Identity theft reforms

Consultation has concluded

Consultation Process

Now Closed

This online engagement was hosted on YourSAy from 5 February to 26 February 2021. Below is a record of the engagement.


We are seeking your feedback on proposed changes to SA’s identity theft legislation.

What’s being decided?

We are proposing to update the following legislation to reflect the changing nature of identity crime:

Under the current legislation, it is difficult to prosecute people who use a false identity or misuse personal ID information. It is not always possible for victims to get an

Consultation Process

Now Closed

This online engagement was hosted on YourSAy from 5 February to 26 February 2021. Below is a record of the engagement.


We are seeking your feedback on proposed changes to SA’s identity theft legislation.

What’s being decided?

We are proposing to update the following legislation to reflect the changing nature of identity crime:

Under the current legislation, it is difficult to prosecute people who use a false identity or misuse personal ID information. It is not always possible for victims to get an identity theft certificate to help them reverse the damage done as a result of having their identity stolen.

The proposed changes, included in the Statutes Amendment (Identity Theft) Bill 2021 would:

  • create a new offence of identity theft
  • make it easier to prosecute people who use a false identity or misuse personal ID information
  • simplify the criteria for getting an identity theft certificate

You can read more about the changes in the reforms summary page.

Get involved

Read the Statutes Amendment (Identity Theft) Bill 2021 and reforms summary page.

Have your say by:

  • joining the online discussion
  • responding to the online survey
  • emailing us at LLPSubmissions@sa.gov.au
  • posting written feedback to:

Attorney-General’s Department, Legislative Services
GPO Box 464
Adelaide, SA 5001

How can your input influence the decision?

Your input will help to ensure that the changes improve the effectiveness of identity theft legislation, and will better support victims to recover their identity and repair the damage done.

What are the next steps?

Your feedback will help us to finalise the Bill to be introduced into Parliament to update current legislation.

Parliament will consider the Bill in due course and an outcome will be available on this website.

Contact details

For general inquiries, email us at LLPSubmissions@sa.gov.au.

Closing date: 5pm, Friday 26th February 2021



Background


Now Closed

This online engagement was hosted on YourSAy from 5 February to 26 February 2021. Below is a record of the engagement.


In 2003, South Australia was the first Australian state/territory to enact legislation to specifically address identity theft.

Since then, the way that criminals use stolen or fake identities has changed significantly and reports of identity theft have increased greatly.

Identity thieves have been using the growth in online transactions and contactless payments to target members of the community via electronic communications - such as email and social media - to gather personal identity information.

A range of crimes are committed using the victim’s identity, as well as selling identity details on the black market.

The laws need to be updated to ensure that more identity theft offences are captured, particularly those that involve electronic crime – e.g. ‘card not present’ fraud, skimming and pay wave fraud.

Current identity theft laws have a very high threshold to prove criminal intent beyond reasonable doubt, which can be difficult for contemporary identity crime. By changing the requirement to prove intent for a criminal purpose (instead of a ‘serious’ criminal purpose) it will be easier to prosecute offenders who use a false identity or misuse personal information.

Victims can obtain an identity theft certificate to present to organisations (e.g. banks) to help them repair any damage to their finances or credit rating. However, under the current law, a victim can only get this certificate from a court once the offender has been convicted of the identity theft crime. There are many circumstances where it is difficult to locate the offender (e.g. they live overseas) or to take prosecution action. It is proposed that the law be changed to allow a court to issue an identity theft certificate where there is sufficient evidence that the person has been a victim of identity theft, regardless of whether any criminal proceedings have been or will be taken in relation to the offence.

Read more about the changes in the reforms summary page and have your say.

Consultation has concluded

  • Reforms summary

    Download the Identity theft reforms summary PDF

    Identity theft is a growing crime. People who use someone else’s identity often take money from the victim’s bank account or may make big purchases or take out loans in the victim’s name.

    Sometimes the dollar impact per victim may not be that high, but the overall damage can be significant. This can include damage to the victim’s credit rating, reputation, mental health or needing to take legal action.

    The following table summarises the proposed changes:

    Create a new offence of identity theft.

    It will be an offence to have another person’s identity information without a reasonable excuse.

    There are a number of “carve-outs” to allow for situations where it is legitimate to hold another person’s identity information.
    Make it easier to prosecute people who use a false identity or misuse personal ID information.

    In particular, it would be easier to take action in relation to high volume and low-value electronic crime – e.g. ‘card not present’ fraud, skimming and pay wave fraud.
    Simplify the criteria for getting an identity theft certificate.

    Help victims start the process of repairing any damage to their finances or credit rating.

    Identity theft has evolved

    South Australia was the first state/territory to enact legislation to specifically address identity theft in 2003. Since then, the way that criminals use stolen or fake identities has changed significantly and reports of identity theft have increased greatly.

    The latest Targeting Scams report by the Australian Competition and Consumer Commission (ACCC) shows that there were 837 reports of identity theft in SA in 2019. The report also states -

    Identity theft is becoming more common and it’s estimated that, on average, victims spend 22 hours repairing the damage…The aftermath of such scams can be long lasting and cause financial devastation. On top of this is the ongoing stress experienced by victims. (Page 14, Targeting scams 2019: a review of scam activity since 2009)

    SA’s identity theft legislation needs to be updated to ensure that more identity theft offences are captured, particularly those that involve electronic crime – e.g. ‘card not present’ fraud, skimming and pay wave fraud.

    The proposed changes aim to improve the effectiveness of identity theft legislation, and to better support victims to recover their identity and repair the damage done.

    Relevant laws

    We intend to amend the Criminal Law Consolidation Act 1935 and make related amendments to the Sentencing Act 2017 and Criminal Procedure Act 1921.

    Having another person’s identity information

    A new offence of identity theft would be created. It would be an offence to have another person’s identity information without a reasonable excuse.

    There would be some ‘carve-outs’ to allow for situations where it is legitimate to hold another person’s identity information. For example:

    • Government agencies, tax agents, accountants, health providers and financial institutions having personal ID details of their clients.
    • A person having ID documents for their close relatives (e.g. spouse, partner or sibling)

    The offence would exclude commonly available information – e.g. a person’s name, address, date or place of birth or marital status.

    The proposed maximum penalty is 2 years jail.

    Taking action against identity theft criminals

    Under the current legislation it is difficult to investigate identity crime, identify the perpetrators, lay charges and secure a conviction. There is a very high threshold to prove criminal intent beyond reasonable doubt, which can be difficult for contemporary identity crime.

    By changing the requirement to prove intent for a criminal purpose (instead of a ‘serious’ criminal purpose) it will be easier to prosecute offenders who use a false identity or misuse personal information.

    Identity theft certificates

    Identity theft certificates are official documents issued by the court which victims of identity theft can present to organisations (e.g. banks) to help them repair any damage to their finances or credit rating.

    However, under the current law, a victim can only get this certificate once the offender has been convicted of the identity theft crime. There are many circumstances where it is difficult to locate the offender (e.g. they live overseas) or to take prosecution action.

    It is proposed that the law be changed to allow a court to issue an identity theft certificate where there is sufficient evidence that a person has been a victim of identity theft, regardless of whether any criminal proceedings have been or will be taken in relation to the offence.