The Times Australia
The Times World News

.
The Times Real Estate

.

A national digital ID scheme is being proposed. An expert weighs the pros and (many more) cons

  • Written by Erica Mealy, Lecturer in Computer Science, University of the Sunshine Coast
A national digital ID scheme is being proposed. An expert weighs the pros and (many more) cons

In 2018-19, identity crime directly and indirectly cost Australia an estimated[1] A$3.1 billion.

To address such costs, the federal government is proposing a national digital identity scheme that will let people prove their identity[2] without having to share documents such as their passport, drivers licence or Medicare card.

Finance Minister Katy Gallagher opened consultations[3] for the draft bill[4] last week, with plans to introduce the legislation to parliament by the end of the year.

Let’s look at what it proposes, and what it could mean for you.

What would change?

The digital ID scheme would initially be regulated by the Australian Competition and Consumer Commission and the Australian Information Commissioner, with a view to eventually establish a new governing body.

The draft bill package includes strong updates to security requirements for how organisations store people’s IDs, as well as the reporting of data breaches and suspected identity fraud.

In her speech to[5] the Australian Information Industry Association, Gallagher outlined a four-phase rollout.

  • Phase one: establishing the legislation and accreditation of private and public providers.
  • Phase two: adding state- and territory-issued IDs to the scheme for use with federal government services.
  • Phase three: bringing recognition of the digital ID into the private sector. This would, for instance, allow you to use your digital ID to apply for a bank loan without having to provide your identity documents or copies.
  • Phase four: allowing accredited private sector digital IDs to help verify you when accessing certain government services.

How would it work?

For the general public, the voluntary scheme would come in the form of a smartphone app[6], requiring biometric information (such as a face print) to be unlocked.

To prove your identity to a participating organisation, you would log into the organisation’s website and select MyGovID[7] as your verification method.

You would then log into your MyGovID app and give consent for your identity to be verified with that organisation. In this way, you could verify your identity to the organisation without needing to share your drivers licence, passport or similar.

Gone will be the days of 100 points of ID and copies of documents stored all over the internet.

The upside of the proposal

The Medibank, Optus[8] and Latitude[9] data breaches of 2022-23 have demonstrated the lack of regulation and enforcement of identity protection legislation in Australia.

A welcome part of the draft bill is the increased power given to the Australian Information Commissioner, as well as restrictions on how organisations request, store and disclose people’s personal identifying information[10].

The bill also outlines minimum cybersecurity standards, and requires regular review of organisations dealing with identity data.

Unresolved MyGovID security flaws

In releasing the draft bill, the government has highlighted a voluntary national digital identity – the MyGovID – which is already being used by[11] more than 6 million Australians and 1.3 million businesses.

MyGovID is a government-issued authenticator app which verifies your identity using one of three factors: something you know (such as a password), something you are (such as a biometric scan), or something you have (such as a verified phone number, where you can receive one-time codes). Adding additional factors makes verification more secure.

In 2020, security researchers warned the public against using MyGovID[12] due to security flaws in its design. It’s unclear if these have been addressed. The Australian Tax Office declined to fix[13] the issue when raised.

Governments in Australia also have a poor track record[14] of securing our information.

According to Webber Insurance[15], 14 of the 44 recorded data breaches between January to June this year were reported by government authorities. These included the Department of Home Affairs, and the Northern Territory, Tasmania, ACT and NSW governments.

This is on top of data breaches involving[16] the Australian Tax Office, National Disability Insurance Scheme and MyGov, as reported by the ABC last year.

More worryingly, the privacy act[17] has a loophole which allows state and government authorities to remain exempt from compulsory data breach reporting. As such, we don’t know just how many government data breaches have occurred.

The draft bill explicitly maintains these loopholes, stating[18] entities are exempt from data reporting if “the entity is a department or authority of a State or Territory”.

Read more: The government wants to expand the 'digital identity' system that lets Australians access services. There are many potential pitfalls[19]

A honey trap for hackers

Even if the government carries out its end of the bargain securely, the proposed scheme would still only be as secure as your phone. Having a weak password, losing your phone, or having your phone hacked could lead to data being compromised.

Also, streamlining distributed identification systems in this way will create an irresistible target for hackers. In cybersecurity this is called a honeypot[20], or honey trap.

Just as honey is irresistible to bears, these data lures are irresistible to hackers. Failure to secure the data would make it a one-stop-shop for identity theft and extortion.

Perhaps most concerning is how closely the proposed scheme resembles government surveillance. By linking all our personal identification data across federal and state jurisdictions, as well as private entities, we would be giving the federal government complete oversight of our lives.

Small changes to the law, such as those quietly made in[21] the Surveillance Legislation Amendment (Identify and Distrupt) Act in 2021, could mean our locations could be tracked, and all our interactions with public and private organisations recorded.

What can you do?

It’s clear the draft bill has a number of issues. That said, all hope is not lost.

The government has committed to genuine consultation on its proposal. However, you don’t have much time to have your say[22]: public submissions are being sought until October 10.

This extremely short consultation period doesn’t provide much confidence a fit-for-purpose solution will be created.

While protecting our digital identities is a welcome and well-overdue part of this proposed bill, getting it wrong could lead to harm at an even larger scale.

Read more: Australia's National Digital ID is here, but the government's not talking about it[23]

References

  1. ^ an estimated (www.aic.gov.au)
  2. ^ prove their identity (www.digitalidentity.gov.au)
  3. ^ opened consultations (ministers.pmc.gov.au)
  4. ^ draft bill (www.digitalidentity.gov.au)
  5. ^ speech to (ministers.pmc.gov.au)
  6. ^ smartphone app (www.9news.com.au)
  7. ^ MyGovID (www.digitalidentity.gov.au)
  8. ^ Medibank, Optus (www.afr.com)
  9. ^ Latitude (www.latitudefinancial.com.au)
  10. ^ personal identifying information (www.oaic.gov.au)
  11. ^ being used by (ministers.dese.gov.au)
  12. ^ against using MyGovID (www.itnews.com.au)
  13. ^ declined to fix (www.zdnet.com)
  14. ^ poor track record (www.governmentnews.com.au)
  15. ^ Webber Insurance (www.webberinsurance.com.au)
  16. ^ data breaches involving (www.abc.net.au)
  17. ^ privacy act (www.oaic.gov.au)
  18. ^ stating (www.digitalidentity.gov.au)
  19. ^ The government wants to expand the 'digital identity' system that lets Australians access services. There are many potential pitfalls (theconversation.com)
  20. ^ honeypot (au.norton.com)
  21. ^ quietly made in (www.sbs.com.au)
  22. ^ have your say (www.digitalidentity.gov.au)
  23. ^ Australia's National Digital ID is here, but the government's not talking about it (theconversation.com)

Read more https://theconversation.com/a-national-digital-id-scheme-is-being-proposed-an-expert-weighs-the-pros-and-many-more-cons-214144

The Times Features

Why Regional Small Businesses in Bendigo Deserve Better Access to Finance in 2025

In the heart of regional Victoria, Bendigo has long stood as a beacon of innovation, resilience and community spirit. As we step further into 2025, the importance of nurturing sm...

Is It Time for a Deep Cleaning? Signs You Shouldn’t Ignore

Most people know they should visit the dentist for a regular check-up and cleaning every six months. But sometimes, a standard cleaning isn’t enough. When plaque and tartar build...

The Hidden Meaning Behind Popular Engagement Ring Cuts

When it comes to engagement rings, the cut of the diamond is not just about aesthetics. Each shape carries its own symbolism and significance, making it an important decision for...

Annual Health Exams in the Office: How They Can Reduce Sick Days and Healthcare Costs

Regular health check-ups, especially annual health exams in the office, can significantly impact the overall well-being of your workforce. A proactive approach to employee health...

Best Deals on Home Furniture Online

Key Highlights Discover the best deals on high-quality outdoor furniture online. Transform your outdoor space into a stylish and comfortable oasis. Explore a wide range of d...

Discover the Best Women's Jumpers for Every Season

Key Highlights Explore lightweight jumpers for spring and summer, ensuring breathability and ease. Wrap up warm with cozy wool jumpers for the chilly autumn and winter season...

Times Magazine

The Essential Guide to Transforming Office Spaces for Maximum Efficiency

Why Office Fitouts MatterA well-designed office can make all the difference in productivity, employee satisfaction, and client impressions. Businesses of all sizes are investing in updated office spaces to create environments that foster collaborat...

The A/B Testing Revolution: How AI Optimized Landing Pages Without Human Input

A/B testing was always integral to the web-based marketing world. Was there a button that converted better? Marketing could pit one against the other and see which option worked better. This was always through human observation, and over time, as d...

Using Countdown Timers in Email: Do They Really Increase Conversions?

In a world that's always on, where marketers are attempting to entice a subscriber and get them to convert on the same screen with one email, the power of urgency is sometimes the essential element needed. One of the most popular ways to create urg...

Types of Software Consultants

In today's technology-driven world, businesses often seek the expertise of software consultants to navigate complex software needs. There are several types of software consultants, including solution architects, project managers, and user experienc...

CWU Assistive Tech Hub is Changing Lives: Win a Free Rollator Walker This Easter!

🌟 Mobility. Independence. Community. All in One. This Easter, the CWU Assistive Tech Hub is pleased to support the Banyule community by giving away a rollator walker. The giveaway will take place during the Macleod Village Easter Egg Hunt & Ma...

"Eternal Nurture" by Cara Barilla: A Timeless Collection of Wisdom and Healing

Renowned Sydney-born author and educator Cara Barilla has released her latest book, Eternal Nurture, a profound collection of inspirational quotes designed to support mindfulness, emotional healing, and personal growth. With a deep commitment to ...

LayBy Shopping