46Disclosure of restricted attributes of individuals

46 Disclosure of restricted attributes of individuals

(1) When verifying the identity of an individual or authenticating a digital ID of, or information about, an individual to a relying party, an accredited entity must not disclose a restricted attribute of the individual to the relying party without the express consent of the individual.

Civil penalty: 1,500 penalty units.

(2) An accredited entity must not disclose a restricted attribute of an individual to a relying party that is not a participating relying party if the accredited entity’s conditions on accreditation do not include an authorisation to disclose the restricted attribute to the relying party.

Civil penalty: 1,500 penalty units.