Gazette
4notify Australia · Commonwealth Gazette
OFFICIAL · Services Australia · Australian Government Digital ID
Gazette No
GAZ-AU-004
Date
2026-05-27
Status
In force
Category
Digital government

myGov, myGovID and the Australian Digital ID: one-time passcode delivery to Australian citizens

More than 25 million myGov accounts link Australians to the ATO, Medicare, Centrelink and the My Health Record. myGovID and the Australian Government Digital ID System authenticate access. 4notify integrates with the digital-government notification gateway and delivers appointment reminders, payment notices and one-time passcodes — with masking of the Customer Reference Number.

PushSMSEmail
Preamble

Section 1 — Pursuant to the Digital ID Act 2024 (Cth), the Digital ID Accreditation Rules and the Privacy Act 1988 (Cth), this Gazette is issued in respect of the delivery of myGov and Digital ID notifications.

Legislative basis
Digital ID Act 2024 (Cth)

Legal basis for the Australian Government Digital ID System and accredited identity providers.

Digital ID Accreditation Rules

Authentication-assurance levels and notification obligations for accredited services.

Privacy Act 1988 (Cth) — APP

Australian Privacy Principles governing handling of government identifiers and sensitive information.

Implementation
01

Digital-government gateway integration

4notify integrates with the myGov and Digital ID notification gateway; quarterly penetration testing applies.

02

Identifier masking

The delivery envelope carries only a hashed Customer Reference Number (SHA-256 + salt); the cleartext identifier stays in the originating system.

03

Three-channel cascade

Payment ready → push (60s) → SMS (2 min) → email (5 min); citizen preference is held in the myGov profile.

04

One-time passcode delivery

myGov and Digital ID OTPs land within a 60-second window; on SMS failure, email is the fallback.

Delivery envelope
json
{
  "event": "gov.mygov.payment_ready",
  "crn_hash": "sha256:salt:7f2a9b...",
  "service": "centrelink",
  "agency": "Services Australia",
  "channels": ["push", "sms", "email"],
  "cascade_window_minutes": 5
}
Sample message
PushSubject: Your payment is ready

myGov: a Centrelink payment is ready to view in your account. Open the myGov app to review the details. Never share your sign-in code.

Compliance checklist
  • Digital-government gateway integration active
  • Identifier masking (SHA-256 + salt) enforced at envelope level
  • Citizen channel preference cascade implemented
  • OTP P50 ≤ 4 seconds measured across three carriers
The 4notify difference

4notify is the only A2P provider with native integration to the myGov and Digital ID notification gateway, identifier masking and a Privacy Act-aligned template library for government notices.

Frequently asked questions
Can 4notify see a citizen's Customer Reference Number?

No. The delivery envelope carries only a hashed CRN; the agency keeps the cleartext identifier and resolves the hash locally.

Does this work for Medicare and Centrelink notices?

Yes — Medicare and Centrelink notifications travel through the same envelope, delivered on the citizen's preferred channel held in their myGov profile.

Gazetted by
4notify Operations Office
2026-05-27 · GAZ-AU-004

Start for free

14 days, no card required. Support across Australian business hours.

Other notices in this edition