Terms and conditions
Here, you'll find detailed information about what the Queensland Digital Identity (QDI) represents, its administration by the Department of Customer Services, Open Data and Small and Family Business and, your rights, responsibilities, security obligations, and the conditions under which you use QDI. This section will help you understand how you can use QDI to authenticate your identity for online services, the steps for setting it up with the required identity verification documents, the ways in which your personal information is handled, and what is expected from you in maintaining the security of your QDI.
Please read these terms carefully to ensure that you understand and agree to how your QDI operates. By establishing and using your QDI you indicate your acceptance of these terms and conditions, which are subject to change. The current version of these terms and conditions is always available on this page for your reference.
1. About QDI (Queensland Digital Identity)
1.1 Your QDI is a digital identity (Digital Identity) – an identity created and verified digitally that can be used for authentication and authorisation when you access online services. For example, you may use your QDI to establish your identity when you set up your Digital Licence.
1.2 Your QDI and the system and services that provide your QDI (the QDI System) are administered by the State of Queensland acting through the Department of Customer Services, Open Data and Small and Family Business (CDSB).
1.3 These QDI Terms and Conditions (Terms of Use), including the Privacy Collection Notice which forms part of the Terms of Use, apply to your use of and access to your QDI, which includes use of and access to the QDI System.
1.4 Terms of Use may change over time. When you use your QDI, you agree to be bound by the applicable Terms of Use, as published on this page at that time. If you do not agree, you must cease using and deactivate your QDI by following the process on the Queensland Digital Identity page. You must also ensure that you are aware of other terms and conditions, and laws that apply to or are relevant to use of your QDI, as updated from time to time. These may include the Digital Licence App end user licence agreement, as well as requirements that apply to specific uses of your QDI. CDSB, other Queensland Government agencies and other third parties may apply separate terms and conditions in relation to your use of their credentials or access to their services.
2. Your QDI Digital Identity
2.1 Getting Started
- You can establish a QDI by using the QDI System. You may also choose to provide us with details of documents that help prove who you are, such as your driver licence, Australian passport, birth certificate and other eligible documents (Identity Documents) to establish higher levels of identity proofing for your QDI.
- During the process of establishing a QDI, you will be asked to provide certain consents to us collecting, using and disclosing your personal information and verifying your identity. If you do not provide these consents, you will not be able to establish or use a QDI.
- If you provide details of your Identity Documents via the QDI System, we will check those details against the Queensland Department of Transport and Main Roads (TMR) system of record (for TMR-issued Identity Documents), and the service provided by the Australian Government known as the Document Verification Service (for other government-issued Identity Documents). Your QDI will be updated once your Identity Documents are verified. The Privacy Collection Notice sets out further information about these processes.
2.2 What you can use it for
- You can use your QDI to 'prove who you are' in online dealings with government agencies who rely on your QDI (Relying Parties).
- Using the QDI System, you can:
- give your specific consent for a Relying Party to access your QDI to verify your identity, or some attributes associated with your identity such as your name, date of birth, email address or a unique identifier that links your identity with the Relying Party, or
- access the services of multiple Relying Parties using your QDI to authenticate.
- Some Relying Parties may require a higher level of identity proofing for certain transactions (e.g. to Identity Proofing Level IP2+). You can apply to upgrade your QDI when a higher level is available through the QDI System by providing the required Identity Documents and participating in any required biometric matching.
2.3 QDI management and updates
- From time to time, we may change the process to identify you, levels of identity proofing available using your QDI, the required Identity Documents, or submission and verification processes, without notice to you. We may also require you to provide additional personal information or consents, or to perform any new or altered processes to continue accessing QDI services. If you are not willing to accept those changes or requirements, you should cease using and deactivate your QDI by following the process on the Queensland Digital Identity page.
- We may also:
- suspend, revoke or make amendments to your QDI where reasonably necessary to correct an error, or to deal with a security risk, or breach or threatened breach of these Terms of Use
- issue updates or new versions of your QDI
- modify, or suspend or discontinue your QDI or any part of its functionality
- limit or restrict your access to certain features and services of your QDI, or
- correct any errors or omissions in your QDI or any data or information it contains or provides.
- Your QDI may be unavailable during scheduled and unscheduled maintenance. We may undertake maintenance activities without notice.
3. Your personal information
3.1 Your personal information
By applying for a QDI, you consent to us collecting, using and disclosing your personal information as set out in the Privacy Collection Notice.
The QDI System may also:
- require you to provide digital images for biometric matching checks against the digital photo stored by CDSB for TMR and undertake liveness checks, and
- check the Fact of Death file data administered by the Queensland Registry of Births, Deaths and Marriages.
You will retain control of the personal information in your QDI and how it is shared, until you choose to disclose information to a Relying Party. Please ensure you read and agree to the QDI Privacy Collection Notice, which forms part of these Terms of Use.
3.2 No tracking
We will not identify users or track your use of your QDI except:
- as stated in these Terms of Use or the QDI Privacy Collection Notice
- where otherwise reasonably necessary to operate the QDI System, and
- where we are required or authorised by law to do so.
4. What we ask of you
4.1 Your information
You must provide information that is true, accurate, current and complete to create your QDI and verify your identity. This may include personal information contained in Commonwealth, state or territory-issued identity documents.
4.2 Your security obligations
You are responsible for the security and use of your QDI and must take all reasonable measures to keep your QDI secure, including the following:
- keep your QDI details confidential and secure and not permit any other person to use your QDI
- immediately change your QDI password or other access details if you believe that those details have been compromised
- not access anyone else's QDI unless clause 4.3(b) applies
- keep all private information relating to your QDI, such as your username and password secure at all times, and
- let us know immediately by using the contact details in clause 8 if you suspect that the security of your QDI may have been compromised, including any security compromise relating to the username or password required to access your QDI, or any biometric or device security feature such as face scan or fingerprint, and any multi-factor authentication processes, that you may have consented to add to your QDI.
You are responsible for everything that anyone does if they access your QDI because of your failure to take these measures.
4.3 Updating information
- If the personal information you provide for setting up your QDI changes, you must update it within 14 days of the change by using the contact details in clause 8. We may request confirmation of your personal information from time to time through your QDI and you must provide this confirmation to us when requested.
- In the event of your death, we request that your representatives update your QDI account with this information or contact us to let us know by using the contact details in clause 8.
4.4 Lawful purposes
- You must use your QDI only for lawful purposes and in a manner that does not infringe the rights of others or restrict or inhibit the operation or use of the QDI System. This includes not doing anything that is unlawful, fraudulent, misleading or deceptive, including impersonating another person, whether living or deceased; that may harass or cause distress or inconvenience to any person; involves the transmission of obscene or offensive content; or that disrupts the QDI System.
- If you use or access the QDI System using a QDI or personal information belonging to another person or entity; or use another person's QDI to authenticate to a Relying Party's service, then you confirm that you have the necessary authority to act on behalf of that other person or entity. You must only use a QDI or access the QDI System on behalf of another person or entity within the scope of authorisation granted by that third party.
5. Intellectual property
All intellectual property rights in the QDI System and the data generated or produced via the QDI System, are owned by us or relevant third party rights holders. The QDI System may include open source or third party software, and your use of the QDI System is subject to any licences governing such software.
6. Disclaimers and indemnity
6.1 Your rights
Nothing in this clause 6 or any other part of these Terms of Use excludes any right or guarantee the Customer may have under Schedule 2 of the Competition and Consumer Act 2010 (Cth) and any equivalent state or territory legislation or other rights in relation to the supply of goods or services that cannot lawfully be excluded (Non-excludable Guarantee).
6.2 Disclaimers
- You should exercise your own skill and care with respect to the use of your QDI. Except as expressly set out in these Terms of Use and subject to Non-excludable Guarantees, we provide your QDI and the QDI System on an 'as is' basis, and to the maximum extent permitted by law, we make no statement, representation, or warranty:
- about the quality, accuracy, context, completeness, availability or suitability for any purpose of your QDI
- that your QDI will be accepted by any particular Relying Party
- that the QDI System is free of errors, malware or security vulnerabilities or available for use at any particular time without interruption, or
- that your QDI will meet your specific requirements.
- We do not accept liability for any loss, damage, cost or expense (to any person or property) including consequential or indirect loss or any loss of profits, data or revenue that could arise as a result of your use of or inability to use your QDI.
- We are entitled to assume that all transactions undertaken using your QDI were undertaken by you or with your permission, unless you have informed us that your QDI has been compromised. We will not be liable for any loss or damage that you may incur as a result of someone else using your QDI, either with or without your knowledge or consent.
- Any failure by you to keep your QDI secure may result in unauthorised transactions being undertaken or unauthorised access to and use of your QDI.
- You remain solely responsible for your dealings with any Relying Party. We accept no responsibility in connection with any action or inaction of any Relying Party or the systems or services of any Relying Party. Each Relying Party may require you to agree to their terms of use in connection with your use of that Relying Party website or service.
6.3 Indemnity
You agree to indemnify CDSB and our officers, employees, agents and contractors (those indemnified) from and against all actions, proceedings, claims, demands, costs (including all reasonable legal costs), losses, damages and expenses, and any direct, indirect, incidental or consequential loss or damage, including those arising out of the terms of any settlement, that may be brought against or made upon those indemnified and those indemnified may incur on their own behalf or sustain as a result of a third party claim, arising out of or as a consequence of your breach of these Terms of Use, or any wilful, unlawful, or negligent act or omission by you relating in any way to your QDI or the QDI System.
6.4 Capped Liability
To the fullest extent permitted by law, our liability under these Terms of Use, including our liability under any applicable Non-excludable Guarantee, is limited, at our option, to the supply of the relevant services again, or the payment of the cost of having the relevant services supplied again.
7. Termination
7.1 You may request deletion or deactivation of your QDI at any time by following the process on the Queensland Digital Identity page. If you request deletion, CDSB will delete your QDI account and associated information to the extent Queensland law permits and disposal is authorised; otherwise, CDSB will deactivate your QDI so that it can no longer be used. For more information about how CDSB collects, uses, discloses and retains your personal information (including in connection with deletion or deactivation requests), see the QDI Privacy Collection Notice.
7.2 We may immediately suspend your QDI at any time if we suspect that your QDI is involved in a security breach or fraudulent or illegal activity. We may also, at any time and for any reason, and without notice to you, restrict, suspend or terminate your access to your QDI in whole or in part, without notice, or terminate this agreement and deactivate your QDI, including where your QDI has not been accessed for an extended period.
7.3 If you or we deactivate your QDI and you wish to use your QDI again, you will need to establish your Digital Identity again in accordance with the processes described in clause 2.1 of these Terms of Use.
7.4 If your QDI is deactivated or deleted, we will retain a record of relevant QDI activity for at least 7 years following your last use of the QDI (and longer where required or authorised by law), in accordance with our recordkeeping obligations (including the Public Records Act 2023).
7.5 To the extent applicable, the Privacy Collection Notice and clauses 6 and 9 of these Terms of Use will survive termination of this agreement for any reason.
8. Contact
The QDI team is available for contact in relation to QDI by calling us on 1800 000 658 (within Australia) or +61 7 3022 6100 (if outside Australia) (24 hours a day, 7 days per week).
Mail:
Department of Customer Services, Open Data and Small and Family Business
PO Box 15086
CITY EAST QLD 4002
9. General
9.1 Governing law: These Terms of Use are governed by and are to be construed in accordance with the laws applicable in Queensland. Each party submits to the jurisdiction of the courts of Queensland.
9.2 Entire agreement These Terms of Use constitute the whole agreement between you and CDSB in relation to the QDI System and your QDI, and supersedes all prior representations, agreements, statements and understandings, whether verbal or in writing.
9.3 Severance: If any provisions of these Terms of Use are held to be invalid, unenforceable or illegal for any reason, then it will be severed from these Terms of Use and the remaining provisions will continue in full force.
9.4 Waiver: No provision of these Terms of Use will be taken to be waived except by written waiver executed between you and CDSB.
9.5 Definitions: In these Terms of Use:
- Digital Identity means an identity created and verified digitally from trusted sources. It is used to verify a person's identity in a secure way, to access online services and accounts, and includes a digital identity established using a QDI.
- Document Verification Service means the service provided by the Australian Government known as the Document Verification Service (DVS). DVS check whether the biographic information on your Identity Documents matches the original record. More information can be found on the Australian Government's ID Match website.
- Fact of Death means a compilation of death records from each of the State and Territory Registry of Births, Deaths and Marriages. The FoD file contains the full name, date of birth and residential address details of all persons who have died in Australia. FoD is administered by the Department of Justice in Queensland, through the Registry of Births, Deaths and Marriages (RBDM). More information can be found on the Queensland Government's publications portal online (Fact of Death frequently asked questions (RBDM Qld)).
- Identity Document means documents that help prove who you are, such as your driver licence, Australian passport, birth certificate and other eligible documents.
- QDI, Queensland Digital Identity means the Digital Identity provided by CDSB known as QDI or Queensland Digital Identity.
- QDI System means the software and IT systems and infrastructure that CDSB uses to provide your QDI.
- Relying Party means a person or entity that uses your QDI to authenticate into their systems or services, or who seeks attributes associated with your QDI as part of the delivery of a service to you. Relying Parties could be, for example, government agencies, online retailers or other service providers or entities you are dealing with online.