GBG is obliged under the terms of its agreement with its Supplier, Superchoice to ensure that all End Users agree to comply with the following licencing provisions.

1. DEFINITIONS

"IDV Services" means the services provided by Superchoice that facilitate the verification of the identity of a Data Subject.

2. USE OF THE DATASET
2.1. When requesting and receiving the IDV Services, The End User must ensure that:
a) Prior to requesting any IDV Services in respect of any Data Subject, the End shall obtain, or, where applicable, ensure that the End User’s agent has obtained, the prior express authority and Consent of that Data Subject to access, on behalf of that Data Subject, the personal information held by Superchoice in respect of that Data Subject for the purpose of verifying the identity of that Data Subject.
b) The End User shall not do anything or omit to do anything that may cause Superchoice to be in breach of any Applicable Data Protection Laws;
c) The End User shall not, by any words or actions, hold itself out to be an agent of Superchoice;
d) The End user shall comply with obtaining all obligations in respect of obtaining Consent; and
e) The End User shall not do anything or omit to do anything that damages, precludes access to, or enables unauthorised access to any data held by Superchoice or that diminishes the ability of Superchoice to provide the IDV services.

3. CONSENT ELEMENTS
3.1. The Consent received must include the following elements:
(A) the Data Subject’s authorisation for the End User to act as the Data Subject’s intermediary to access personal information about the Data Subject lawfully held by a third party pursuant to the Data Subject’s right to such access pursuant to the Privacy Act 1988;
(B) the Data Subject’s consent for the End User to disclose to GBG the personal information provided to the End User by the Data Subject for the purpose of verifying the Data Subject’s identity
3.2 The End User shall:
(A) obtain the consent from the individuals, in accordance with the consent text below, before requesting any IDV Service;
(B) retain a copy of such consents; and
(C) provide a copy of such consent upon GBG’s request and ideally within less than 14 days.

3.3 A sample of consent text that is satisfactory for the purpose of these terms are set out below:

For the purposes of identity verification and fraud prevention, you consent to the collection of your personal information and disclosure of that information to third parties. Where required, you authorise [Customer Name] as your intermediary to access certain information held about you. All information provided to [Customer Name], will be managed in accordance with the Australian Privacy Principles and our privacy policy. If you do not consent you may be unable to access the product or service you are seeking.