Identity security

Protecting your identity

Your Western Australian driver’s licence is a key identity document, which makes it a target for criminals. Stolen or fake licences can be used for identity theft, fraud, or impersonation, making identity crime an increasing issue in Australia.

To better protect your identity and help prevent identity crime, Western Australia participates in the Australian Government’s Identity Verification Services, which includes the Document Verification Service (DVS), Face Verification Service (FVS) and National Driver Licence Facial Recognition Solution (NDLFRS).

What is the DVS?

The DVS is a secure, national system that enables Government agencies and approved organisations, such as banks and telecommunication providers, to verify biographical information on identity documents against the corresponding record held by a document issuing or authorised Entity.

The DVS provides a ‘yes’ or ‘no’ response as to whether certain biographical information (for example name, address, driver’s licence number) on an identity document matches the official records held by the government authority that issued the document, and that the document has not been revoked.

The DVS does not check facial images and has been available to Government agencies since 2009 and private sector organisations since 2014.

What is the NDLFRS?

The National Driver Licence Facial Recognition Solution (NDLFRS) is a secure national system enabling authorised entities to verify an individual's identity by comparing facial images stored on Australian driver’s licences.  

The NDLFRS is part of the Australian Government’s broader Identity Verification Services (IVS) framework and is hosted on a secure Australian Government platform. The Department of Transport and Major Infrastructure will always retain complete control over the facial images and other identity information associated with WA driver’s licences. Further information on IVS and how the NDLFRS handles your information can be found at www.idmatch.gov.au

Why Western Australia participates in the NDLFRS

In October 2017, all Australian states and territories signed an intergovernmental agreement to participate in the Commonwealth Government’s Identity Matching Services.  The purpose of this initiative is to facilitate the sharing and matching of identity information to prevent identity crime, support law enforcement, uphold national security, promote road safety, enhance community safety, and improve service delivery, while maintaining robust privacy and security safeguards.

Western Australia’s participation in the NDLFRS helps to:

• protect driver’s licence holders from identity theft and fraud;
• make it harder for criminals to use false or stolen identities;
• support accurate and secure identity checks; and
• help authorised entities confirm that a person is who they claim to be.

By verifying identity using facial matching, the system adds an extra layer of protection beyond name and document number checks alone.

What information is shared?

For the purposes of the NDLFRS, Western Australia provides limited driver’s licence information, which may include:

• your driver’s licence photograph
• your name
• date of birth
• driver’s licence number

Information such as traffic infringements, demerit points or driving history is not shared through the NDLFRS.

How the system is used

Government agencies may use the face verification service, with an individual’s express consent, to match their photo/image against a government record such as a driver’s licence or passport image.  

The NDLFRS:

• cannot be used for mass surveillance
• can only be used with the express consent of the individual to whom the information relates
• does not allow general searching of the community
• provides a ‘yes’ or ‘no’ result against photo/images submitted in a match request - no images or personal information are shared
• only permits access by authorised users for approved purposes, at this stage only approved Government agencies can access the FVS and NDLFRS.

All use of the system must comply with strict legal, privacy and security requirements, including provision of the express consent from individuals to use the service.

Legal authority and privacy protections

Western Australia’s participation in the NDLFRS is authorised under the Identity Verification Services Act 2023 (Cth) and WA road law (as defined in s.4 of the Road Traffic (Administration) Act 2008) and supported by national agreements with the Commonwealth.

Your personal information is protected by:

• the Identity Verification Services Act 2023;
• Commonwealth and State privacy laws; and
• strict access controls, auditing and oversight arrangements.

All participating agencies must meet strong security standards and are subject to monitoring and compliance obligations.

Security of your information

Driver’s licence data shared with the NDLFRS is stored in a secure system hosted by the Australian Government. The system:

• meets Commonwealth information security requirements;
• has been independently assessed; and
• includes safeguards to prevent unauthorised access.

If a serious data breach were ever to occur, affected individuals would be notified in line with legal requirements.

Do you need to do anything?

No action is required from you.

Western Australian driver’s licence holders cannot opt out of participation in the NDLFRS, as it operates under state and national law to protect identity security across Australia. Your express consent will be required on each occasion an organisation seeks to verify your identity using the face verification service.  

More information

You can find more information about national identity verification services and how they protect your personal information at www.idmatch.gov.au.

If you have concerns about the use of your personal information or identity security, you can also contact us or view our privacy policy.

Once your driver's licence number is changed, you'll need to provide your new driver's licence number:

• when using our online or phone transaction services
• to other organisations that require your personal identity information (for example, banks, insurance agencies, telecommunications companies)
• to re-register for BPAY View (if applicable). We will cancel any previously held BPAY View registrations.
• in the learner's Learn&Log app (if you supervise a learner driver).