This notice explains what personal information is collected when an identity document is scanned at a kiosk running the e-kiosk platform, why it is collected, who it is disclosed to, and how long it is kept. It is provided in line with the Australian Privacy Principles (APP 1 and APP 5) under the Privacy Act 1988 (Cth).
When your identity document is scanned, the platform collects:
The information is collected for one purpose: verifying that the presented document is genuine and establishing the identity of its holder for the organisation operating the kiosk. It is not used for marketing and is not sold.
Captured document images and extracted identity details are sent to the foxid identity-verification service, which performs the document and identity checks and returns a verification result. The result of the check is available to the organisation that operates the kiosk you used. Data is transmitted over encrypted connections.
Captured images and extracted identity details are retained only for the period set by the retention policy configured for the organisation operating the kiosk, after which they are deleted. Non-identifying transaction records (for example, that a verification occurred and whether it passed) may be kept longer for audit and support purposes.
Captured images are encrypted at rest, and identity details are stored encrypted. Access is restricted to authorised personnel of the platform operator and the organisation operating the kiosk.
If you would like to access or correct information collected about you, or have questions or a complaint about how it has been handled, contact the organisation that operated the kiosk where your document was scanned. Their privacy policy explains how to make a request or complaint, and your options if you are not satisfied with the response, including complaining to the Office of the Australian Information Commissioner (OAIC).