Westpac ConnectID Customer Terms and Conditions

Please read this document carefully. If you need to know more, please contact us by:

Signing in to the Westpac app chat, available 24/7
Visiting Westpac digital identity page
Calling Telephone Banking 132032
Visiting any of our branches

ConnectID Network

Digital Identity Transactions

(A) Westpac offers an “Identity Service” whereby you can request us to provide identity and attribute information (together Identity Data) about you to a third party service provider so that you can conduct business with that third service provider (the Service Provider). Identity Data may include identity and attribute information such as your name, telephone number, email, date of birth or address.

(B) This service is only available where the eligibility criteria set out in section 1.2 have been met, and where the Service Provider holds valid accreditation as part of the “ConnectID Network”.

(C) The “ConnectID Network” facilitates the transfer of Identity Data on a bilateral basis between the us and Service Providers (each a Digital Identity Transaction). However, the ConnectID Operator does not access or hold your Identity Data and the transfer of Identity Data occurs directly from us to the relevant Service Provider.

(D) Any Digital Identity Transaction is at your request and option, and any Identity Data will only be provided to the Service Provider selected by you and with your express consent. If you do not provide your consent, we will not perform the Digital Identity Transaction.

(E) Further, each Digital Identity Transaction is a one off-transfer of Identity Data, and any further transfers of Identity Data, including to the same Service Provider, will require further consent from you and a new Digital Identity Transaction.

Eligibility

We will only execute Digital Identity Transactions for you if:

(A) you have a Westpac Online Banking service enabled with us;

(B) you are at least 18 years old; and

(C) we have verified your identity and certain core identity data (such as your name, telephone number, email and date of birth) within the prior 5 years.

Customer acknowledgments

(A) You acknowledge and agree that:

(i) any Digital Identity Transaction requested by you using the “Identity Service” is governed by these terms;

(ii) each time you request us to transfer your Identity Data to a Service Provider, you have ensured that the Service Provider’s request is valid and is made by a Service Provider that requires your Identity Data;

(iii) you will be asked by us to review the Identity Data to be transferred to the Service Provider, to verify its accuracy and expressly consent to such transfer;

(iv) where you consent to the transfer of Identity Data to a Service Provider:

(a) we cannot control and are not responsible for the security or handling of any Identity Data that has been transferred to the relevant Service Provider;

(b) the Service Provider’s use, storage and disclosure of your Identity Data is governed by their terms with you and their privacy policy, and not our terms with you or our Privacy Statement; and

(c) if the Service Provider suffers a security or data incident that impacts your Identity Data, you consent to the Service Provider providing to us information about such incident, including your Personal Information and the Identity Data impacted by the incident, which we may use to seek to prevent or respond to cyber security incidents, fraud, scam activity or identify theft;

(v) neither us nor the ConnectID Operator endorse or make any representations or recommendations in respect of any Service Providers, including in respect of the suitability of their security or privacy practices; and

(vi) both us and the ConnectID Operator exclude all liability to you to the maximum extent permitted by law in connection with any acts or omissions of the Service Provider.

(B) The exclusions in this section that relate to the ConnectID Operator are held on trust by us for the ConnectID Operator. This means that, although the ConnectID Operator is not a party to these terms, it can rely on your acknowledgment of and agreement to these exclusions.

(C) Please note that Digital Identity Transactions are intended to operate separately to requests made pursuant to the Consumer Data Right scheme. You can find out more about the Consumer Data Right scheme here - Open Banking | Westpac. (PDF 855KB)

Your Transaction Record

(A) If we participate in a Digital Identity Transaction relating to you, we will keep a record of the Digital Identity Transaction processed or requested (even if not completed) (Your Transaction Record).

(B) Your Transaction Record is accessible by you through Westpac Online Banking. For more information on how to access your transaction history please see FAQs | ConnectID | Westpac.

(i) the identity of the Service Provider;

(ii) the date of the transaction; and

(iii) the types of identity data shared with the Service Provider (if any).

(D) We will handle Your Transaction Record and any other information collected by us in respect of a Digital Identity Transaction in accordance with our Privacy Statement.

(E) We may also provide details in respect of Your Transaction Record to the ConnectID Operator in connection with their operation, administration and governance of the “ConnectID Network”, fraud detection and investigation purposes and for other purposes set out in the ConnectID Privacy Policy published at ConnectID | Privacy Policy

Withholding service

Acting reasonably, we may withdraw or suspend the Identity Service at any time, and we may also be unable to process a Digital Identity Transaction relating to you for a number of reasons, including if:

(A) you do not meet the eligibility requirements set out in section 1.2;

(B) we have been unable to confirm the accuracy of Identity Data we hold about you or cannot meet the requirements for the Identity Data requested by the Service Provider;

(C) we suspect on reasonable grounds that any fraud (including identity fraud) or security incident has or may be occurring in connection with you, your account or the relevant Service Provider;

(D) our participation in the “ConnectID Network” has been suspended or terminated;

(E) we have restricted you from transacting with us and/or blocked your access to Westpac Online Banking or the Westpac App and in accordance with our Westpac Online Banking Terms and Conditions or any of our applicable product terms and conditions;

(F) we reasonably believe that the Digital Identity Transaction requires intervention, for example because it relates to you as a vulnerable person; or

(G) the Service Provider that you wish to conduct business with:

(i) has made a request which is not consistent with the requests they are permitted to make as a participant in the “ConnectID Network”; or

(ii) provides services that you have elected to exclude yourself from in accordance with our processes for the same, for example if the Service Provider offers gambling services and you have blocked your account with us from being used for gambling transactions.

Fees

We will not charge you any fees to perform a Digital Identity Transaction for you, however we may receive a commission or other payment from the ConnectID Operator as a result of successfully executing the Digital Identity Transaction.

Access and updates to your Identity Data

(A) Digital Identity Transactions that we perform at your request contains Identity Data, including Personal Information, about you that you consent for us to disclose to the Service Provider. Westpac’s Privacy Statement explains how we collect, use and disclose your personal information and credit-related information. Our Privacy Statement also provides information about how you can access and correct your personal information, and make a complaint and is available at westpac.com.au/privacy/privacy-statement or by calling us on 132 032.

(B) Please note that you will not be able to withdraw your consent to us disclosing your personal information because the disclosure will occur as soon as you provide your consent.

(C) For clarity, where you update your record of Personal Information with us, this will not update your record with a Service Provider, unless you subsequently initiate a Digital Identity Transaction with that Service Provider for the relevant Identity Data.

(D) If you have any suspicions of fraud in relation to your identity or account with us or any Digital Identity Transaction that you did not authorise, you must notify us as soon as possible.

Complaints

(A) If you have any complaints or disputes relating to our participation in a Digital Identity Transaction relating to you, please contact us at Complaints | Westpac

(B) If you wish to raise a dispute relating to Digital Identity Transactions, visit Report fraud | Westpac

(C) If you wish to raise a dispute related to activities of a Service Provider to whom you have requested we disclose Identity Data, we may direct you to contact that Service Provider directly.

Variations

(A) We may change the Terms and Conditions and will notify you of any changes in accordance with this section, in writing or electronically. When we make changes, we will always act in a fair, reasonable and ethical manner.

(B) We may notify you of changes to a term or condition or any material change to a matter required by law to be in the Terms and Conditions – as soon as reasonably possible (which may be before or after the change is made) or, if we believe the change is unfavourable to you, we will give notice 30 days’ in advance.

(C) Despite everything mentioned in this section, advance notice of a change or variation may not be given in some instances, for example, where a change is necessitated by an immediate need to restore or maintain the security of our or ConnectID systems, or where you cannot reasonably be contacted. We may also give a shorter notice period (or no notice) if it is reasonable for us to manage a material and immediate risk.

Dictionary Definitions

ConnectID Operator means ConnectID Pty Ltd or its Related Bodies Corporate (as this term is defined in the Corporations Act 2001 (Cth)).

ConnectID Privacy Policy means the privacy policy published by the ConnectID Operator as amended from time to time and that concerns the handling of Personal Information by the ConnectID Operator in connection with the “ConnectID Network”

Digital Identity Transaction has the meaning given in section 1.1(c).

Identity Data has the meaning given in section 1.1(a).

Personal Information means personal information, as that term is defined in the Privacy Law.

Privacy Law means the Privacy Act 1988 (Cth) and any privacy legislation which applies to you from time to time in force in Australia.

Privacy Statement means the Westpac Privacy Statement as amended from time to time and available at Privacy Statement | Westpac.

Service Provider has the meaning given in section 1.1(a).

We means Westpac Banking Corporation. Any other grammatical form of the word “we” has a corresponding meaning.

Westpac Online Banking, Online Banking means Westpac’s latest Online Banking service platform available at westpac.com.au including mobile banking and tablet banking unless specified otherwise.

Westpac App means software approved by us in connection with mobile banking and downloaded directly to your mobile device from the App Store that is appropriate to your mobile device.

Your Transaction Record has the meaning given in section 3(a).

You means the customer, member, client, service recipient or other person that we provide services to from time to time. Any other grammatical form of the word “you” has a corresponding meaning.