> It's better to assume that the data page of a passport is public information. Unfortunately there's a disconnect here for what it's used for. If that page i

> It's better to assume that the data page of a passport is public information. Unfortunately there's a disconnect here for what it's used for. If that page is treated as public information, then information on it can't also be used for the 100 Points of ID that public and private organisations want. The document number on my passport is enough to get a credit card with a high limit in my name, sent to an address that's never before been connected with my identity. Maybe some more conservative banks will want the address to match. That information is precisely what was leaked by Optus.