Document ID: chunk:federal_register_of_legislation:F2024L01438:reg:3
Version: federal_register_of_legislation:F2024L01438
Segment Type: reg
Provision Reference: reg 3
Character Range: 190948–194129

3                         IXP                      May disclose a restricted attribute of an individual                                                                                                                                                                                   Disclosure is for one of the following purposes:
                                                                                                                                                                                                                                                                                          (a) providing accredited services to other participants in the digital ID system in which the IXP operates;
                                                                                                                                                                                                                                                                                          (b) detecting, reporting or investigating a contravention, or an alleged contravention, of a provision of  the Act, these rules or the Accreditation Data Standards;
                                                                                                                                                                                                                                                                                          (c) conducting proceedings in relation to a contravention, or an alleged contravention, of a civil penalty provision of the Act;
                                                                                                                                                                                                                                                                                          (d) detecting, reporting or investigating a digital ID fraud incident within the digital ID system in which the IXP operates;
                                                                                                                                                                                                                                                                                          (e) detecting, reporting or investigating a cyber security incident within the digital ID system in which the IXP operates;
                                                                                                                                                                                                                                                                                          (f) conducting an assessment of a matter referred to in paragraph 33C(1)(g) of the Privacy Act; or
                                                                                                                                                                                                                                                                                          (g) detecting, reporting, investigating or prosecuting an offence against a law of the Commonwealth, a State or a Territory.