Document ID: chunk:federal_register_of_legislation:F2024L01438:reg:14:p6
Version: federal_register_of_legislation:F2024L01438
Segment Type: reg
Provision Reference: reg 14 (pt 6/17)
Character Range: 153379–156319

procedures to detect any fraudulent activities conducted by assessing officers when conducting manual face comparison; and
Note: Details of the procedures must be included in the accredited entity's fraud control plan.
 (d) record in its system security plan and fraud control plan its procedures to implement and maintain quality control and quality assurance procedures for manual face comparison decisions made by assessing officers and ensure assessing officers comply with those procedures.

Subdivision C—Alternative proofing processes

5.22  Accessible and inclusive services
  This Subdivision:
 (a) applies for the purposes of subsection 30(1) of the Act; and
 (b) sets out a process for identity proofing for an individual who does not possess, and is unable to obtain, the documents or other credentials necessary to create a digital ID at the identity proofing level sought by the individual (alternative proofing process).

5.23  Requirements for an alternative proofing process
 (1) An ISP may conduct an alternative proofing process only if it is authorised to do so by an accreditation condition and only in the circumstances specified in the conditions.
 (2) An alternative proofing process may include one or more of the following:
 (a) acceptance of documents or other credentials not listed in Schedules 1 to 4;
 (b) verification of an individual's claimed identity with another individual who is a trusted referee, being a person who holds a position of trust in the community and whose identity has been verified to an equal or higher identity proofing level than the level requested for the alternative proofing process;
 (c) verification of an individual's claimed identity with a reputable organisation known to the individual;
 (d) reliance on the identity proofing processes of a reputable organisation that has verified the identity of the individual to the requested identity proofing level;
 (e) an interview with the individual that satisfies the ISP of the consistency and legitimacy of the individual's claims, including the validity of the claimed identity;
 (f) if an individual lives in a remote area—providing an alternative to an in-person interview;
 (g) providing support to an individual to obtain a necessary document or other credential which may include assisting the individual to register their birth; or
 (h) another process for identity proofing for an individual as detailed in the entity's accreditation conditions.
Example: For paragraph 2(c), Aboriginal and Torres Strait Islander organisations may be able to verify the identity of an individual if no government record for that individual exists.
 (3) Before undertaking an alternative proofing process to create a digital ID for an individual, an ISP must:
 (a) be satisfied that an exceptional use case exists in respect of the individual;
 (b) conduct a risk assessment, including of any risks to relying parties that may rely on the