誰可以看到你的護照掃描檔和你的關係證明

When you ask for a quote or prepare a visa application, you may hand over some of your most private records. That can include a passport scan, bank statements, health information, police checks and messages or photos used as relationship evidence. Before you upload anything, it helps to know who may see those documents, what a registered migration agent must do with them, and what questions to ask about storage and access.

在移民案件中通常會分享哪些資訊#

移民事項通常不只是表格和護照。代理和律師可能會收到身分文件、旅行紀錄、就業紀錄、稅務紀錄、教育紀錄、家庭文件，以及關於關係或居住安排的證據。

這些材料有些本質上屬於敏感資料。關係證據可能包括私人訊息、照片、共同財務紀錄、租約文件，以及家人或朋友的陳述。健康紀錄、犯罪紀錄資料，以及與子女有關的文件，也可能非常敏感。

The practical issue is simple. Once documents are sent by email, uploaded to a portal or shared in cloud storage, more than one person inside a business may be able to access them. In some cases, external service providers such as document management platforms, IT support or offshore admin staff may also handle them.

一般而言，《隱私法》和 APP 11#

澳洲許多移民業務都受 Privacy Act 1988 規範。該法律包括 Australian Privacy Principles，通常稱為 APPs。APP 11 涉及個人資訊的安全。

In general terms, APP 11 requires an organisation that holds personal information to take reasonable steps to protect it from misuse, interference and loss, and from unauthorised access, modification or disclosure. It also says reasonable steps should be taken to destroy or de-identify personal information when it is no longer needed for a purpose allowed by the law.

What counts as "reasonable steps" depends on the situation. It can include secure client portals, access controls, passwords, two-factor authentication, staff training, careful use of email, audit logs, secure backups and proper disposal of records. A sole practitioner with a small caseload and a larger firm with many staff may use different systems, but both still need to protect client information properly.

《Privacy Act》並不表示永遠不會有人看到你的文件。它的意思是，存取應有合法理由，而該企業應有制度減少不必要的存取和意外披露。

註冊移民代理根據 section 35 必須做什麼#

註冊移民代理 (registered migration agent) 也受 Migration Agents Code of Conduct 2021 約束。第35條是關於保密。

In general terms, s35 requires a registered migration agent to preserve the confidentiality of a client's documents and information. Information must not be disclosed improperly or used for a purpose unrelated to the client's matter unless the law allows or requires it, or the client has authorised it.

That matters because migration files often contain information that goes beyond the visa process. A file may reveal where a person lives, who they live with, details about children, financial arrangements, medical treatment or relationship history. Section 35 is designed to place a professional obligation on the agent to handle that material carefully.

Confidentiality is not absolute. Information may need to be shared within the practice so work can be done, with a barrister or expert if the matter requires it, with the Department where a valid application is prepared, or where disclosure is required by law. If an agent is appointed to deal with the Department, Form 956 is commonly used under s312A of the Migration Act 1958 to record that appointment.

Section 35 works alongside other Code duties. A written agreement is required under s42, and that document may explain how personal information is handled. Records also need to be retained for a period under s56, which means destruction is not always immediate even after the work is finished.

實際上誰可能會看到你的文件#

第一類是你聘請的專業人士。那可能是有 MARN（移民代理註冊號碼）的註冊移民代理，或是澳洲法律執業者。

第二類人員可能是同一業務內的支援人員。接待人員、律政助理、行政助理和事務管理人員，常會協助開檔、收集文件、準備發票和上傳資料。存取權限應限於其角色所需的範圍。

The third group may be contractors or service providers. Many practices use cloud storage, practice management software, e-signing services, accountants, IT support and secure destruction services. If a practice uses offshore admin support, that may involve overseas handling of personal information.

The fourth group may be government agencies or third parties connected to the process. Depending on the matter, documents may later be provided to the Department, police authorities, health providers, skills assessing bodies or courts or tribunals. Which documents are shared, and with whom, depends on the work being done.

這就是為什麼詢問業務內部究竟誰可以存取完整檔案，以及是否有任何第三方平台儲存副本，會很有用。如果某個業務說 "只有代理人會看到"，那可能不符合大多數實務運作的實際情況。

在你上傳護照掃描檔或關係證據前，應先問什麼#

一開始做一個簡短的隱私檢查，之後可以省去麻煩。目的不是取得法律意見，而是了解處理流程。

詢問文件儲存在何處。有用的細節包括：儲存是在 Australia 還是海外、是否使用客戶入口網站、電子郵件附件是否會複製到檔案系統，以及備份是否有加密。

要問誰可以存取檔案。實際的答案應說明角色，而不只是 "our team"。例如，代理、一位案件經理和負責開票的會計人員，就比籠統地說每個人都遵守政策更清楚。

要問是否有任何工作外包。這包括行政支援、文件格式整理、逐字稿製作、翻譯協調或下班後處理。如果涉及海外供應商，要問對存取權限有哪些控管。

Ask how identity documents are handled. Passport scans and birth certificates are common targets for fraud. A useful answer may mention restricted permissions, watermarking for internal use, redaction where possible and deletion or de-identification practices when lawful retention periods end.

Ask how relationship evidence is reviewed and stored. Some firms ask for entire chat histories or full photo libraries when a shorter, more targeted set may be enough for quote scoping or file setup. It is reasonable to ask whether highly private material can be supplied later, in a more secure channel, once a formal engagement is in place under s42.

如果你正在比較服務提供者，在寄送完整文件前先問這些問題。VisaBid 讓你 描述個案並取得報價 先這樣做，可能可減少在報價階段分享多少私人資料。

在你寄送任何資料前先查核該業者#

Before handing over private documents, confirm who the operator is. Migration assistance in Australia is restricted. Under s280 of the Migration Act 1958, it is a criminal offence for a person who is not a registered migration agent or an Australian legal practitioner to give immigration assistance in Australia. Charging for unregistered assistance is also an offence under s281.

對於註冊移民代理，請查核 MARN（移民代理註冊號碼）是否真實且有效。VisaBid 有一個簡單頁面可供 查核服務提供者. 真正合規的業者也應在開始服務前，依據 Code 第 s38 條提供 Consumer Guide。

Look for a proper written services agreement under s42. It should set out the work, the fee structure and other key terms. Fees should be clearly explained under s46, money generally should not be taken before the agreement is in place under s51, and invoices and receipts are covered by s49.

這對隱私很重要，因為真正且可追責的執業機構通常有更清楚的制度。協議、隱私政策和收案流程，往往能看出該業務是把文件安全視為專業執業的一部分，還是事後才想到。

保留、文件返還與投訴#

有些人以為簽證事項一結束，所有紀錄就會立刻消失。實務上，專業檔案管理往往不是這樣運作的。

依據法規第 s56 條，註冊移民代理（registered migration agent）必須保存某些紀錄七年。這表示即使案件已結束，部分客戶資訊仍可能繼續被保存。在此期間，保存方式仍需安全處理。

If you want original documents or copies back, s54 of the Code is also relevant. It requires documents to be returned within 14 days in the circumstances covered by that section. It is sensible to ask at the start whether the firm returns material by portal download, secure email, post or in person.

如果發生私隱問題，回應程序很重要。請詢問應聯絡誰、該機構是否有資料外洩程序，以及如何通知受影響客戶。如果問題涉及註冊移民代理的行為， 投訴 頁面可能有助於說明舉報途徑。如需更多背景閱讀，VisaBid 指南資料庫 有關業者、費用和流程的相關文章。

常見問題#

當我把護照掃描件傳給移民代理時，誰可以合法查看？#

In practice, the person you engage may not be the only person with access. The file may also be viewed by support staff inside the practice and by third-party software providers or contractors who help store or process documents. Under APP 11 and Code s35, access should be controlled and information should be protected from unauthorised disclosure.

移民代理可以把我的關係證明材料存放在海外嗎？#

Some practices use cloud platforms or outsourced admin services that involve overseas storage or handling. The key issue is whether the practice explains this clearly and has proper security controls. It is reasonable to ask where servers are located, who can access the material and whether a more secure upload method is available.

註冊移民代理是否必須對我的文件保密？#

Yes, confidentiality is part of the professional rules. Code s35 requires a registered migration agent to preserve the confidentiality of client information and documents, subject to lawful disclosure or client authority. Privacy obligations may also apply under the Privacy Act, including APP 11 on protecting personal information.

案件結束後，移民代理會把我的檔案保存多久？#

A registered migration agent is generally required by Code s56 to retain certain records for seven years. That means your file may stay in storage after the work is finished, even if no further action is being taken. You can ask how the file will be stored during that period and how documents are returned under s54.

---

關於本指南。 這是關於某項程序在澳洲如何運作的一般資訊。這不是 immigration assistance，也不是針對你情況的建議。根據 section 280 of the Migration Act 1958 只有註冊移民代理或澳洲法律執業者可以提供這項服務。政府收費會按指數調整，而且大多數會在 1 July 變更，所以請自行查核任何金額於 immi.homeaffairs.gov.au, 並在以下位置查核任何代理 OMARA（移民代理註冊管理局）名冊.