Our website uses cookies so we can analyse our site usage and give you the best experience. Click "Accept" if you’re happy with this, or click "More" for information about cookies on our site, how to opt out, and how to disable cookies altogether.
We respect your Do Not Track preference.
On this page:
Download a PDF of the guidance on this page (PDF, KB).
The Privacy Act sets out rules for the creation, use and protection of unique identifiers.
The relevant Information Privacy Principle (IPP) is:
An education provider may assign a unique identifier to a learner for use in its operations only if that identifier is necessary to enable the education provider to carry out its functions.
An education provider must take steps to ensure that:
A person cannot be requested to provide a unique identifier assigned to them unless that disclosure is for one of the purposes for which the unique identifier was assigned or is directly related to one of those purposes.
For example, an education provider cannot request the IR Number of a learner or their parents (unless the learner or parent is employed by the education provider). However, where a school employs a counsellor or nurse it may be appropriate to request the learner’s NHI so that health and disability support information collected are attached to the correct learner in relevant health databases.
The National Student Number (NSN) is a unique identifier given to every learner as a digital identity. Assignment and use of NSNs is governed by Education and Training Act 2020.
For more information about the NSN, and who is authorised to use the NSN for specified purposes, see:
From a Privacy Act perspective, the NSN is personal information about a learner and may help to identify a learner. For example, removing a learner’s name and replacing it with their NSN, will not mean the learner is not identifiable – the information will still be attributable to an individual. Other information contained in the document (for example, information contained in a learning support register) may also be sufficient to identify them.