Photocopying an Australian driver's licence is not illegal under Commonwealth law if done in compliance with the Privacy Act 1988 and Australian Privacy Principles (APPs).
APP 3 (Collection): Only collect if reasonably necessary for function/activity. Consent implied if individual voluntarily presents licence for verification.
APP 5 (Notification): Inform individual: who you are, why collecting, who you'll disclose to, consequences of not providing.
APP 6 (Use/Disclosure): Use only for primary purpose (e.g., identity verification, KYC, age check). No secondary use without consent.
APP 11 (Security): Protect from misuse, loss, unauthorized access/modification/disclosure. Secure storage (locked/encrypted). Destroy/de-identify when no longer needed.
APP 12 (Access) & 13 (Correction): Individuals may request access/correction.
Road transport laws (state-based) may impose additional rules on licence handling. Examples:
NSW: Road Transport Act 2013 — misuse of licence info offence.
Victoria: Road Safety Act 1986 — similar.
QLD: Transport Operations (Road Use Management) Act.
1. Sight original, record only necessary data (name, DOB, licence #, expiry) — not full photocopy.
2. If photocopy needed: mask irrelevant fields (address, organ donor, conditions).
3. Digital capture: secure device, immediate transfer to secure system, delete from device.
4. Retention schedule: destroy after verification complete (unless legal hold).
5. Train staff on APPs.
Privacy Act: up to $2.22M (corporate) / $444k (individual) for serious/repeated breaches. State laws add further penalties.