Stronger safeguards for identity security in ID support bill
People at risk of identity fraud because their documents have been breached or stolen will benefit from stronger protections and support under new laws introduced into the NSW Parliament.
The legislation will establish a new fraud check service, allowing government agencies and other accredited organisations to confirm whether identity document (ID) details have been compromised or stolen, to stop criminals misusing people’s details to apply for grants or credit.
The Identity Protection and Recovery Bill will also underpin ongoing NSW Government efforts to help residents secure their identity and avoid theft and scams through the work of ID Support NSW.
According to ScamWatch, Australians reported losing more than $2 billion to scams last year, with more than 67,000 scams reported by NSW residents alone.
ID Support provides a lifeline for people caught up in a data breach by notifying them when a breach has occurred and helping them replace government documents and guard against cyber criminals.
In 2023–24, it supported more than 40,000 customers impacted by identity misuse and data compromises. ID Support also provides community outreach and education, delivering almost 200 interactive events last year on identity, privacy and cyber security resilience.
Under the Bill, ID Support will operate as the core government provider of identity protection and recovery services, including setting up a secure Compromised Credential Register to provide a fraud check service for IDs such as NSW driver licences and photo cards.
Once it is known an ID document is potentially compromised – for example, because an individual’s personal details, driver licence and card number have been exposed in a data breach or found on the dark web – it can be added to the Register. ID Support will then notify the individual and the issuing authority so the document can be replaced.
Authorised fraud check users such as government agencies, banks and credit card providers, who currently use document verification services, will be able to check the Register to ensure compromised identity documents are not being used fraudulently.
The Bill also allows NSW Government agencies to share relevant information to ID Support so they can alert affected individuals quickly and take immediate steps to reduce their risk of harm.
The new laws are a key action under the NSW Digital Strategy which aims to build secure, reliable and inclusive digital services and enhance cyber resilience and public trust.
The Minns Labor Government has secured the future of ID Support with a four-year, $22.7 million funding commitment through the 2024-25 Budget, after funding was set to expire under the previous government.
Minister for Customer Service and Digital Government Jihad Dib said:
“These new laws will help safeguard NSW residents against cyber criminals and the scourge of identity theft, especially when it targets our most vulnerable citizens who can least afford it.
“By alerting people quickly and supporting them to secure their identity and replace compromised ID documents, NSW residents will be better protected from impersonation, scams and fraud.
“The new Compromised Credential Register will enable these early notifications to both individuals and agencies, and will send up a red flag when someone tries to use an ID document that has been stolen or compromised.
“The bill also ensures ID Support can provide ongoing support, advice and education to NSW communities to help build cyber security awareness and resilience.
“We are introducing this legislation to ensure ID Support NSW can work closely with police, victims and government agencies to help us prevent identity crime.”