What security and privacy rules apply

Security and privacy rules protect your information, and we strictly control and monitor a business’s access to CCeS.

To use CCeS, a business must have signed a contract with us. They will also need your consent before they can confirm details about you.

Giving consent

Before a business can check your information with us they must get your consent. Consent is voluntary and it is your choice to give your consent.

Businesses may collect your consent verbally, in writing or online. They must keep a record of your consent and give it to us to check if we ask them to. This record must say what information they will access from us and what they will use it for. This record should also say if they will disclose your information to any other parties.

The business may ask for your ongoing consent until you withdraw it or stop using their services. Or they may ask for your consent for a single request.

Once you give your consent, they’ll use CCeS to check your personal details and confirm if you’re eligible for their concession, rebate or service.

Withdrawing consent

You can withdraw your consent and stop a business getting information about you through CCeS at any time. You can do this by telling the business or us.

You don’t have to give a reason for withdrawing your consent.

If you withdraw your consent, you may need to provide the business with other proof of your circumstances. This is so they can check that you’re still eligible to get their concession, rebate or service.

Your privacy

You have a right to have your personal information kept private and secure. Read about your right to privacy to find out more about how we handle your personal details.

If you think a business has infringed your privacy or confidentiality, you should tell the business or contact us.

Page last updated: 2 February 2023.
QC 51782