Document ID: chunk:federal_register_of_legislation:F2025C00142:reg:17
Version: federal_register_of_legislation:F2025C00142
Segment Type: reg
Provision Reference: reg 17
Character Range: 15652–16931

17  Exceptions to Australian Privacy Principle 9.2—Centrelink Confirmation eServices (customer confirmation and income confirmation)
 (1) For subclause 9.3 of the Australian Privacy Principles:
 (a) each of the following is a prescribed identifier:
 (i) a Customer Reference Number;
 (ii) a DVA file number;
 (iii) a DVA unique identification number; and
 (b) an organisation is a prescribed organisation if the organisation:
 (i) is a participant in the Centrelink Confirmation eServices scheme; and
 (ii) is included in a class of organisations set out in the table in subsection (2); and
 (c) the prescribed circumstance is that a prescribed organisation uses or discloses an individual's prescribed identifier, with the individual's consent, to access services provided under the Centrelink Confirmation eServices scheme to enquire whether the individual is entitled to receive a concession, service or assistance.
 (2) The classes of organisations are set out in the following table:

Classes of organisations that can use or disclose Customer Reference Numbers, DVA File Numbers and DVA unique identification numbers
Item                                                                                                                                  Class of organisation