56Accredited identity exchange providers must not retain certain attributes of individuals

56 Accredited identity exchange providers must not retain certain attributes of individuals

(1) This section applies if, during an authenticated session, an accredited identity exchange provider receives any of the following attributes of an individual: (a) a restricted attribute of the individual; (b) the individual’s name; (c) the individual’s address; (d) the individual’s date of birth; (e) the individual’s phone number; (f) the individual’s email address; (g) an attribute of a kind prescribed by the Accreditation Rules. (2) The accredited identity exchange provider must not retain the attribute of the individual after the end of the authenticated session.

Civil penalty: 1,500 penalty units.

(3) In this section:

authenticated session has the meaning given by the Accreditation Rules.

Chapter 4—Australian Government Digital ID System