Question 1

What is the difference between AUSTRAC and the eSafety Commissioner for age verification?

Accepted Answer

These are entirely separate regulatory regimes. AUSTRAC oversees AML/CTF obligations for financial services entities under the AML/CTF Act 2006 — age verification in this context is part of Know Your Customer (KYC) requirements. The eSafety Commissioner oversees online content age assurance under the Online Safety Act 2021 and Social Media Minimum Age Act 2024. A platform providing both financial and social services may be subject to both regimes.

Question 2

Does the under-16 social media ban apply to all apps?

Accepted Answer

No. The ban applies to "age-restricted social media services" as designated by the Minister. The current definition captures platforms primarily used for social interaction between end users. The Minister has designated Facebook, Instagram, TikTok, Snapchat, and YouTube. Messaging apps, gaming platforms, and educational platforms may be excluded depending on their primary purpose.

Question 3

Can facial age estimation alone satisfy Australian age verification requirements?

Accepted Answer

No. The Online Safety Codes (Phase 2, effective March 2026) require a layered approach. Facial age estimation is accepted as a component, but platforms must combine it with additional verification signals. The Commissioner also requires documented bias assessment before deployment of biometric methods.

Question 4

How does the Privacy Act 1988 apply to age verification data?

Accepted Answer

The Privacy Act 1988 and the Australian Privacy Principles (APPs) require that personal information (including biometric data collected during age verification) be collected only for a lawful purpose, used only for that purpose, stored securely, and retained only for the minimum necessary period. APP 11 requires age verification providers to destroy or de-identify information when it is no longer needed. Biometric information is classified as sensitive information under the Privacy Act, requiring explicit consent.

Question 5

What is Australia's Digital ID Act 2024 and how does it affect age verification?

Accepted Answer

The Digital ID Act 2024 created a national framework for government-issued digital identities (building on the previous myGovID system). Once fully deployed, accredited Identity Service Providers (ISPs) can issue a digital identity credential that carries an age attribute. A platform can request only an age-pass signal from the ISP — receiving a binary confirmation (over/under 16 or 18) without accessing the user's full identity data. This "minimum necessary" architecture is designed to satisfy both age assurance and Privacy Act requirements simultaneously.

Question 6

Is employment verification legally required in Australia?

Accepted Answer

The only legally mandated check for all hires is the VEVO check for non-citizen candidates under the Migration Act 1958. All other employment verification — work history, qualifications, references — is not universally required by law for most roles, but is strongly recommended as standard practice. For regulated sectors such as financial services (AUSTRAC, ASIC), healthcare, aged care, and education, specific checks (including National Police Checks and WWCCs) are mandated by sector-specific regulators.

Question 7

Can I conduct a VEVO check without the candidate's consent?

Accepted Answer

No. Employers need the candidate's permission — and must provide the candidate's visa details and date of birth — to conduct a VEVO search. The candidate may also conduct their own VEVO check and share the result with the employer. VEVO checks are free, instant, and available 24/7 via the Department of Home Affairs online portal.

Question 8

How should I handle a candidate's Tax File Number during recruitment?

Accepted Answer

Do not request a candidate's TFN during the recruitment or verification phase. A TFN declaration form is completed by the employee on or after their start date for PAYG withholding purposes. Collecting a TFN before employment commences is unnecessary and could breach the Privacy (Tax File Number) Rule 2015. Handle any TFN information strictly in accordance with ATO guidance and your organisation's privacy policy.

Question 9

How long can I retain verification documents after the hiring process?

Accepted Answer

The OAIC recommends retaining unsuccessful candidates' personal data only as long as reasonably necessary — typically three to six months after the end of the recruitment process. For successful candidates, verification records form part of the employment file. The Fair Work Act 2009 requires employment records to be kept for seven years. Consult your Privacy Officer or legal counsel for a retention schedule specific to your organisation and state.

Question 10

What happens if a verification check reveals a discrepancy?

Accepted Answer

Raise the discrepancy with the candidate and give them the opportunity to explain. Minor inconsistencies — slightly different job title wording across documents — may have innocent explanations. Material misrepresentations — a qualification that was never awarded, an employment period that cannot be confirmed, or a VEVO check showing no work entitlement — are grounds to withdraw the conditional offer. Always document the discrepancy, the candidate's response, and the decision made, to support any future challenge.

Guide

Age Verification Online in Australia: AUSTRAC, eSafety and Compliance

Employment Verification in Australia: How to Check a Candidate's Work History

Background Check Documents: What Employers Need

CheckFile vs Veriff: complete comparison 2026

CheckFile vs Onfido: complete comparison 2026

CheckFile pricing: complete cost breakdown and ROI guide

CheckFile vs Trulioo: complete comparison 2026

Document Verification Pricing: Costs, Models and ROI

Document retention requirements in Australia

Equipment Finance Document Checklist by Lender

KYC Solution Pricing: Costs & ROI

KYB: the complete guide to business entity verification

How to set up automated document verification workflows

Document Validation API: Developer Guide

CheckFile vs Sumsub: complete comparison 2026

Document Verification Solution Selection Criteria: Evaluation Framework

Customer Due Diligence Checklist by Industry Sector

Identity Verification Solutions: Costs & Compliance

Best Document Verification Software 2026: Complete Buyer's Guide

CheckFile vs IDology (GBG): complete comparison 2026

Anti-Fraud Best Practices for Document Processing Teams

AI Document Validation: Buyer's Guide

Electronic invoicing compliance guide for Australia

Electronic Document Archiving: Guide

CheckFile vs Jumio: complete comparison 2026

myGovID and Digital Identity in Australia: Transforming

Customer Onboarding Best Practices: Reduce Friction

Practical Guide to Document Verification in 2026

KYC Banks vs Fintechs: Requirements Compared in 2026

Data Privacy Compliance: Privacy Act 1988, APPs, CDR