Digital identity in Australia


Digital identity in Australia is used by residents to validate who they are over digital mediums, such as over the Internet.
While many organisations use their own mechanisms, increasingly, aggregated digital identities are in use. Many Australian organisations leverage popular ubiquitous Internet identities such as those provided by social login services including Facebook, Google, Twitter and Linked In to perform the following functions:
In addition to these services, in order to validate identities in Australia additional services are used, such as government, and bank digital identities.

SIM as Digital identity

The use of a mobile phone SIM as a Digital identity in Australia provides some level of validation of the digital identity of the holder. Validation of the holder can be done by sending them an SMS to their phone number. The advantage of this mechanism is:
For this reason the mobile phone is often used as a primary or second-factor validation of identity on Australian digital services.

myGov

myGov is a service provided by the Government of Australia that provides a strong level of validation of digital identity. It is used primarily for Government and semi-Government services such as:
myGov also integrates with Australia Post [|MyPost Digital Mailbox] to facilitate secure electronic document delivery, as most government departments avoid the use of e-mail to directly deliver private documents.
myGov logins also support a number of other login services especially in government such as
Origination of a myGov account can be done without the use of identity documentation, so it is possible to create an account without a valid natural person. However, as services are added, access to private information, such as documents or identity that should only be known by the individual concerned, is required, making the identity stronger. Many services require a second factor of authentication - SMS via a SIM based mobile phone number as mentioned above.

myGovID

Separate to myGov, myGovID is a digital ID component, that allows a form of Second Factor Authentication to Government websites through a mobile app. A user attempts a login online using their email, a pin is generated, and the user types the online pin into their mobile app, and online login can be completed.
The myGovID application supports government departments building their own websites, and does not require the single portal access of myGov.

Australia Post Digital iD

Digital iD by Australia Post is a smart phone based app that allows users to create and validate their ID against the Australian Government Document Verification Service and then use it as a primary ID system online and in person.
Users can use their Passports, Drivers Licenses, Medicare Card to assert and confirm ID online. A photo is taken, and head movement is detected to ensure the holder is real and their face matches. Your passport can be scanned using the phone's NFC reader and used to assert biometrics. The user's image with dynamic security features, and an updating QR code are then displayed to people to verify the ID. The date of birth and full name are displayed on the app. Australia Post claims it is acceptable for use to validate the holder's identity. It can be used instead of KeyPass for holders 18 years and older. 
The Digital iD website states that it is used by over 50 government and private organisations across a variety of industries and sectors. Launched in 2016, questions were raised as to longevity of the offering after the founder quit, however, continued investment from Australia Post has seen Digital iD become the first industry provider accredited under the federal government’s Trusted Digital Identity Framework. Usage of Digital iD is growing, and Keypass in Digital iD is now accepted as proof of age to enter participating licensed venues and to purchase alcohol in Vic, Tas, Qld, ACT and NT.

Online Banking

Online Banking in Australia requires digital identification. As in other jurisdictions, access to bank accounts statements and making payments are the primary services available. In addition to these, it is possible to access documents from other corporations online using BPAY View. Over 300 billers are supported via this mechanism.
For some transactions multi-factor authentication is required. Normally this is a password in combination with a code sent via SMS or in some cases, especially for business customers, a bank-issued security token.
Most online banking services, especially if accessing an account requires the holder to complete stringent identity requirements sometimes in a bank branch. This ensures the quality of the identity.
The four major online banking sites in Australia are:
Some States and territories of Australia offer access points to Government services in those states, and require a digital identity to access these services.
Service NSW is an example - an account can be created without any verifiable identity, however as services are added, private details need to be accessible, increasing the validity of the identity.
The South Australian government has made several digital licences available via the mySA GOV app.
NSW also provides some licences online.
Queensland's Department of Transport and Main Roads is currently trailing a digital license in the Fraser Coast Region.

Tax file number

The Australian Tax file number is a 9 digit identity document issued to tax payers. There is no card or official identity document in popular use that shows this number and strict rules on its use means that it is not required to be provided, and there is no practical way a non government entity to verify the holder against the number. It is therefore not an effective widespread digital identity. However it is used to digitally identify tax paying entities behind transactions via financial institutions when the number has been disclosed. Failure to disclose the tax file number can draw attention to the transaction and/or result in tax being withheld, so it is used for specific purposes.

Digital identity verification services

Identity and associated information can be verified a number of ways: