian Trusted Trader Programme

(1) Subsection (2) applies if a person wishes to electronically make a nomination to participate in the Australian Trusted Trader Programme under section 176B of the Act.

(2) The nomination must be made using the website, known as the ATT Portal, administered by the Department.

8A Submitting an Australia Travel Declaration

(1) Subsection (2) applies if:

(a) a person wishes to submit to the Department an Australia Travel Declaration in respect of the importation of the person’s Subdivision AA goods that includes the information specified in subsection 27(2) of the Customs Regulation about the goods; and

(b) the person causes the completed Australia Travel Declaration to be submitted to the Department, including for the purposes of sections 71 and 71AAAB of the Act.

Note 1: Subsection 27(2) of the Customs Regulation sets out the specified information that is sought for the purposes of sections 71 and 71AAAB of the Customs Act.

Note 2: Section 71 of the Act empowers a Collector to decide whether to grant or refuse giving an authority to deal with goods.

Note 3: Section 71AAAB of the Act empowers a Collector to, upon considering information that the Collector must have regard to, decide whether to authorise or refuse to authorise the delivery of Subdivision AA goods into home consumption.

(2) The submission of an Australia Travel Declaration must be:

(a) a message using HTTPS that is capable of being received by the departmental system that processes the Australia Travel Declaration; or

(b) made using the web form known as the Australia Travel Declaration administered by the Department for that purpose.

(3) The person causing an Australia Travel Declaration to be submitted to the Department under subsection (2) must sign the Australia Travel Declaration by inserting the person’s full name as text.

8B Claim for return of goods seized under section 205B of the Customs Act

(1) Subsection (2) applies if a person wishes to electronically make a claim for the return of goods seized under section 205B(2A) of the Act. (2) The claim must be made using the web form, known as the Claim for the Return of Seized Goods web form, administered by the Department.

9 Signature

(1) This section applies if:

(a) a person, including a person acting on behalf of an organisation, communicates electronically with the Department using an SMTP email; and

(b) the person is required to provide the person’s signature; and

(c) the communication contains:

(i) an import declaration made under section 71A of the Act; or

(ii) an application for permission to move, alter or interfere with goods for export made under section 119AA of the Act; or

(iii) an application for permission to move, alter or interfere with goods that are no longer for export made under section 119AB of the Act.

(2) The person must place the person’s full name in the SMTP email.

(3) If the communication is made on behalf of an organisation that has an ABN, the SMTP email must include the name and ABN of the organisation.

Part 2A–Information Technology Requirements for the Self-Assessed Clearance Declaration Pilot

9A Simplified Outline–Self-Assessed Clearance Declaration Pilot

The Self-Assessed Clearance Declaration Pilot is a time-limited trial of novel information technology systems.

Pilot participants will lodge self-assessed clearance declarations through the Trade Portal. Pilot participants must register with the Home Affairs Access Manager and also be registered in the ICS. In order to use the Trade Portal and Home Affairs Access Manager, individuals communicating with the Department on behalf of pilot participants must authenticate their identity using myID and be linked to an ABN in RAM, in accordance with the Trusted Digital Identity Framework.

9B Interpretation

In this Part, unless the contrary intention appears:

ABF Trade Portal means the interactive portal for online services available through the Department’s website at https://trade.abf.gov.au.

pilot participant is an importer, customs broker, nominee or other person or entity who has joined the Self-Assessed Clearance Declaration Pilot.

RAM means the Australian Taxation Office Relationship Authorisation Manager.

Self-Assessed Clearance Declaration Pilot means the pilot of electronic lodgement of self-assessed clearance declarations described in section 9A.

9C Communicating a short-form self-assessed clearance declaration for the purposes of the Self-Assessed Clearance Declaration Pilot

The information technology requirements in this Part apply if a pilot participant who is the owner of specified low value goods, or is acting on behalf of the owner of specified low value goods, wishes to communicate with the Department to lodge a short-form self-assessed clearance declaration for the purposes of section 71AAAF of the Act.

9D Requirements for electronic communications for the purposes of the Self-Assessed Clearance Declaration Pilot

A pilot participant communicating electronically with the Department for the purposes of the Self-Assessed Clearance Declaration Pilot must:

(a) communicate via the ABF Trade Portal; and

(b) be registered in Home Affairs Access Manager and ICS.

9E Authentication to ABF Trade Portal

A pilot participant using the ABF Trade Portal for the purposes of the Self-Assessed Clearance Declaration Pilot must:

(a) establish their Digital Identity inmyID; and

(b) link their myID with the ABN of the pilot participant in RAM in accordance with the Trusted Digital Identity Framework.

Note: The Trusted Digital Identity Framework is available on the Digital ID website https://www.digitalidentity.gov.au/.

Part 3—Information technology requirements for general communications

10 Communications generally

(1) The information technology requirements in this Part apply to a person who:

(a) is required or permitted to make a communication with the Department under:

(i) Division 3 or 4 of Part IV of the Act; or

(ii) Division 2 of Part VI of the Act; or

(iii) Section 163 of the Act; or

(iv) Part IX of the Act; and

(b) wishes to communicate with the Department electronically.

(2) However, the information technology requirements in this Part do not apply to a person who wishes to communicate electronically with the Department in the circumstances mentioned in Part 2.

11 General requirements for electronic communications

(1) A person who communicates electronically with the Department must communicate by:

(a) an EDI message attached to an S/MIME SMTP email to an email address specified by the Department; or

(b) an EDI message delivered by MQ over an MQ channel preconfigured by agreement with the Department; or

(c) the Cargo Interactive Facility using HTTPS to a Departmental website using a version of an internet browser that is supported by the Department for such transactions; or

(d) an API to a nominated Departmental Endpoint.

(2) For the purposes of subparagraphs 11(1)(a)-(c), a person who communicates electronically with the department must:

(a) be registered in:

(i) the Common Connect Facility; and

(ii) the ICS; and

(b) communicate with the Department using Public Key Infrastructure (PKI) in accordance with the Commonwealth’s Gatekeeper® strategy administered by the Digital Transformation Agency; and

(c) configure the person’s email software with the appropriate digital certificate to be able to decrypt encrypted emails sent to the person by the Department.

Note: The Commonwealth Gatekeeper® strategy could in 2025 be viewed on the Australian Government Digital Transformation Agency’s website (https://www.dta.gov.au).

(3) For the purposes of subparagraph 11(1)(d), a person who communicates electronically with the Department by an API to a Departmental endpoint must:

(a) be registered in Home Affairs Access Manager; and

(b) use an authenticated and authorised digital machine certificate linked to the organisation’s ABN.

12 Standards and specifications for EDI messages

A person who communicates electronically with the Department by an EDI message attached to an S/MIME SMTP email or delivered by MQ must comply with the UN/EDIFACT D99B standards, in accordance with the ICS Message Implementation Guidelines of the ICS Software Developers Guide, as in force at the commencement of this Determination and published on the Department’s website.

Note: The ICS Message Implementations Guidelines of the ICS Software Developers Guide could in 2021 be viewed on the Department’s website (www.homeaffairs.gov.au)

12A Standards and Specifications for APIs

A person who communicates electronically with the Department by an API must comply with the API specifications outlined in the API Developer Portal Guidelines.

Note: The Department’s API Developer Portal Guidelines could in 2025 be viewed on the Australian Government Department of Home Affairs website (https://homeaffairs.gov.au).

13 Information technology requirements for signature

(1) The information technology requirements in this section and section 15 apply to a person who is required to sign an electronic communication with the Department under:

(a) Division 3 or 4 of Part IV of the Act; or

(b) Division 2 of Part VI of the Act; or

(c) Section 163 of the Act; or

(d) Part IX of the Act.

(2) A communication by an EDI message attached to an S/MIME SMTP email or delivered by MQ must be digitally signed and encrypted using PKI in accordance with the Commonwealth’s Gatekeeper® strategy.

(3) A communication by an API must be digitally authenticated with a machine credential that is registered in Home Affairs Access Manager in accordance with the Commonwealth’s Gatekeeper® Strategy.

14 Authentication to the Cargo Interactive Facility

(1) A person using the Cargo Interactive Facility must authenticate the communication using a digital certificate issued in accordance with the Commonwealth’s Gatekeeper® strategy.

(2) A communication using the Cargo Interactive Facility must be digitally authenticated and encrypted using PKI in accordance with the Commonwealth’s Gatekeeper® strategy.

14A Authentication to Home Affairs Access Manager

A person using Home Affairs Access Manager for the purposes of communicating with the Department via an API must:

(a) establish their Digital Identity in myID; and

(b) link their myID with the ABN of the organisation in accordance with the Trusted Digital Identity Framework.

Note: The Trusted Digital Identity Framework could in 2025 be viewed on the Digital ID website (https://www.digitalidentity.gov.au/).

15 Digital signature and certificate

(1) The person must use the digital signature and associated digital certificate appropriate to the nature of the communication.

(2) Any digital certificate for the communication must be issued:

(a) by a Gatekeeper® accredited Certification Authority; and

(b) in accordance with a Gatekeeper® Certificate Policy and Certificate Practice Statement.

(3) The Gatekeeper® accredited Certification Authority referred to in subsection (2) must be an Authority that has been approved by the Department for that purpose.

Part 4—Electronic production of documents

16 Information technology requirements for producing documents

(1) This section applies if:

(a) a person is required to produce a document to the Department; and

(b) the person wishes to produce the document electronically.

(2) The document must be produced by sending an SMTP email addressed to a nominated Department email address attaching the document as a MIME attachment.

(3) The attached document must be in a version of one of the following standard document formats supported by the Department:

(a) Microsoft Word;

(b) Microsoft Excel;

(c) HTML;

(d) PDF;

(e) plain text;

(f) JPEG.

1 Name

This instrument is the Customs (Information Technology Requirements) Determination 2021.

3 Authority

This instrument is made under section 126DA of the Customs Act 1901.

4 Definitions

Note: A number of expressions used in this instrument are defined in subsection 4(1) of the Customs Act 1901, including the following:

(a) customs broker

(b) duty;

(c) goods;

(d) importer;

(e) nominee;

(f) self-assessed clearance declaration;

(g) specified low value goods.

In this instrument:

ABN has the same meaning as in the A New Tax System (Australian Business Number) Act 1999.

Act means the Customs Act 1901.

API means Application Programming Interface, which acts as an intermediary that enables software applications to communicate with a server to access data and functions.

ATT Portal means the Australian Trusted Trader Portal, which is the website operated by the Department to receive nominations by entities to join the Australian Trusted Trader Programme.

Australia Travel Declaration has the meaning given by section 4 of the Customs Regulation.

Claim for the Return of Seized Goods web form means the website operated by the Department to process electronic applications for the return of seized goods.

Collector has the meaning given by section 8 of the Act.

Customs Regulation means the Customs Regulation 2015.

Department means the Department of Home Affairs.

EDI means Electronic Data Interchange.

Endpoint means a digital location where an Application Programming Interface (API) receives API calls, also known as API requests, for resources on its server.

Home Affairs Access Manager means the website that is used to manage access and permissions for external organisations to Departmental systems at https://am.homeaffairs.gov.au.

HTTPS means Hypertext Transfer Protocol Secure.

ICS means Integrated Cargo System.

MQ means the secure message delivery platform known as IBM MQ.

S/MIME means Secure/Multipurpose Internet Mail Extensions.

SMTP means Simple Mail Transfer Protocol.

Subdivision AA goods has the meaning given by section 71AAAA of the Act.

UN/EDIFACT means the international standard, known as Electronic Data Interchange for Administration, Commerce and Transport, administered by the United Nations.

Part 1—Preliminary

1 Name

This instrument is the Customs (Information Technology Requirements) Determination 2021.

3 Authority

This instrument is made under section 126DA of the Customs Act 1901.

4 Definitions

Note: A number of expressions used in this instrument are defined in subsection 4(1) of the Customs Act 1901, including the following:

(a) customs broker

(b) duty;

(c) goods;

(d) importer;

(e) nominee;

(f) self-assessed clearance declaration;

(g) specified low value goods.

In this instrument:

ABN has the same meaning as in the A New Tax System (Australian Business Number) Act 1999.

Act means the Customs Act 1901.

API means Application Programming Interface, which acts as an intermediary that enables software applications to communicate with a server to access data and functions.

ATT Portal means the Australian Trusted Trader Portal, which is the website operated by the Department to receive nominations by entities to join the Australian Trusted Trader Programme.

Australia Travel Declaration has the meaning given by section 4 of the Customs Regulation.

Claim for the Return of Seized Goods web form means the website operated by the Department to process electronic applications for the return of seized goods.

Collector has the meaning given by section 8 of the Act.

Customs Regulation means the Customs Regulation 2015.

Department means the Department of Home Affairs.

EDI means Electronic Data Interchange.

Endpoint means a digital location where an Application Programming Interface (API) receives API calls, also known as API requests, for resources on its server.

Home Affairs Access Manager means the website that is used to manage access and permissions for external organisations to Departmental systems at https://am.homeaffairs.gov.au.

HTTPS means Hypertext Transfer Protocol Secure.

ICS means Integrated Cargo System.

MQ means the secure message delivery platform known as IBM MQ.

S/MIME means Secure/Multipurpose Internet Mail Extensions.

SMTP means Simple Mail Transfer Protocol.

Subdivision AA goods has the meaning given by section 71AAAA of the Act.

UN/EDIFACT means the international standard, known as Electronic Data Interchange for Administration, Commerce and Transport, administered by the United Nations.

Part 2—Information technology requirements for specified communications

6 Communicating import declaration for goods imported through the post

(1) Subsection (2) applies if:

(a) a person has personal property in goods:

(i) to which section 68 of the Act applies; and

(ii) that are intended to be entered for home consumption; and

(iii) that are imported into Australia through the post; and

(b) the person wishes to communicate with the Department electronically; and

(c) the communication is an import declaration under 71A of the Act for the goods, in an approved statement in accordance with section 71L of the Act.

(2) The communication may be by a SMTP email addressed to a nominated Department email address dedicated to the receipt of such messages.

7 Communicating application to move, alter or interfere with certain goods

(1) Subsection (2) applies if:

(a) a person wishes to communicate with the Department electronically; and

(b) the communication is an application under section 119AA or 119AB of the Act, in an approved statement, for permission to move, alter or interfere with goods in a particular way.

(2) The communication must be by a SMTP email addressed to a nominated Department email address dedicated to the receipt of such messages.

8 Communicating nomination to participate in Australian Trusted Trader Programme

(1) Subsection (2) applies if a person wishes to electronically make a nomination to participate in the Australian Trusted Trader Programme under section 176B of the Act.

(2) The nomination must be made using the website, known as the ATT Portal, administered by the Department.

8A Submitting an Australia Travel Declaration

(1) Subsection (2) applies if:

(a) a person wishes to submit to the Department an Australia Travel Declaration in respect of the importation of the person’s Subdivision AA goods that includes the information specified in subsection 27(2) of the Customs Regulation about the goods; and

(b) the person causes the completed Australia Travel Declaration to be submitted to the Department, including for the purposes of sections 71 and 71AAAB of the Act.

Note 1: Subsection 27(2) of the Customs Regulation sets out the specified information that is sought for the purposes of sections 71 and 71AAAB of the Customs Act.

Note 2: Section 71 of the Act empowers a Collector to decide whether to grant or refuse giving an authority to deal with goods.

Note 3: Section 71AAAB of the Act empowers a Collector to, upon considering information that the Collector must have regard to, decide whether to authorise or refuse to authorise the delivery of Subdivision AA goods into home consumption.

(2) The submission of an Australia Travel Declaration must be:

(a) a message using HTTPS that is capable of being received by the departmental system that processes the Australia Travel Declaration; or

(b) made using the web form known as the Australia Travel Declaration administered by the Department for that purpose.

(3) The person causing an Australia Travel Declaration to be submitted to the Department under subsection (2) must sign the Australia Travel Declaration by inserting the person’s full name as text.

8B Claim for return of goods seized under section 205B of the Customs Act

(1) Subsection (2) applies if a person wishes to electronically make a claim for the return of goods seized under section 205B(2A) of the Act. (2) The claim must be made using the web form, known as the Claim for the Return of Seized Goods web form, administered by the Department.

9 Signature

(1) This section applies if:

(a) a person, including a person acting on behalf of an organisation, communicates electronically with the Department using an SMTP email; and

(b) the person is required to provide the person’s signature; and

(c) the communication contains:

(i) an import declaration made under section 71A of the Act; or

(ii) an application for permission to move, alter or interfere with goods for export made under section 119AA of the Act; or

(iii) an application for permission to move, alter or interfere with goods that are no longer for export made under section 119AB of the Act.

(2) The person must place the person’s full name in the SMTP email.

(3) If the communication is made on behalf of an organisation that has an ABN, the SMTP email must include the name and ABN of the organisation.

Part 2A–Information Technology Requirements for the Self-Assessed Clearance Declaration Pilot

9A Simplified Outline–Self-Assessed Clearance Declaration Pilot

The Self-Assessed Clearance Declaration Pilot is a time-limited trial of novel information technology systems.

Pilot participants will lodge self-assessed clearance declarations through the Trade Portal. Pilot participants must register with the Home Affairs Access Manager and also be registered in the ICS. In order to use the Trade Portal and Home Affairs Access Manager, individuals communicating with the Department on behalf of pilot participants must authenticate their identity using myID and be linked to an ABN in RAM, in accordance with the Trusted Digital Identity Framework.

9B Interpretation

In this Part, unless the contrary intention appears:

ABF Trade Portal means the interactive portal for online services available through the Department’s website at https://trade.abf.gov.au.

pilot participant is an importer, customs broker, nominee or other person or entity who has joined the Self-Assessed Clearance Declaration Pilot.

RAM means the Australian Taxation Office Relationship Authorisation Manager.

Self-Assessed Clearance Declaration Pilot means the pilot of electronic lodgement of self-assessed clearance declarations described in section 9A.

9C Communicating a short-form self-assessed clearance declaration for the purposes of the Self-Assessed Clearance Declaration Pilot

The information technology requirements in this Part apply if a pilot participant who is the owner of specified low value goods, or is acting on behalf of the owner of specified low value goods, wishes to communicate with the Department to lodge a short-form self-assessed clearance declaration for the purposes of section 71AAAF of the Act.

9D Requirements for electronic communications for the purposes of the Self-Assessed Clearance Declaration Pilot

A pilot participant communicating electronically with the Department for the purposes of the Self-Assessed Clearance Declaration Pilot must:

(a) communicate via the ABF Trade Portal; and

(b) be registered in Home Affairs Access Manager and ICS.

9E Authentication to ABF Trade Portal

A pilot participant using the ABF Trade Portal for the purposes of the Self-Assessed Clearance Declaration Pilot must:

(a) establish their Digital Identity inmyID; and

(b) link their myID with the ABN of the pilot participant in RAM in accordance with the Trusted Digital Identity Framework.

Note: The Trusted Digital Identity Framework is available on the Digital ID website https://www.digitalidentity.gov.au/.

Part 3—Information technology requirements for general communications

10 Communications generally

(1) The information technology requirements in this Part apply to a person who:

(a) is required or permitted to make a communication with the Department under:

(i) Division 3 or 4 of Part IV of the Act; or

(ii) Division 2 of Part VI of the Act; or

(iii) Section 163 of the Act; or

(iv) Part IX of the Act; and

(b) wishes to communicate with the Department electronically.

(2) However, the information technology requirements in this Part do not apply to a person who wishes to communicate electronically with the Department in the circumstances mentioned in Part 2.

11 General requirements for electronic communications

(1) A person who communicates electronically with the Department must communicate by:

(a) an EDI message attached to an S/MIME SMTP email to an email address specified by the Department; or

(b) an EDI message delivered by MQ over an MQ channel preconfigured by agreement with the Department; or

(c) the Cargo Interactive Facility using HTTPS to a Departmental website using a version of an internet browser that is supported by the Department for such transactions; or

(d) an API to a nominated Departmental Endpoint.

(2) For the purposes of subparagraphs 11(1)(a)-(c), a person who communicates electronically with the department must:

(a) be registered in:

(i) the Common Connect Facility; and

(ii) the ICS; and

(b) communicate with the Department using Public Key Infrastructure (PKI) in accordance with the Commonwealth’s Gatekeeper® strategy administered by the Digital Transformation Agency; and

(c) configure the person’s email software with the appropriate digital certificate to be able to decrypt encrypted emails sent to the person by the Department.

Note: The Commonwealth Gatekeeper® strategy could in 2025 be viewed on the Australian Government Digital Transformation Agency’s website (https://www.dta.gov.au).

(3) For the purposes of subparagraph 11(1)(d), a person who communicates electronically with the Department by an API to a Departmental endpoint must:

(a) be registered in Home Affairs Access Manager; and

(b) use an authenticated and authorised digital machine certificate linked to the organisation’s ABN.

12 Standards and specifications for EDI messages

A person who communicates electronically with the Department by an EDI message attached to an S/MIME SMTP email or delivered by MQ must comply with the UN/EDIFACT D99B standards, in accordance with the ICS Message Implementation Guidelines of the ICS Software Developers Guide, as in force at the commencement of this Determination and published on the Department’s website.

Note: The ICS Message Implementations Guidelines of the ICS Software Developers Guide could in 2021 be viewed on the Department’s website (www.homeaffairs.gov.au)

12A Standards and Specifications for APIs

A person who communicates electronically with the Department by an API must comply with the API specifications outlined in the API Developer Portal Guidelines.

Note: The Department’s API Developer Portal Guidelines could in 2025 be viewed on the Australian Government Department of Home Affairs website (https://homeaffairs.gov.au).

13 Information technology requirements for signature

(1) The information technology requirements in this section and section 15 apply to a person who is required to sign an electronic communication with the Department under:

(a) Division 3 or 4 of Part IV of the Act; or

(b) Division 2 of Part VI of the Act; or

(c) Section 163 of the Act; or

(d) Part IX of the Act.

(2) A communication by an EDI message attached to an S/MIME SMTP email or delivered by MQ must be digitally signed and encrypted using PKI in accordance with the Commonwealth’s Gatekeeper® strategy.

(3) A communication by an API must be digitally authenticated with a machine credential that is registered in Home Affairs Access Manager in accordance with the Commonwealth’s Gatekeeper® Strategy.

14 Authentication to the Cargo Interactive Facility

(1) A person using the Cargo Interactive Facility must authenticate the communication using a digital certificate issued in accordance with the Commonwealth’s Gatekeeper® strategy.

(2) A communication using the Cargo Interactive Facility must be digitally authenticated and encrypted using PKI in accordance with the Commonwealth’s Gatekeeper® strategy.

14A Authentication to Home Affairs Access Manager

A person using Home Affairs Access Manager for the purposes of communicating with the Department via an API must:

(a) establish their Digital Identity in myID; and

(b) link their myID with the ABN of the organisation in accordance with the Trusted Digital Identity Framework.

Note: The Trusted Digital Identity Framework could in 2025 be viewed on the Digital ID website (https://www.digitalidentity.gov.au/).

15 Digital signature and certificate

(1) The person must use the digital signature and associated digital certificate appropriate to the nature of the communication.

(2) Any digital certificate for the communication must be issued:

(a) by a Gatekeeper® accredited Certification Authority; and

(b) in accordance with a Gatekeeper® Certificate Policy and Certificate Practice Statement.

(3) The Gatekeeper® accredited Certification Authority referred to in subsection (2) must be an Authority that has been approved by the Department for that purpose.

Part 4—Electronic production of documents

16 Information technology requirements for producing documents

(1) This section applies if:

(a) a person is required to produce a document to the Department; and

(b) the person wishes to produce the document electronically.

(2) The document must be produced by sending an SMTP email addressed to a nominated Department email address attaching the document as a MIME attachment.

(3) The attached document must be in a version of one of the following standard document formats supported by the Department:

(a) Microsoft Word;

(b) Microsoft Excel;

(c) HTML;

(d) PDF;

(e) plain text;

(f) JPEG.

6 Communicating import declaration for goods imported through the post

(1) Subsection (2) applies if:

(a) a person has personal property in goods:

(i) to which section 68 of the Act applies; and

(ii) that are intended to be entered for home consumption; and

(iii) that are imported into Australia through the post; and

(b) the person wishes to communicate with the Department electronically; and

(c) the communication is an import declaration under 71A of the Act for the goods, in an approved statement in accordance with section 71L of the Act.

(2) The communication may be by a SMTP email addressed to a nominated Department email address dedicated to the receipt of such messages.

7 Communicating application to move, alter or interfere with certain goods

(1) Subsection (2) applies if:

(a) a person wishes to communicate with the Department electronically; and

(b) the communication is an application under section 119AA or 119AB of the Act, in an approved statement, for permission to move, alter or interfere with goods in a particular way.

(2) The communication must be by a SMTP email addressed to a nominated Department email address dedicated to the receipt of such messages.

8 Communicating nomination to participate in Australian Trusted Trader Programme

(1) Subsection (2) applies if a person wishes to electronically make a nomination to participate in the Australian Trusted Trader Programme under section 176B of the Act.

(2) The nomination must be made using the website, known as the ATT Portal, administered by the Department.

8A Submitting an Australia Travel Declaration

(1) Subsection (2) applies if:

(a) a person wishes to submit to the Department an Australia Travel Declaration in respect of the importation of the person’s Subdivision AA goods that includes the information specified in subsection 27(2) of the Customs Regulation about the goods; and

(b) the person causes the completed Australia Travel Declaration to be submitted to the Department, including for the purposes of sections 71 and 71AAAB of the Act.

Note 1: Subsection 27(2) of the Customs Regulation sets out the specified information that is sought for the purposes of sections 71 and 71AAAB of the Customs Act.

Note 2: Section 71 of the Act empowers a Collector to decide whether to grant or refuse giving an authority to deal with goods.

Note 3: Section 71AAAB of the Act empowers a Collector to, upon considering information that the Collector must have regard to, decide whether to authorise or refuse to authorise the delivery of Subdivision AA goods into home consumption.

(2) The submission of an Australia Travel Declaration must be:

(a) a message using HTTPS that is capable of being received by the departmental system that processes the Australia Travel Declaration; or

(b) made using the web form known as the Australia Travel Declaration administered by the Department for that purpose.

(3) The person causing an Australia Travel Declaration to be submitted to the Department under subsection (2) must sign the Australia Travel Declaration by inserting the person’s full name as text.

8B Claim for return of goods seized under section 205B of the Customs Act

(1) Subsection (2) applies if a person wishes to electronically make a claim for the return of goods seized under section 205B(2A) of the Act. (2) The claim must be made using the web form, known as the Claim for the Return of Seized Goods web form, administered by the Department.

9 Signature

(1) This section applies if:

(a) a person, including a person acting on behalf of an organisation, communicates electronically with the Department using an SMTP email; and

(b) the person is required to provide the person’s signature; and

(c) the communication contains:

(i) an import declaration made under section 71A of the Act; or

(ii) an application for permission to move, alter or interfere with goods for export made under section 119AA of the Act; or

(iii) an application for permission to move, alter or interfere with goods that are no longer for export made under section 119AB of the Act.

(2) The person must place the person’s full name in the SMTP email.

(3) If the communication is made on behalf of an organisation that has an ABN, the SMTP email must include the name and ABN of the organisation.

Part 1—Preliminary

1 Name

This instrument is the Customs (Information Technology Requirements) Determination 2021.

3 Authority

This instrument is made under section 126DA of the Customs Act 1901.

4 Definitions

Note: A number of expressions used in this instrument are defined in subsection 4(1) of the Customs Act 1901, including the following:

(a) customs broker

(b) duty;

(c) goods;

(d) importer;

(e) nominee;

(f) self-assessed clearance declaration;

(g) specified low value goods.

In this instrument:

ABN has the same meaning as in the A New Tax System (Australian Business Number) Act 1999.

Act means the Customs Act 1901.

API means Application Programming Interface, which acts as an intermediary that enables software applications to communicate with a server to access data and functions.

ATT Portal means the Australian Trusted Trader Portal, which is the website operated by the Department to receive nominations by entities to join the Australian Trusted Trader Programme.

Australia Travel Declaration has the meaning given by section 4 of the Customs Regulation.

Claim for the Return of Seized Goods web form means the website operated by the Department to process electronic applications for the return of seized goods.

Collector has the meaning given by section 8 of the Act.

Customs Regulation means the Customs Regulation 2015.

Department means the Department of Home Affairs.

EDI means Electronic Data Interchange.

Endpoint means a digital location where an Application Programming Interface (API) receives API calls, also known as API requests, for resources on its server.

Home Affairs Access Manager means the website that is used to manage access and permissions for external organisations to Departmental systems at https://am.homeaffairs.gov.au.

HTTPS means Hypertext Transfer Protocol Secure.

ICS means Integrated Cargo System.

MQ means the secure message delivery platform known as IBM MQ.

S/MIME means Secure/Multipurpose Internet Mail Extensions.

SMTP means Simple Mail Transfer Protocol.

Subdivision AA goods has the meaning given by section 71AAAA of the Act.

UN/EDIFACT means the international standard, known as Electronic Data Interchange for Administration, Commerce and Transport, administered by the United Nations.

Part 2—Information technology requirements for specified communications

6 Communicating import declaration for goods imported through the post

(1) Subsection (2) applies if:

(a) a person has personal property in goods:

(i) to which section 68 of the Act applies; and

(ii) that are intended to be entered for home consumption; and

(iii) that are imported into Australia through the post; and

(b) the person wishes to communicate with the Department electronically; and

(c) the communication is an import declaration under 71A of the Act for the goods, in an approved statement in accordance with section 71L of the Act.

(2) The communication may be by a SMTP email addressed to a nominated Department email address dedicated to the receipt of such messages.

7 Communicating application to move, alter or interfere with certain goods

(1) Subsection (2) applies if:

(a) a person wishes to communicate with the Department electronically; and

(b) the communication is an application under section 119AA or 119AB of the Act, in an approved statement, for permission to move, alter or interfere with goods in a particular way.

(2) The communication must be by a SMTP email addressed to a nominated Department email address dedicated to the receipt of such messages.

8 Communicating nomination to participate in Australian Trusted Trader Programme

(1) Subsection (2) applies if a person wishes to electronically make a nomination to participate in the Australian Trusted Trader Programme under section 176B of the Act.

(2) The nomination must be made using the website, known as the ATT Portal, administered by the Department.

8A Submitting an Australia Travel Declaration

(1) Subsection (2) applies if:

(a) a person wishes to submit to the Department an Australia Travel Declaration in respect of the importation of the person’s Subdivision AA goods that includes the information specified in subsection 27(2) of the Customs Regulation about the goods; and

(b) the person causes the completed Australia Travel Declaration to be submitted to the Department, including for the purposes of sections 71 and 71AAAB of the Act.

Note 1: Subsection 27(2) of the Customs Regulation sets out the specified information that is sought for the purposes of sections 71 and 71AAAB of the Customs Act.

Note 2: Section 71 of the Act empowers a Collector to decide whether to grant or refuse giving an authority to deal with goods.

Note 3: Section 71AAAB of the Act empowers a Collector to, upon considering information that the Collector must have regard to, decide whether to authorise or refuse to authorise the delivery of Subdivision AA goods into home consumption.

(2) The submission of an Australia Travel Declaration must be:

(a) a message using HTTPS that is capable of being received by the departmental system that processes the Australia Travel Declaration; or

(b) made using the web form known as the Australia Travel Declaration administered by the Department for that purpose.

(3) The person causing an Australia Travel Declaration to be submitted to the Department under subsection (2) must sign the Australia Travel Declaration by inserting the person’s full name as text.

8B Claim for return of goods seized under section 205B of the Customs Act

(1) Subsection (2) applies if a person wishes to electronically make a claim for the return of goods seized under section 205B(2A) of the Act. (2) The claim must be made using the web form, known as the Claim for the Return of Seized Goods web form, administered by the Department.

9 Signature

(1) This section applies if:

(a) a person, including a person acting on behalf of an organisation, communicates electronically with the Department using an SMTP email; and

(b) the person is required to provide the person’s signature; and

(c) the communication contains:

(i) an import declaration made under section 71A of the Act; or

(ii) an application for permission to move, alter or interfere with goods for export made under section 119AA of the Act; or

(iii) an application for permission to move, alter or interfere with goods that are no longer for export made under section 119AB of the Act.

(2) The person must place the person’s full name in the SMTP email.

(3) If the communication is made on behalf of an organisation that has an ABN, the SMTP email must include the name and ABN of the organisation.

Part 2A–Information Technology Requirements for the Self-Assessed Clearance Declaration Pilot

9A Simplified Outline–Self-Assessed Clearance Declaration Pilot

The Self-Assessed Clearance Declaration Pilot is a time-limited trial of novel information technology systems.

Pilot participants will lodge self-assessed clearance declarations through the Trade Portal. Pilot participants must register with the Home Affairs Access Manager and also be registered in the ICS. In order to use the Trade Portal and Home Affairs Access Manager, individuals communicating with the Department on behalf of pilot participants must authenticate their identity using myID and be linked to an ABN in RAM, in accordance with the Trusted Digital Identity Framework.

9B Interpretation

In this Part, unless the contrary intention appears:

ABF Trade Portal means the interactive portal for online services available through the Department’s website at https://trade.abf.gov.au.

pilot participant is an importer, customs broker, nominee or other person or entity who has joined the Self-Assessed Clearance Declaration Pilot.

RAM means the Australian Taxation Office Relationship Authorisation Manager.

Self-Assessed Clearance Declaration Pilot means the pilot of electronic lodgement of self-assessed clearance declarations described in section 9A.

9C Communicating a short-form self-assessed clearance declaration for the purposes of the Self-Assessed Clearance Declaration Pilot

The information technology requirements in this Part apply if a pilot participant who is the owner of specified low value goods, or is acting on behalf of the owner of specified low value goods, wishes to communicate with the Department to lodge a short-form self-assessed clearance declaration for the purposes of section 71AAAF of the Act.

9D Requirements for electronic communications for the purposes of the Self-Assessed Clearance Declaration Pilot

A pilot participant communicating electronically with the Department for the purposes of the Self-Assessed Clearance Declaration Pilot must:

(a) communicate via the ABF Trade Portal; and

(b) be registered in Home Affairs Access Manager and ICS.

9E Authentication to ABF Trade Portal

A pilot participant using the ABF Trade Portal for the purposes of the Self-Assessed Clearance Declaration Pilot must:

(a) establish their Digital Identity inmyID; and

(b) link their myID with the ABN of the pilot participant in RAM in accordance with the Trusted Digital Identity Framework.

Note: The Trusted Digital Identity Framework is available on the Digital ID website https://www.digitalidentity.gov.au/.

Part 3—Information technology requirements for general communications

10 Communications generally

(1) The information technology requirements in this Part apply to a person who:

(a) is required or permitted to make a communication with the Department under:

(i) Division 3 or 4 of Part IV of the Act; or

(ii) Division 2 of Part VI of the Act; or

(iii) Section 163 of the Act; or

(iv) Part IX of the Act; and

(b) wishes to communicate with the Department electronically.

(2) However, the information technology requirements in this Part do not apply to a person who wishes to communicate electronically with the Department in the circumstances mentioned in Part 2.

11 General requirements for electronic communications

(1) A person who communicates electronically with the Department must communicate by:

(a) an EDI message attached to an S/MIME SMTP email to an email address specified by the Department; or

(b) an EDI message delivered by MQ over an MQ channel preconfigured by agreement with the Department; or

(c) the Cargo Interactive Facility using HTTPS to a Departmental website using a version of an internet browser that is supported by the Department for such transactions; or

(d) an API to a nominated Departmental Endpoint.

(2) For the purposes of subparagraphs 11(1)(a)-(c), a person who communicates electronically with the department must:

(a) be registered in:

(i) the Common Connect Facility; and

(ii) the ICS; and

(b) communicate with the Department using Public Key Infrastructure (PKI) in accordance with the Commonwealth’s Gatekeeper® strategy administered by the Digital Transformation Agency; and

(c) configure the person’s email software with the appropriate digital certificate to be able to decrypt encrypted emails sent to the person by the Department.

Note: The Commonwealth Gatekeeper® strategy could in 2025 be viewed on the Australian Government Digital Transformation Agency’s website (https://www.dta.gov.au).

(3) For the purposes of subparagraph 11(1)(d), a person who communicates electronically with the Department by an API to a Departmental endpoint must:

(a) be registered in Home Affairs Access Manager; and

(b) use an authenticated and authorised digital machine certificate linked to the organisation’s ABN.

12 Standards and specifications for EDI messages

A person who communicates electronically with the Department by an EDI message attached to an S/MIME SMTP email or delivered by MQ must comply with the UN/EDIFACT D99B standards, in accordance with the ICS Message Implementation Guidelines of the ICS Software Developers Guide, as in force at the commencement of this Determination and published on the Department’s website.

Note: The ICS Message Implementations Guidelines of the ICS Software Developers Guide could in 2021 be viewed on the Department’s website (www.homeaffairs.gov.au)

12A Standards and Specifications for APIs

A person who communicates electronically with the Department by an API must comply with the API specifications outlined in the API Developer Portal Guidelines.

Note: The Department’s API Developer Portal Guidelines could in 2025 be viewed on the Australian Government Department of Home Affairs website (https://homeaffairs.gov.au).

13 Information technology requirements for signature

(1) The information technology requirements in this section and section 15 apply to a person who is required to sign an electronic communication with the Department under:

(a) Division 3 or 4 of Part IV of the Act; or

(b) Division 2 of Part VI of the Act; or

(c) Section 163 of the Act; or

(d) Part IX of the Act.

(2) A communication by an EDI message attached to an S/MIME SMTP email or delivered by MQ must be digitally signed and encrypted using PKI in accordance with the Commonwealth’s Gatekeeper® strategy.

(3) A communication by an API must be digitally authenticated with a machine credential that is registered in Home Affairs Access Manager in accordance with the Commonwealth’s Gatekeeper® Strategy.

14 Authentication to the Cargo Interactive Facility

(1) A person using the Cargo Interactive Facility must authenticate the communication using a digital certificate issued in accordance with the Commonwealth’s Gatekeeper® strategy.

(2) A communication using the Cargo Interactive Facility must be digitally authenticated and encrypted using PKI in accordance with the Commonwealth’s Gatekeeper® strategy.

14A Authentication to Home Affairs Access Manager

A person using Home Affairs Access Manager for the purposes of communicating with the Department via an API must:

(a) establish their Digital Identity in myID; and

(b) link their myID with the ABN of the organisation in accordance with the Trusted Digital Identity Framework.

Note: The Trusted Digital Identity Framework could in 2025 be viewed on the Digital ID website (https://www.digitalidentity.gov.au/).

15 Digital signature and certificate

(1) The person must use the digital signature and associated digital certificate appropriate to the nature of the communication.

(2) Any digital certificate for the communication must be issued:

(a) by a Gatekeeper® accredited Certification Authority; and

(b) in accordance with a Gatekeeper® Certificate Policy and Certificate Practice Statement.

(3) The Gatekeeper® accredited Certification Authority referred to in subsection (2) must be an Authority that has been approved by the Department for that purpose.

Part 4—Electronic production of documents

16 Information technology requirements for producing documents

(1) This section applies if:

(a) a person is required to produce a document to the Department; and

(b) the person wishes to produce the document electronically.

(2) The document must be produced by sending an SMTP email addressed to a nominated Department email address attaching the document as a MIME attachment.

(3) The attached document must be in a version of one of the following standard document formats supported by the Department:

(a) Microsoft Word;

(b) Microsoft Excel;

(c) HTML;

(d) PDF;

(e) plain text;

(f) JPEG.

9A Simplified Outline–Self-Assessed Clearance Declaration Pilot

The Self-Assessed Clearance Declaration Pilot is a time-limited trial of novel information technology systems.

Pilot participants will lodge self-assessed clearance declarations through the Trade Portal. Pilot participants must register with the Home Affairs Access Manager and also be registered in the ICS. In order to use the Trade Portal and Home Affairs Access Manager, individuals communicating with the Department on behalf of pilot participants must authenticate their identity using myID and be linked to an ABN in RAM, in accordance with the Trusted Digital Identity Framework.

9B Interpretation

In this Part, unless the contrary intention appears:

ABF Trade Portal means the interactive portal for online services available through the Department’s website at https://trade.abf.gov.au.

pilot participant is an importer, customs broker, nominee or other person or entity who has joined the Self-Assessed Clearance Declaration Pilot.

RAM means the Australian Taxation Office Relationship Authorisation Manager.

Self-Assessed Clearance Declaration Pilot means the pilot of electronic lodgement of self-assessed clearance declarations described in section 9A.

9C Communicating a short-form self-assessed clearance declaration for the purposes of the Self-Assessed Clearance Declaration Pilot

The information technology requirements in this Part apply if a pilot participant who is the owner of specified low value goods, or is acting on behalf of the owner of specified low value goods, wishes to communicate with the Department to lodge a short-form self-assessed clearance declaration for the purposes of section 71AAAF of the Act.

9D Requirements for electronic communications for the purposes of the Self-Assessed Clearance Declaration Pilot

A pilot participant communicating electronically with the Department for the purposes of the Self-Assessed Clearance Declaration Pilot must:

(a) communicate via the ABF Trade Portal; and

(b) be registered in Home Affairs Access Manager and ICS.

9E Authentication to ABF Trade Portal

A pilot participant using the ABF Trade Portal for the purposes of the Self-Assessed Clearance Declaration Pilot must:

(a) establish their Digital Identity inmyID; and

(b) link their myID with the ABN of the pilot participant in RAM in accordance with the Trusted Digital Identity Framework.

Note: The Trusted Digital Identity Framework is available on the Digital ID website https://www.digitalidentity.gov.au/.

Part 1—Preliminary

1 Name

This instrument is the Customs (Information Technology Requirements) Determination 2021.

3 Authority

This instrument is made under section 126DA of the Customs Act 1901.

4 Definitions

Note: A number of expressions used in this instrument are defined in subsection 4(1) of the Customs Act 1901, including the following:

(a) customs broker

(b) duty;

(c) goods;

(d) importer;

(e) nominee;

(f) self-assessed clearance declaration;

(g) specified low value goods.

In this instrument:

ABN has the same meaning as in the A New Tax System (Australian Business Number) Act 1999.

Act means the Customs Act 1901.

API means Application Programming Interface, which acts as an intermediary that enables software applications to communicate with a server to access data and functions.

ATT Portal means the Australian Trusted Trader Portal, which is the website operated by the Department to receive nominations by entities to join the Australian Trusted Trader Programme.

Australia Travel Declaration has the meaning given by section 4 of the Customs Regulation.

Claim for the Return of Seized Goods web form means the website operated by the Department to process electronic applications for the return of seized goods.

Collector has the meaning given by section 8 of the Act.

Customs Regulation means the Customs Regulation 2015.

Department means the Department of Home Affairs.

EDI means Electronic Data Interchange.

Endpoint means a digital location where an Application Programming Interface (API) receives API calls, also known as API requests, for resources on its server.

Home Affairs Access Manager means the website that is used to manage access and permissions for external organisations to Departmental systems at https://am.homeaffairs.gov.au.

HTTPS means Hypertext Transfer Protocol Secure.

ICS means Integrated Cargo System.

MQ means the secure message delivery platform known as IBM MQ.

S/MIME means Secure/Multipurpose Internet Mail Extensions.

SMTP means Simple Mail Transfer Protocol.

Subdivision AA goods has the meaning given by section 71AAAA of the Act.

UN/EDIFACT means the international standard, known as Electronic Data Interchange for Administration, Commerce and Transport, administered by the United Nations.

Part 2—Information technology requirements for specified communications

6 Communicating import declaration for goods imported through the post

(1) Subsection (2) applies if:

(a) a person has personal property in goods:

(i) to which section 68 of the Act applies; and

(ii) that are intended to be entered for home consumption; and

(iii) that are imported into Australia through the post; and

(b) the person wishes to communicate with the Department electronically; and

(c) the communication is an import declaration under 71A of the Act for the goods, in an approved statement in accordance with section 71L of the Act.

(2) The communication may be by a SMTP email addressed to a nominated Department email address dedicated to the receipt of such messages.

7 Communicating application to move, alter or interfere with certain goods

(1) Subsection (2) applies if:

(a) a person wishes to communicate with the Department electronically; and

(b) the communication is an application under section 119AA or 119AB of the Act, in an approved statement, for permission to move, alter or interfere with goods in a particular way.

(2) The communication must be by a SMTP email addressed to a nominated Department email address dedicated to the receipt of such messages.

8 Communicating nomination to participate in Australian Trusted Trader Programme

(1) Subsection (2) applies if a person wishes to electronically make a nomination to participate in the Australian Trusted Trader Programme under section 176B of the Act.

(2) The nomination must be made using the website, known as the ATT Portal, administered by the Department.

8A Submitting an Australia Travel Declaration

(1) Subsection (2) applies if:

(a) a person wishes to submit to the Department an Australia Travel Declaration in respect of the importation of the person’s Subdivision AA goods that includes the information specified in subsection 27(2) of the Customs Regulation about the goods; and

(b) the person causes the completed Australia Travel Declaration to be submitted to the Department, including for the purposes of sections 71 and 71AAAB of the Act.

Note 1: Subsection 27(2) of the Customs Regulation sets out the specified information that is sought for the purposes of sections 71 and 71AAAB of the Customs Act.

Note 2: Section 71 of the Act empowers a Collector to decide whether to grant or refuse giving an authority to deal with goods.

Note 3: Section 71AAAB of the Act empowers a Collector to, upon considering information that the Collector must have regard to, decide whether to authorise or refuse to authorise the delivery of Subdivision AA goods into home consumption.

(2) The submission of an Australia Travel Declaration must be:

(a) a message using HTTPS that is capable of being received by the departmental system that processes the Australia Travel Declaration; or

(b) made using the web form known as the Australia Travel Declaration administered by the Department for that purpose.

(3) The person causing an Australia Travel Declaration to be submitted to the Department under subsection (2) must sign the Australia Travel Declaration by inserting the person’s full name as text.

8B Claim for return of goods seized under section 205B of the Customs Act

(1) Subsection (2) applies if a person wishes to electronically make a claim for the return of goods seized under section 205B(2A) of the Act. (2) The claim must be made using the web form, known as the Claim for the Return of Seized Goods web form, administered by the Department.

9 Signature

(1) This section applies if:

(a) a person, including a person acting on behalf of an organisation, communicates electronically with the Department using an SMTP email; and

(b) the person is required to provide the person’s signature; and

(c) the communication contains:

(i) an import declaration made under section 71A of the Act; or

(ii) an application for permission to move, alter or interfere with goods for export made under section 119AA of the Act; or

(iii) an application for permission to move, alter or interfere with goods that are no longer for export made under section 119AB of the Act.

(2) The person must place the person’s full name in the SMTP email.

(3) If the communication is made on behalf of an organisation that has an ABN, the SMTP email must include the name and ABN of the organisation.

Part 2A–Information Technology Requirements for the Self-Assessed Clearance Declaration Pilot

9A Simplified Outline–Self-Assessed Clearance Declaration Pilot

The Self-Assessed Clearance Declaration Pilot is a time-limited trial of novel information technology systems.

Pilot participants will lodge self-assessed clearance declarations through the Trade Portal. Pilot participants must register with the Home Affairs Access Manager and also be registered in the ICS. In order to use the Trade Portal and Home Affairs Access Manager, individuals communicating with the Department on behalf of pilot participants must authenticate their identity using myID and be linked to an ABN in RAM, in accordance with the Trusted Digital Identity Framework.

9B Interpretation

In this Part, unless the contrary intention appears:

ABF Trade Portal means the interactive portal for online services available through the Department’s website at https://trade.abf.gov.au.

pilot participant is an importer, customs broker, nominee or other person or entity who has joined the Self-Assessed Clearance Declaration Pilot.

RAM means the Australian Taxation Office Relationship Authorisation Manager.

Self-Assessed Clearance Declaration Pilot means the pilot of electronic lodgement of self-assessed clearance declarations described in section 9A.

9C Communicating a short-form self-assessed clearance declaration for the purposes of the Self-Assessed Clearance Declaration Pilot

The information technology requirements in this Part apply if a pilot participant who is the owner of specified low value goods, or is acting on behalf of the owner of specified low value goods, wishes to communicate with the Department to lodge a short-form self-assessed clearance declaration for the purposes of section 71AAAF of the Act.

9D Requirements for electronic communications for the purposes of the Self-Assessed Clearance Declaration Pilot

A pilot participant communicating electronically with the Department for the purposes of the Self-Assessed Clearance Declaration Pilot must:

(a) communicate via the ABF Trade Portal; and

(b) be registered in Home Affairs Access Manager and ICS.

9E Authentication to ABF Trade Portal

A pilot participant using the ABF Trade Portal for the purposes of the Self-Assessed Clearance Declaration Pilot must:

(a) establish their Digital Identity inmyID; and

(b) link their myID with the ABN of the pilot participant in RAM in accordance with the Trusted Digital Identity Framework.

Note: The Trusted Digital Identity Framework is available on the Digital ID website https://www.digitalidentity.gov.au/.

Part 3—Information technology requirements for general communications

10 Communications generally

(1) The information technology requirements in this Part apply to a person who:

(a) is required or permitted to make a communication with the Department under:

(i) Division 3 or 4 of Part IV of the Act; or

(ii) Division 2 of Part VI of the Act; or

(iii) Section 163 of the Act; or

(iv) Part IX of the Act; and

(b) wishes to communicate with the Department electronically.

(2) However, the information technology requirements in this Part do not apply to a person who wishes to communicate electronically with the Department in the circumstances mentioned in Part 2.

11 General requirements for electronic communications

(1) A person who communicates electronically with the Department must communicate by:

(a) an EDI message attached to an S/MIME SMTP email to an email address specified by the Department; or

(b) an EDI message delivered by MQ over an MQ channel preconfigured by agreement with the Department; or

(c) the Cargo Interactive Facility using HTTPS to a Departmental website using a version of an internet browser that is supported by the Department for such transactions; or

(d) an API to a nominated Departmental Endpoint.

(2) For the purposes of subparagraphs 11(1)(a)-(c), a person who communicates electronically with the department must:

(a) be registered in:

(i) the Common Connect Facility; and

(ii) the ICS; and

(b) communicate with the Department using Public Key Infrastructure (PKI) in accordance with the Commonwealth’s Gatekeeper® strategy administered by the Digital Transformation Agency; and

(c) configure the person’s email software with the appropriate digital certificate to be able to decrypt encrypted emails sent to the person by the Department.

Note: The Commonwealth Gatekeeper® strategy could in 2025 be viewed on the Australian Government Digital Transformation Agency’s website (https://www.dta.gov.au).

(3) For the purposes of subparagraph 11(1)(d), a person who communicates electronically with the Department by an API to a Departmental endpoint must:

(a) be registered in Home Affairs Access Manager; and

(b) use an authenticated and authorised digital machine certificate linked to the organisation’s ABN.

12 Standards and specifications for EDI messages

A person who communicates electronically with the Department by an EDI message attached to an S/MIME SMTP email or delivered by MQ must comply with the UN/EDIFACT D99B standards, in accordance with the ICS Message Implementation Guidelines of the ICS Software Developers Guide, as in force at the commencement of this Determination and published on the Department’s website.

Note: The ICS Message Implementations Guidelines of the ICS Software Developers Guide could in 2021 be viewed on the Department’s website (www.homeaffairs.gov.au)

12A Standards and Specifications for APIs

A person who communicates electronically with the Department by an API must comply with the API specifications outlined in the API Developer Portal Guidelines.

Note: The Department’s API Developer Portal Guidelines could in 2025 be viewed on the Australian Government Department of Home Affairs website (https://homeaffairs.gov.au).

13 Information technology requirements for signature

(1) The information technology requirements in this section and section 15 apply to a person who is required to sign an electronic communication with the Department under:

(a) Division 3 or 4 of Part IV of the Act; or

(b) Division 2 of Part VI of the Act; or

(c) Section 163 of the Act; or

(d) Part IX of the Act.

(2) A communication by an EDI message attached to an S/MIME SMTP email or delivered by MQ must be digitally signed and encrypted using PKI in accordance with the Commonwealth’s Gatekeeper® strategy.

(3) A communication by an API must be digitally authenticated with a machine credential that is registered in Home Affairs Access Manager in accordance with the Commonwealth’s Gatekeeper® Strategy.

14 Authentication to the Cargo Interactive Facility

(1) A person using the Cargo Interactive Facility must authenticate the communication using a digital certificate issued in accordance with the Commonwealth’s Gatekeeper® strategy.

(2) A communication using the Cargo Interactive Facility must be digitally authenticated and encrypted using PKI in accordance with the Commonwealth’s Gatekeeper® strategy.

14A Authentication to Home Affairs Access Manager

A person using Home Affairs Access Manager for the purposes of communicating with the Department via an API must:

(a) establish their Digital Identity in myID; and

(b) link their myID with the ABN of the organisation in accordance with the Trusted Digital Identity Framework.

Note: The Trusted Digital Identity Framework could in 2025 be viewed on the Digital ID website (https://www.digitalidentity.gov.au/).

15 Digital signature and certificate

(1) The person must use the digital signature and associated digital certificate appropriate to the nature of the communication.

(2) Any digital certificate for the communication must be issued:

(a) by a Gatekeeper® accredited Certification Authority; and

(b) in accordance with a Gatekeeper® Certificate Policy and Certificate Practice Statement.

(3) The Gatekeeper® accredited Certification Authority referred to in subsection (2) must be an Authority that has been approved by the Department for that purpose.

Part 4—Electronic production of documents

16 Information technology requirements for producing documents

(1) This section applies if:

(a) a person is required to produce a document to the Department; and

(b) the person wishes to produce the document electronically.

(2) The document must be produced by sending an SMTP email addressed to a nominated Department email address attaching the document as a MIME attachment.

(3) The attached document must be in a version of one of the following standard document formats supported by the Department:

(a) Microsoft Word;

(b) Microsoft Excel;

(c) HTML;

(d) PDF;

(e) plain text;

(f) JPEG.

10 Communications generally

(1) The information technology requirements in this Part apply to a person who:

(a) is required or permitted to make a communication with the Department under:

(i) Division 3 or 4 of Part IV of the Act; or

(ii) Division 2 of Part VI of the Act; or

(iii) Section 163 of the Act; or

(iv) Part IX of the Act; and

(b) wishes to communicate with the Department electronically.

(2) However, the information technology requirements in this Part do not apply to a person who wishes to communicate electronically with the Department in the circumstances mentioned in Part 2.

11 General requirements for electronic communications

(1) A person who communicates electronically with the Department must communicate by:

(a) an EDI message attached to an S/MIME SMTP email to an email address specified by the Department; or

(b) an EDI message delivered by MQ over an MQ channel preconfigured by agreement with the Department; or

(c) the Cargo Interactive Facility using HTTPS to a Departmental website using a version of an internet browser that is supported by the Department for such transactions; or

(d) an API to a nominated Departmental Endpoint.

(2) For the purposes of subparagraphs 11(1)(a)-(c), a person who communicates electronically with the department must:

(a) be registered in:

(i) the Common Connect Facility; and

(ii) the ICS; and

(b) communicate with the Department using Public Key Infrastructure (PKI) in accordance with the Commonwealth’s Gatekeeper® strategy administered by the Digital Transformation Agency; and

(c) configure the person’s email software with the appropriate digital certificate to be able to decrypt encrypted emails sent to the person by the Department.

Note: The Commonwealth Gatekeeper® strategy could in 2025 be viewed on the Australian Government Digital Transformation Agency’s website (https://www.dta.gov.au).

(3) For the purposes of subparagraph 11(1)(d), a person who communicates electronically with the Department by an API to a Departmental endpoint must:

(a) be registered in Home Affairs Access Manager; and

(b) use an authenticated and authorised digital machine certificate linked to the organisation’s ABN.

12 Standards and specifications for EDI messages

A person who communicates electronically with the Department by an EDI message attached to an S/MIME SMTP email or delivered by MQ must comply with the UN/EDIFACT D99B standards, in accordance with the ICS Message Implementation Guidelines of the ICS Software Developers Guide, as in force at the commencement of this Determination and published on the Department’s website.

Note: The ICS Message Implementations Guidelines of the ICS Software Developers Guide could in 2021 be viewed on the Department’s website (www.homeaffairs.gov.au)

12A Standards and Specifications for APIs

A person who communicates electronically with the Department by an API must comply with the API specifications outlined in the API Developer Portal Guidelines.

Note: The Department’s API Developer Portal Guidelines could in 2025 be viewed on the Australian Government Department of Home Affairs website (https://homeaffairs.gov.au).

13 Information technology requirements for signature

(1) The information technology requirements in this section and section 15 apply to a person who is required to sign an electronic communication with the Department under:

(a) Division 3 or 4 of Part IV of the Act; or

(b) Division 2 of Part VI of the Act; or

(c) Section 163 of the Act; or

(d) Part IX of the Act.

(2) A communication by an EDI message attached to an S/MIME SMTP email or delivered by MQ must be digitally signed and encrypted using PKI in accordance with the Commonwealth’s Gatekeeper® strategy.

(3) A communication by an API must be digitally authenticated with a machine credential that is registered in Home Affairs Access Manager in accordance with the Commonwealth’s Gatekeeper® Strategy.

14 Authentication to the Cargo Interactive Facility

(1) A person using the Cargo Interactive Facility must authenticate the communication using a digital certificate issued in accordance with the Commonwealth’s Gatekeeper® strategy.

(2) A communication using the Cargo Interactive Facility must be digitally authenticated and encrypted using PKI in accordance with the Commonwealth’s Gatekeeper® strategy.

14A Authentication to Home Affairs Access Manager

A person using Home Affairs Access Manager for the purposes of communicating with the Department via an API must:

(a) establish their Digital Identity in myID; and

(b) link their myID with the ABN of the organisation in accordance with the Trusted Digital Identity Framework.

Note: The Trusted Digital Identity Framework could in 2025 be viewed on the Digital ID website (https://www.digitalidentity.gov.au/).

15 Digital signature and certificate

(1) The person must use the digital signature and associated digital certificate appropriate to the nature of the communication.

(2) Any digital certificate for the communication must be issued:

(a) by a Gatekeeper® accredited Certification Authority; and

(b) in accordance with a Gatekeeper® Certificate Policy and Certificate Practice Statement.

(3) The Gatekeeper® accredited Certification Authority referred to in subsection (2) must be an Authority that has been approved by the Department for that purpose.

Part 1—Preliminary

1 Name

This instrument is the Customs (Information Technology Requirements) Determination 2021.

3 Authority

This instrument is made under section 126DA of the Customs Act 1901.

4 Definitions

Note: A number of expressions used in this instrument are defined in subsection 4(1) of the Customs Act 1901, including the following:

(a) customs broker

(b) duty;

(c) goods;

(d) importer;

(e) nominee;

(f) self-assessed clearance declaration;

(g) specified low value goods.

In this instrument:

ABN has the same meaning as in the A New Tax System (Australian Business Number) Act 1999.

Act means the Customs Act 1901.

API means Application Programming Interface, which acts as an intermediary that enables software applications to communicate with a server to access data and functions.

ATT Portal means the Australian Trusted Trader Portal, which is the website operated by the Department to receive nominations by entities to join the Australian Trusted Trader Programme.

Australia Travel Declaration has the meaning given by section 4 of the Customs Regulation.

Claim for the Return of Seized Goods web form means the website operated by the Department to process electronic applications for the return of seized goods.

Collector has the meaning given by section 8 of the Act.

Customs Regulation means the Customs Regulation 2015.

Department means the Department of Home Affairs.

EDI means Electronic Data Interchange.

Endpoint means a digital location where an Application Programming Interface (API) receives API calls, also known as API requests, for resources on its server.

Home Affairs Access Manager means the website that is used to manage access and permissions for external organisations to Departmental systems at https://am.homeaffairs.gov.au.

HTTPS means Hypertext Transfer Protocol Secure.

ICS means Integrated Cargo System.

MQ means the secure message delivery platform known as IBM MQ.

S/MIME means Secure/Multipurpose Internet Mail Extensions.

SMTP means Simple Mail Transfer Protocol.

Subdivision AA goods has the meaning given by section 71AAAA of the Act.

UN/EDIFACT means the international standard, known as Electronic Data Interchange for Administration, Commerce and Transport, administered by the United Nations.

Part 2—Information technology requirements for specified communications

6 Communicating import declaration for goods imported through the post

(1) Subsection (2) applies if:

(a) a person has personal property in goods:

(i) to which section 68 of the Act applies; and

(ii) that are intended to be entered for home consumption; and

(iii) that are imported into Australia through the post; and

(b) the person wishes to communicate with the Department electronically; and

(c) the communication is an import declaration under 71A of the Act for the goods, in an approved statement in accordance with section 71L of the Act.

(2) The communication may be by a SMTP email addressed to a nominated Department email address dedicated to the receipt of such messages.

7 Communicating application to move, alter or interfere with certain goods

(1) Subsection (2) applies if:

(a) a person wishes to communicate with the Department electronically; and

(b) the communication is an application under section 119AA or 119AB of the Act, in an approved statement, for permission to move, alter or interfere with goods in a particular way.

(2) The communication must be by a SMTP email addressed to a nominated Department email address dedicated to the receipt of such messages.

8 Communicating nomination to participate in Australian Trusted Trader Programme

(1) Subsection (2) applies if a person wishes to electronically make a nomination to participate in the Australian Trusted Trader Programme under section 176B of the Act.

(2) The nomination must be made using the website, known as the ATT Portal, administered by the Department.

8A Submitting an Australia Travel Declaration

(1) Subsection (2) applies if:

(a) a person wishes to submit to the Department an Australia Travel Declaration in respect of the importation of the person’s Subdivision AA goods that includes the information specified in subsection 27(2) of the Customs Regulation about the goods; and

(b) the person causes the completed Australia Travel Declaration to be submitted to the Department, including for the purposes of sections 71 and 71AAAB of the Act.

Note 1: Subsection 27(2) of the Customs Regulation sets out the specified information that is sought for the purposes of sections 71 and 71AAAB of the Customs Act.

Note 2: Section 71 of the Act empowers a Collector to decide whether to grant or refuse giving an authority to deal with goods.

Note 3: Section 71AAAB of the Act empowers a Collector to, upon considering information that the Collector must have regard to, decide whether to authorise or refuse to authorise the delivery of Subdivision AA goods into home consumption.

(2) The submission of an Australia Travel Declaration must be:

(a) a message using HTTPS that is capable of being received by the departmental system that processes the Australia Travel Declaration; or

(b) made using the web form known as the Australia Travel Declaration administered by the Department for that purpose.

(3) The person causing an Australia Travel Declaration to be submitted to the Department under subsection (2) must sign the Australia Travel Declaration by inserting the person’s full name as text.

8B Claim for return of goods seized under section 205B of the Customs Act

(1) Subsection (2) applies if a person wishes to electronically make a claim for the return of goods seized under section 205B(2A) of the Act. (2) The claim must be made using the web form, known as the Claim for the Return of Seized Goods web form, administered by the Department.

9 Signature

(1) This section applies if:

(a) a person, including a person acting on behalf of an organisation, communicates electronically with the Department using an SMTP email; and

(b) the person is required to provide the person’s signature; and

(c) the communication contains:

(i) an import declaration made under section 71A of the Act; or

(ii) an application for permission to move, alter or interfere with goods for export made under section 119AA of the Act; or

(iii) an application for permission to move, alter or interfere with goods that are no longer for export made under section 119AB of the Act.

(2) The person must place the person’s full name in the SMTP email.

(3) If the communication is made on behalf of an organisation that has an ABN, the SMTP email must include the name and ABN of the organisation.

Part 2A–Information Technology Requirements for the Self-Assessed Clearance Declaration Pilot

9A Simplified Outline–Self-Assessed Clearance Declaration Pilot

The Self-Assessed Clearance Declaration Pilot is a time-limited trial of novel information technology systems.

Pilot participants will lodge self-assessed clearance declarations through the Trade Portal. Pilot participants must register with the Home Affairs Access Manager and also be registered in the ICS. In order to use the Trade Portal and Home Affairs Access Manager, individuals communicating with the Department on behalf of pilot participants must authenticate their identity using myID and be linked to an ABN in RAM, in accordance with the Trusted Digital Identity Framework.

9B Interpretation

In this Part, unless the contrary intention appears:

ABF Trade Portal means the interactive portal for online services available through the Department’s website at https://trade.abf.gov.au.

pilot participant is an importer, customs broker, nominee or other person or entity who has joined the Self-Assessed Clearance Declaration Pilot.

RAM means the Australian Taxation Office Relationship Authorisation Manager.

Self-Assessed Clearance Declaration Pilot means the pilot of electronic lodgement of self-assessed clearance declarations described in section 9A.

9C Communicating a short-form self-assessed clearance declaration for the purposes of the Self-Assessed Clearance Declaration Pilot

The information technology requirements in this Part apply if a pilot participant who is the owner of specified low value goods, or is acting on behalf of the owner of specified low value goods, wishes to communicate with the Department to lodge a short-form self-assessed clearance declaration for the purposes of section 71AAAF of the Act.

9D Requirements for electronic communications for the purposes of the Self-Assessed Clearance Declaration Pilot

A pilot participant communicating electronically with the Department for the purposes of the Self-Assessed Clearance Declaration Pilot must:

(a) communicate via the ABF Trade Portal; and

(b) be registered in Home Affairs Access Manager and ICS.

9E Authentication to ABF Trade Portal

A pilot participant using the ABF Trade Portal for the purposes of the Self-Assessed Clearance Declaration Pilot must:

(a) establish their Digital Identity inmyID; and

(b) link their myID with the ABN of the pilot participant in RAM in accordance with the Trusted Digital Identity Framework.

Note: The Trusted Digital Identity Framework is available on the Digital ID website https://www.digitalidentity.gov.au/.

Part 3—Information technology requirements for general communications

10 Communications generally

(1) The information technology requirements in this Part apply to a person who:

(a) is required or permitted to make a communication with the Department under:

(i) Division 3 or 4 of Part IV of the Act; or

(ii) Division 2 of Part VI of the Act; or

(iii) Section 163 of the Act; or

(iv) Part IX of the Act; and

(b) wishes to communicate with the Department electronically.

(2) However, the information technology requirements in this Part do not apply to a person who wishes to communicate electronically with the Department in the circumstances mentioned in Part 2.

11 General requirements for electronic communications

(1) A person who communicates electronically with the Department must communicate by:

(a) an EDI message attached to an S/MIME SMTP email to an email address specified by the Department; or

(b) an EDI message delivered by MQ over an MQ channel preconfigured by agreement with the Department; or

(c) the Cargo Interactive Facility using HTTPS to a Departmental website using a version of an internet browser that is supported by the Department for such transactions; or

(d) an API to a nominated Departmental Endpoint.

(2) For the purposes of subparagraphs 11(1)(a)-(c), a person who communicates electronically with the department must:

(a) be registered in:

(i) the Common Connect Facility; and

(ii) the ICS; and

(b) communicate with the Department using Public Key Infrastructure (PKI) in accordance with the Commonwealth’s Gatekeeper® strategy administered by the Digital Transformation Agency; and

(c) configure the person’s email software with the appropriate digital certificate to be able to decrypt encrypted emails sent to the person by the Department.

Note: The Commonwealth Gatekeeper® strategy could in 2025 be viewed on the Australian Government Digital Transformation Agency’s website (https://www.dta.gov.au).

(3) For the purposes of subparagraph 11(1)(d), a person who communicates electronically with the Department by an API to a Departmental endpoint must:

(a) be registered in Home Affairs Access Manager; and

(b) use an authenticated and authorised digital machine certificate linked to the organisation’s ABN.

12 Standards and specifications for EDI messages

A person who communicates electronically with the Department by an EDI message attached to an S/MIME SMTP email or delivered by MQ must comply with the UN/EDIFACT D99B standards, in accordance with the ICS Message Implementation Guidelines of the ICS Software Developers Guide, as in force at the commencement of this Determination and published on the Department’s website.

Note: The ICS Message Implementations Guidelines of the ICS Software Developers Guide could in 2021 be viewed on the Department’s website (www.homeaffairs.gov.au)

12A Standards and Specifications for APIs

A person who communicates electronically with the Department by an API must comply with the API specifications outlined in the API Developer Portal Guidelines.

Note: The Department’s API Developer Portal Guidelines could in 2025 be viewed on the Australian Government Department of Home Affairs website (https://homeaffairs.gov.au).

13 Information technology requirements for signature

(1) The information technology requirements in this section and section 15 apply to a person who is required to sign an electronic communication with the Department under:

(a) Division 3 or 4 of Part IV of the Act; or

(b) Division 2 of Part VI of the Act; or

(c) Section 163 of the Act; or

(d) Part IX of the Act.

(2) A communication by an EDI message attached to an S/MIME SMTP email or delivered by MQ must be digitally signed and encrypted using PKI in accordance with the Commonwealth’s Gatekeeper® strategy.

(3) A communication by an API must be digitally authenticated with a machine credential that is registered in Home Affairs Access Manager in accordance with the Commonwealth’s Gatekeeper® Strategy.

14 Authentication to the Cargo Interactive Facility

(1) A person using the Cargo Interactive Facility must authenticate the communication using a digital certificate issued in accordance with the Commonwealth’s Gatekeeper® strategy.

(2) A communication using the Cargo Interactive Facility must be digitally authenticated and encrypted using PKI in accordance with the Commonwealth’s Gatekeeper® strategy.

14A Authentication to Home Affairs Access Manager

A person using Home Affairs Access Manager for the purposes of communicating with the Department via an API must:

(a) establish their Digital Identity in myID; and

(b) link their myID with the ABN of the organisation in accordance with the Trusted Digital Identity Framework.

Note: The Trusted Digital Identity Framework could in 2025 be viewed on the Digital ID website (https://www.digitalidentity.gov.au/).

15 Digital signature and certificate

(1) The person must use the digital signature and associated digital certificate appropriate to the nature of the communication.

(2) Any digital certificate for the communication must be issued:

(a) by a Gatekeeper® accredited Certification Authority; and

(b) in accordance with a Gatekeeper® Certificate Policy and Certificate Practice Statement.

(3) The Gatekeeper® accredited Certification Authority referred to in subsection (2) must be an Authority that has been approved by the Department for that purpose.

Part 4—Electronic production of documents

16 Information technology requirements for producing documents

(1) This section applies if:

(a) a person is required to produce a document to the Department; and

(b) the person wishes to produce the document electronically.

(2) The document must be produced by sending an SMTP email addressed to a nominated Department email address attaching the document as a MIME attachment.

(3) The attached document must be in a version of one of the following standard document formats supported by the Department:

(a) Microsoft Word;

(b) Microsoft Excel;

(c) HTML;

(d) PDF;

(e) plain text;

(f) JPEG.

16 Information technology requirements for producing documents

(1) This section applies if:

(a) a person is required to produce a document to the Department; and

(b) the person wishes to produce the document electronically.

(2) The document must be produced by sending an SMTP email addressed to a nominated Department email address attaching the document as a MIME attachment.

(3) The attached document must be in a version of one of the following standard document formats supported by the Department:

(a) Microsoft Word;

(b) Microsoft Excel;

(c) HTML;

(d) PDF;

(e) plain text;

(f) JPEG.