Digital ID opens to the private sector from 30 November 2026

From 30 November 2026, private sector entities can apply to participate in the Australian Government Digital ID System as either accredited entities or relying parties. The December 2025 government update reports 15 million Digital IDs created and 80 million ID-verified transactions in the preceding year. This is not a pilot. It is established infrastructure opening to commercial participation.

What Digital ID is

The Digital ID Act 2024 established the Australian Government Digital ID System (AGDIS), providing individuals with secure, voluntary ways to verify their identity online with government and businesses. It is co-regulated by the ACCC and OAIC, which means competition and privacy objectives are baked into the governance framework (a deliberate choice that distinguishes it from purely market-led approaches in other jurisdictions).

Following consultation in 2025, reforms to the Digital ID Rules and Accreditation Rules were introduced in November 2025, setting the framework for wider participation.

Why this matters for marketing and analytics

Digital ID creates a standardised, verified identity layer. For marketing, this has three potential applications.

Identity resolution. Probabilistic identity matching (the cookie-and-device-graph model) is degrading under privacy regulation and platform changes. Digital ID verifies identity for a service; it is not a replacement advertising identifier. Accredited entities face specific restrictions on profiling and marketing under sections 53 and 55. A relying party must separately assess its own permitted collection and use. Consent to verify identity does not create permission to track someone across services.

Age verification. The social media age restrictions and Phase 2 Online Safety Codes require age verification that goes beyond self-declaration. An age attribute may support an appropriate verification flow, subject to the applicable rules and alternatives. Digital ID is not automatically required or sufficient for every age-assurance obligation.

Consent management. A verified service interaction can help maintain accurate records within an authorised relationship. It does not turn identity verification into marketing consent or authorise cross-device profiling.

The Digital ID privacy safeguards make that distinction central: the opportunities are trusted service access and proportionate verification, with limits on secondary use.

The strategic view

Digital ID is part of a broader shift toward consent-based, verifiable identity infrastructure in Australia. It sits alongside CDR expansion and the Privacy Act reforms as part of a new data governance architecture. Organisations that engage with this infrastructure early have an opportunity to improve verification, service access and customer trust. Those that wait will be building on an identity infrastructure that is progressively less capable and less compliant.

IMO this is one of the more under-discussed pieces of Australian digital policy right now, and the marketing implications are larger than most teams have priced in.