Keeping up with DVS compliance - upcoming changes

Is your business up to speed with incoming DVS changes? The Document Verification Service (DVS) Business User Agreement is evolving to reflect stronger security and privacy measures mandated by the Identity Verification Services Act 2023. DVS Participation Agreements will replace legacy DVS Agreements, bringing them in line with the Act. The deadline to sign the new agreement is currently 14 June 2025, however this may be extended following industry concerns around having insufficient time to complete the requisite system and process changes. Potential Extension of Deadline: The Attorney-General's Department is currently consulting on a six month extension to 14 December 2025. Note that once the deadline has passed, the DVS may not be used without a signed Participation Agreement in place. If your business uses the DVS, you'll need to get up to speed with new requirements sooner rather than later. Here's what you need to know:

Key DVS updates

Agreement changes

As mentioned above, if you want to continue to use the DVS, you must sign and return the new DVS Participation Agreement by the 14 June 2025 (or the 14 December 2025 if the Act is amended following consultation). To streamline the process and eliminate the need for physical signatures, the DVS Participation Agreement can be digitally signed and witnessed. Once the agreement is signed, it must be uploaded via DVS's Noggin platform.

Compliance and self-assessment

A new compliance statement process is being introduced, which is likely to involve a self-assessment and declaration of compliance. The Framework Administrator has commissioned a DVS Privacy Impact Assessment (PIA). Business Users must ensure that their use of the DVS is consistent with the findings and recommendations of this PIA applicable to their use of the DVS.

Individual consent

Where previously express consent was a requirement under the Privacy Act, it is now a requirement under the Identity Verification Services Act 2023. This includes capturing express consent from customers before collecting, storing, or using identity information.

Overseas access

The new rules explicitly forbid accessing the DVS from overseas without prior approval. Any requests for overseas personnel or access must be sent to IVS.Manager@ag.gov.au. The LAB team is keeping a close eye on DVS developments, and we are adjusting our solutions accordingly. We're also available to support your business as you work through the DVS changes, ensuring that your identity verification process stays robust, compliant and effective.