The Times Australia
The Times World News

.

The government wants to expand the 'digital identity' system that lets Australians access services. There are many potential pitfalls

  • Written by Kelsie Nabben, Researcher / PhD Candidate, RMIT Blockchain Innovation Hub / Digital Ethnography Research Centre, RMIT University
The government wants to expand the 'digital identity' system that lets Australians access services. There are many potential pitfalls

The federal government has been asking the public for feedback on proposed legislation[1] to create a “trusted digital identity” system. The aim is for Australians to use it to prove their identity when accessing public services.

I first found out about the draft Trusted Digital Identity Bill not through my research at the intersection of society and technology, but through my mother-in-law. She found out about it in private social media channels, and her local women’s group was seeking support to craft their feedback, which emphasises concern for privacy and civil liberties in Australia.

After asking around among major stakeholders, it seems this piece of legislation has largely slipped under the radar since it was unveiled on October 1.

But what will a national digital identity system actually involve, who will it serve, and if we need it, how should it be implemented?

Read more: Australia's National Digital ID is here, but the government's not talking about it[2]

What does ‘digital identity’ mean?

The government’s proposed Digital Identity[3] system promises a “safe, secure and convenient way to prove who you are online every time you access government services”. In other words, it aims to streamline your experience by avoiding the need to repeatedly identify yourself when accessing a range of government services.

Currently, you can create a digital identity using a “myGovID” to access 80 government services. This allows you to link your data across services such as Medicare, Centrelink and the Australian Tax Office. The new legislation proposes an expansion of powers to outsource the process of identity verification to approved Australian businesses. Presumably, this could lead to an expansion of acceptance of the digital ID system so it can be used more widely than just to access government services.

This would be done by linking your MyGov account on the MyGovID smartphone app, and providing an existing identity document (such as a passport, driver’s licence or birth certificate), to an identity provider. Under the proposal, any Australian business can apply to join the “Trusted Digital Identity Framework” to become an identity accreditor. The legislation would establish an agency to oversee these accreditations, and to govern how data will be handled in the scheme. The technical standards of the proposed scheme have not yet been published.

But this goes against all the standard advice about not linking all of your personal information, such as tax history and medical history, as it can lead to mass analytics, behaviour profiling, targeted advertising, and more (as we saw in the Cambridge Analytica scandal).

The proposal also comes amid the ongoing “datafication” of the population, which has been turbocharged by the COVID pandemic. Digital rights advocacy groups have already voiced alarm[4] at the mass collection, collation and storage of personal data, often on a mandatory basis, using hastily implemented platforms such as contact-tracing apps.

Without a careful and measured approach, the digital identity proposal risks repeating the same mistakes.

Stuart Robert in Parliament
Federal Employment Minister Stuart Robert released the draft bill for public consultation on October 1. Lukas Coch/AAP Image

The government says the proposed digital identity system will be entirely voluntary, and that the system is not designed to replace identification documents such as your birth certificate, visa, driver’s licence or passport.

It also says the system will not be used to access or record COVID vaccinations, and that the information collected will not be used for purposes such as consumer profiling or marketing.

Of course, Australians who opt to use the system are being asked to put their trust in the government to share their data with “verified” identity providers.

Ironically enough, there are quite a few issues that still need to be resolved before Australians can place their trust in the government’s plan to issue them with a “trusted digital identity”.

Potential pitfalls

I have several concerns about the government’s digital identity legislation in its current form.

  • It is opaque on details, particularly with regard to the proposed use of new technologies such as biometric matching (using biological characteristics to identity an individual) and automated decision-making.

  • It potentially creates a “honeypot” of personal data stored in a centralised database that would offer a tempting target for cyber criminals or hostile nations. The government has promised the data will be “private and secure and protected by strict security protocols”. But government databases have suffered numerous previous hacks[5], such as the “cybersecurity incident” last year that led to the Australian Defence Force’s recruitment records[6] being offline for ten days.

  • It’s not clear how the trustworthiness of third-party identity verification providers who store these data will be verified and guaranteed, or what recourse would be available in the event of a breach.

  • There is a potential lack of accountability for third-party access, onselling, and monetisation of data – precisely the problem that has blighted our relationship with Big Tech over the past few years.

  • The establishment of a centralised “oversight authority” is an archaic approach that disempowers individuals from owning their personal information.

Australians can’t simply disengage from digitisation. But rather than blithely hand over our data, we should think carefully and collectively about the long-term effects of creating national, centralised databases of sensitive personal information.

The digital infrastructure to own and control access to our own digital identity already exists. Blockchain communities have built it[7]; it’s time we used it.

Read more: The COVIDSafe app was just one contact tracing option. These alternatives guarantee more privacy[8]

Hope for alternatives

Senator Andrew Bragg last week tabled the final report[9] of the Senate Select Committee on Australia as a Technology and Financial Centre. It recommends Australia embrace technologies such as blockchain[10] and decentralised computing, in a bid to become an international hub for financial technology.

Despite this, there is still no apparent appetite to use this technology to encrypt the data stored by our domestic public services. Contrast that with Estonia, an international leader in digitisation, which maintains an immutable blockchain-based record[11] of who in government has accessed medical health records.

Read more: What Australia can learn about e-government from Estonia[12]

Leaving aside the question of whether a digital identity system is even necessary or desirable, perhaps the biggest disappointment about the current legislation is the lack of creativity about data governance to determine how the system could be more safely implemented.

I’m not saying “don’t trust the government with your data”. What I am saying is that the digital identity data should be regarded as critical national infrastructure, and protected as such by giving people the ability to own their identity.

The broader context here is not one of legislation or technological architecture. It is a social question of collectively defining what a digital Australia should look like in the long term, and making it one that serves the public interest. Citizens should be able to own and govern their personal information with confidence, both now and into the future.

The opportunity for individuals and organisations to respond to the Digital Identity Bill[13] closes on October 27.

References

  1. ^ feedback on proposed legislation (www.digitalidentity.gov.au)
  2. ^ Australia's National Digital ID is here, but the government's not talking about it (theconversation.com)
  3. ^ Digital Identity (www.digitalidentity.gov.au)
  4. ^ voiced alarm (theconversation.com)
  5. ^ suffered numerous previous hacks (www.webberinsurance.com.au)
  6. ^ recruitment records (ia.acs.org.au)
  7. ^ built it (www.brightid.org)
  8. ^ The COVIDSafe app was just one contact tracing option. These alternatives guarantee more privacy (theconversation.com)
  9. ^ final report (www.aph.gov.au)
  10. ^ blockchain (www.industry.gov.au)
  11. ^ immutable blockchain-based record (e-estonia.com)
  12. ^ What Australia can learn about e-government from Estonia (theconversation.com)
  13. ^ respond to the Digital Identity Bill (www.digitalidentity.gov.au)

Read more https://theconversation.com/the-government-wants-to-expand-the-digital-identity-system-that-lets-australians-access-services-there-are-many-potential-pitfalls-170550

Times Magazine

Headless CMS in Digital Twins and 3D Product Experiences

Image by freepik As the metaverse becomes more advanced and accessible, it's clear that multiple sectors will use digital twins and 3D product experiences to visualize, connect, and streamline efforts better. A digital twin is a virtual replica of ...

The Decline of Hyper-Casual: How Mid-Core Mobile Games Took Over in 2025

In recent years, the mobile gaming landscape has undergone a significant transformation, with mid-core mobile games emerging as the dominant force in app stores by 2025. This shift is underpinned by changing user habits and evolving monetization tr...

Understanding ITIL 4 and PRINCE2 Project Management Synergy

Key Highlights ITIL 4 focuses on IT service management, emphasising continual improvement and value creation through modern digital transformation approaches. PRINCE2 project management supports systematic planning and execution of projects wit...

What AI Adoption Means for the Future of Workplace Risk Management

Image by freepik As industrial operations become more complex and fast-paced, the risks faced by workers and employers alike continue to grow. Traditional safety models—reliant on manual oversight, reactive investigations, and standardised checklist...

From Beach Bops to Alpine Anthems: Your Sonos Survival Guide for a Long Weekend Escape

Alright, fellow adventurers and relaxation enthusiasts! So, you've packed your bags, charged your devices, and mentally prepared for that glorious King's Birthday long weekend. But hold on, are you really ready? Because a true long weekend warrior kn...

Effective Commercial Pest Control Solutions for a Safer Workplace

Keeping a workplace clean, safe, and free from pests is essential for maintaining productivity, protecting employee health, and upholding a company's reputation. Pests pose health risks, can cause structural damage, and can lead to serious legal an...

The Times Features

Tricia Paoluccio designer to the stars

The Case for Nuturing Creativity in the Classroom, and in our Lives I am an actress and an artist who has had the privilege of sharing my work across many countries, touring my ...

Duke of Dural to Get Rooftop Bar as New Owners Invest in Venue Upgrade

The Duke of Dural, in Sydney’s north-west, is set for a major uplift under new ownership, following its acquisition by hospitality group Good Beer Company this week. Led by resp...

Prefab’s Second Life: Why Australia’s Backyard Boom Needs a Circular Makeover

The humble granny flat is being reimagined not just as a fix for housing shortages, but as a cornerstone of circular, factory-built architecture. But are our systems ready to s...

Melbourne’s Burglary Boom: Break-Ins Surge Nearly 25%

Victorian homeowners are being warned to act now, as rising break-ins and falling arrest rates paint a worrying picture for suburban safety. Melbourne residents are facing an ...

Exploring the Curriculum at a Modern Junior School in Melbourne

Key Highlights The curriculum at junior schools emphasises whole-person development, catering to children’s physical, emotional, and intellectual needs. It ensures early year...

Distressed by all the bad news? Here’s how to stay informed but still look after yourself

If you’re feeling like the news is particularly bad at the moment, you’re not alone. But many of us can’t look away – and don’t want to. Engaging with news can help us make ...