What we found
MyMedicare: FYou thought you were registering with your GP.
Privacy Notice: voluntary data "may also be linked to other information such as hospital, aged care or other government sector data to get a fuller picture of the health needs of Australians. The information you provide in this section will also be identifiable." A simple registration becomes a comprehensive identifiable health profile via cross-linkage.
myID / Digital Identity: FTo prove you're Australian, you scan your face.
The biometric verification for myGovID is provided by iProov, a UK-based company. Australian citizens' facial biometric data is processed by a foreign corporation subject to UK surveillance laws including the Investigatory Powers Act 2016. The Australian Government has not disclosed where iProov stores or processes biometric templates of Australian citizens.
ID.me Identity Verification: FID.me's CEO told Congress they only matched your face to your own photo.
In January 2022, Hall admitted ID.me had been using 1:many facial recognition all along, comparing faces against a database of millions. He called it a "mistake" in communication. Senator Ron Wyden called it "a lie" and demanded an FTC investigation. The reversal came only after investigative reporting forced the admission.
Express Plus Medicare: FYour Medicare number — for $30 on the dark web.
In 2017, a journalist demonstrated that any Australian's full Medicare card number could be purchased on the dark web for $30. The data was being extracted through the Health Professional Online Services portal. The Department of Human Services initially denied the breach, then launched an investigation that confirmed it.
Aadhaar / mAadhaar: FThe entire identity of 1.1 billion people, available for $7.
In 2018, The Tribune of India demonstrated that full Aadhaar database access — including names, addresses, phone numbers, and photographs of all 1.1 billion enrolled citizens — could be purchased for 500 rupees ($7) through unauthorized access sold by middlemen. UIDAI filed a police complaint against the journalist. In 2023, Resecurity reported 815 million Indians' Aadhaar and passport data was offered for sale on the dark web.
NHS App: FThe NHS App was for booking GP appointments.
During COVID-19, the NHS App was repurposed as a vaccine passport (COVID Pass) required for large events, nightclubs, and travel. The app transformed from a voluntary health tool into a mandatory access control system. Privacy campaigners warned this created infrastructure for a permanent digital ID system. The government denied this but the COVID Pass infrastructure remained operational after restrictions ended.
Express Plus Medicare: FA government health app that processes your doctor visits and prescriptions was also collecting your race and ethnicity.
The Google Play data safety listing for Express Plus Medicare declares the app collects "Race and ethnicity" data for "App functionality and Account management." A health claims app collecting racial and ethnic data — combined with health claim history — creates a sensitive profile linking race to health conditions. This data category has no obvious necessity for processing Medicare rebates.
ADL: DA private advocacy group is training the AI you use every day.
ADL CEO Jonathan Greenblatt publicly stated the ADL is 'working with OpenAI, with Alphabet, with Anthropic, with Meta, with Microsoft' to 'train' their LLMs -- and is 'in conversations with Alibaba to train their LLM.' The ADL is also 'investing in building the technology to train the LLMs more effectively' and 'investing in Wikipedia.' In March 2025, the ADL released an evaluation of GPT, Claude, Gemini, and Llama claiming 'anti-Jewish and anti-Israel bias' -- querying each model 8,600 times. The ADL's stated goal is to make AI models align with its definitions of antisemitism -- definitions that, as of 2024, include anti-Zionist protest chants at political rallies. A private advocacy group -- unelected, unaccountable, criticised by Wikipedia editors as 'generally unreliable' on Israel/Palestine -- is training the AI models that billions of people use to access information. The ADL is not correcting bias. It is inserting its own.