45Individuals must expressly consent to disclosure of certain attributes of individuals to relying parties

45 Individuals must expressly consent to disclosure of certain attributes of individuals to relying parties

When verifying the identity of an individual or authenticating a digital ID of, or information about, an individual to a relying party, an accredited entity must not disclose any of the following attributes of the individual to the relying party without the express consent of the individual: (a) the individual’s current name or former name; (b) the individual’s address; (c) the individual’s date of birth; (d) the individual’s phone number; (e) the individual’s email address; (f) an attribute of a kind prescribed by the Accreditation Rules.

Civil penalty: 1,500 penalty units.