Service Victoria Act 2018

user choice—individuals are to be able to choose whether to store a record of an electronic identity credential for future use;

minimal data is to be requested and stored—individuals must not be asked to provide more information than necessary in order for Service Victoria to verify the individual's identity and personal information can only be stored with the individual's consent, unless required by law;

risk-based approach to identity verification—a consistent and evidence-based approach is to be employed to determine the level of assurance of identity required for transactions;

security, transparency and accountability—Service Victoria, and any external service providers engaged to provide identity verification services are to be regularly audited by an independent entity to ensure compliance with privacy and data security requirements;

flexibility—the standards must, to the extent practicable, be able to adapt to new technologies or methods of identity verification;

national consistency—the standards must, to the extent practicable, align to national requirements, as set out in any relevant national framework or guidelines as in force from time to time.