Privacy Code of Practice (General) Amendment (Document Validation Services) 2017 (NSW)

New South Wales

Privacy Code of Practice (General)

Amendment (Document Validation Services)

2017

under the

Privacy and Personal Information Protection Act 1998

I, the Attorney General, in pursuance of section 31 of the Privacy and Personal Information

Protection Act 1998, do, by this my Order, make the following Privacy Code of Practice.

Dated, this 20th day of November 2017.

MARK SPEAKMAN, MP

Attorney General

Explanatory note

The object of this Order is to amend the Privacy Code of Practice (General) 2003 to make provision with

respect to the collection, use and disclosure of certain personal information by the Registry of Births, Deaths and Marriages for the purposes of the CertValid certificate validation service and the National Document Verification Service.

This Order is made under section 31 of the Privacy and Personal Information Protection Act 1998.
Privacy Code of Practice (General) Amendment (Document

Validation Services) 2017

under the

Privacy and Personal Information Protection Act 1998

1      Name of Order

This Order is the Privacy Code of Practice (General) Amendment (Document
Validation Services) 2017.

2      Commencement

This Order commences on the day on which it is published in the Gazette.

Page 2

Schedule 1 Amendment of Privacy Code of Practice (General)
2003

Part 7

Omit the Part. Insert instead:

Part 7 Registry of Births, Deaths and Marriages

19      Collection, use and disclosure for document validation services

(1)  Despite the information protection principles, the Registry of Births, Deaths and Marriages may collect, use or disclose personal information for the verification (by way of a validation service) of personal information contained in a proof of identity document issued by the Registrar of Births, Deaths and Marriages if:

(a)

the document has been presented to a government or non-government agency or organisation authorised to use the validation service, and

(b)

the collection, use or disclosure is in accordance with any applicable operating protocols of the validation service.

(2)

In this clause:

validation service means:

(a)	the CertValid certificate validation service operated by the Registry of Births, Deaths and Marriages, or
(b)	the National Document Verification Service managed by the Commonwealth Attorney-General’s Department.

Page 3