The Australian Communications and Media Authority (ACMA) has released a public consultation paper on proposed variations to customer ID authentication rules to prevent unauthorised access to phone services, such as fraudulent SIM-swaps.
The protections under the Telecommunications Service Provider (Customer Identity Authentication) Determination 2022 have led to a significant drop in fraudulent high-risk customer transactions (i.e. reports about mobile number fraud decreased by over 69% between 2021 and 2023), and they continue to provide critical protections to consumers.
The ACMA is proposing to vary the instrument to support innovation, strengthen the requirements to protect vulnerable people and provide further clarity to the telecommunications sector.
The proposed variations include:
- the introduction of passkeys as an efficient ID check
- allowing accredited digital identity services to be used as a primary ID check
- changes to the way biometrics can be used given the inherent risks involved
- enhanced guardrails on record keeping and privacy arrangements.
Subject to consideration of submissions, and following the variation of the Determination, the ACMA also anticipates developing guidance for industry on best practices and compliance obligations for the varied instrument.
The consultation paper and draft instrument is available on the consultation page, and we will accept submissions until Friday 14 February 2025.