Proving you're you: The coming transformation of digital identity in Australia

In the new digital economy, proving who you are has never been more important, more frequently required or more frustrating. From accessing government services to verifying identity for financial products, the friction of digital identity has steadily increased, even as the stakes have grown. New laws targeting fraud prevention, child safeguarding, anti-money laundering, and age verification continue to expand the scope of the problem, pushing organisations and regulators to finally bridge the gap between physical and digital identity.

For decades, Australia's fragmented identity ecosystem has resisted resolution. A patchwork of Tax File Numbers, driver licences, Medicare cards, passports, utility bills, and birth certificates has left both government agencies and private organisations stitching together identity verification from credentials never designed to work together. 

Recent initiatives, including the Digital ID Act 2024, the expansion of the Australian Government Digital ID System (AGDIS), and the accreditation of private sector identity providers are slowly changing this, but it is not without significant risks for citizens, organisations or policy makers.

Citizens and policymakers, need to worry about surveillance, entitlement management, and the erosion of the pseudonymity that we currently enjoy, and understand that digital identity system that is convenient by design may also be controlling by design, with these considerations making up the bulk of public discourse.

For organisations, especially Privacy Officers, CISOs, and HR leaders, the risks are equally significant but less discussed. Stronger, portable digital identities risk collapsing the boundary between personal and professional personas, creating new liability exposures and complicating the already difficult problem of insider threat, offboarding, and employee data handling. A major breach of a centralised identity credential could simultaneously expose an individual's government, financial, and employment records in ways today's fragmented system structurally prevents.

This talk will assess where Australia's identity landscape is heading, and what organisations will need to prepare for. It will cover the regulatory trajectory, including the Digital ID Act, the evolving role of regulators like the OAIC, and emerging age verification mandates, as well as the technology landscape of verifiable credentials, digital wallets, biometrics, and federated identity. 

Attendees will leave with a clear framework and understanding for evaluating the identity transformation decisions their organisations will inevitably face: what data to collect, how to store it, what liability it creates, and how to prepare for a world where a single leaked credential may be far more damaging than a leaked password.