Your worker passport and privacy

Your passport is separate from provider membership. It holds your name, verified contact email, credential types, issuer names, dates and optional redacted proof. Do not upload government ID numbers, participant information or original identity documents.

You choose specific credential types for a named provider, with a start and end time. You can revoke sharing or end the relationship. Providers can read only actively consented types through the protected portal. Future reads and file downloads stop when access ends. Prior recipients may have retained lawful records; revocation cannot retract copies already received.

Self-attested means you entered the information. Provider confirmed means a provider recorded sighting the original for that exact version. CareCert does not connect to a public NDIS screening verification API and does not claim regulator verification. No issuer-verification integration is enabled.

Proof is processed locally into a redacted text transcript; the original upload is not stored. Redaction can miss information. Review the file first and compare the original separately when confirming it. No passport data is sent to an AI provider by this feature or used to train a model.

Your access history records human reads, automated expiry processing and sharing changes. You can export your passport and request deletion. Deletion blocks provider access and removes passport records, with private-file cleanup retried if necessary. Sign-in account deletion, security-event retention and provider record-retention obligations require separate handling and legal review.

Production access stays disabled until the operator confirms Australian hosting and privacy readiness. For contact details and broader data handling, read the CareCert privacy notice. This notice is not a claim of Privacy Act compliance.