Site Changes

On 1 November 2010 the Office of the Privacy Commissioner was integrated into the Office of the Australian Information Commissioner and a new website established at www.oaic.gov.au.

Note 1: Major changes to the Privacy Act 1988 will come into effect in March 2014. Agencies, businesses and not for profits need to start preparing for these changes. For more information go to our privacy law reform page at www.oaic.gov.au
Note 2: From 12 March 2013 content is no longer being added to, or amended, on this site, consequently some information may be out of date. For new privacy content visit the www.oaic.gov.au website.

Types

Topic(s): Identity and ID | Technologies

Media Release: Privacy Commissioner advises pubs and clubs on ID scanning obligations

30 August 2007

The Australian Privacy Commissioner, Karen Curtis, has today issued advice to pubs, clubs and other organisations that scan people's ID documents or are considering doing so to seriously consider their obligations under the Privacy Act.

"If pubs and clubs that scan people's ID fail to heed their obligations under the Privacy Act, they run the risk of breaching their customers' privacy and having a privacy complaint lodged against them," Ms Curtis said.

According to the results of a national privacy survey, released by the Privacy Commissioner on Tuesday, only 18% of Australians believe that it is acceptable for their ID to be copied or scanned when entering licensed premises.

Ms Curtis said that her Office received its first complaint on ID scanning in December 2001, but that recent months had seen an increase in the number of enquiries and complaints on the issue, possibly because of a growth in the number of pubs and clubs using scanning technology.

"People are understandably concerned that having their ID scanned could lead to identity theft, or that their details will be used by the pubs or clubs for unrelated purposes, such as direct marketing," Ms Curtis said.

In an information sheet on ID scanning published today, the Privacy Commissioner outlined the various obligations organisations have under the Privacy Act. These include:

Allowing patrons to interact with them anonymously where possible.
Only scanning people's ID if the organisation can prove it needs it for its functions and activities, and has established that sighting the ID is not sufficient.
Only collecting the minimum amount of information needed.
Giving people notice as to why their ID is being scanned and what will be done with the information.
Only using the information for the purposes for which it was collected.
Protecting the scanned information from misuse and loss.
Destroying the information when it is no longer needed.

"If any pub or club patrons believe that their privacy has been breached or the practices of a pub or club do not conform with the Privacy Act, I encourage them to contact my Office for advice," Ms Curtis said.

Some Frequently Asked Questions on ID scanning have also been made available.

For media inquiries, contact 02 9284 9806 or 0407 663 968.