System Updates

Release notes tell you what’s new in the RIW system.  As always, we welcome your feedback and ideas for improvement, or reporting any bugs by emailing [email protected].  Please refer to the minimum system requirements required for this release.

We’d like to extend a special thank you to all RIW users who contributed to the update of the RIW software, RIW App and Vircarda App.

RIW Release Update – 14 January 2020

To view an information session about the 14 January 2020 RIW System Release please visit:

RIW Release Update – 4 November 2019

RIW Release Update – 31 October 2019

RIW Release Update – 19 September 2019

RIW Release Update – 30 August 2019

RIW Release Update – 22 July 2019

System Requirements

To use the RIW system, web browsers need to be at a minimum:

  • Microsoft Edge (v17)
  • Internet Explorer (v11)
  • Google Chrome (v72)
  • Firefox (v65)
  • Safari (v12)

Browsers must also allow pop-ups and cookies.

The website must be white listed by your ICT Department to ensure it is not blocked.


To use the RIW app on the following devices, you will require:

  • Android device: Android 5 and above, 4G/3G/Wi-Fi & rear facing autofocus camera
  • Apple iPhones or iPads: iOS 9.0 and above, 4G/3G/Wi-Fi & rear facing autofocus camera
Download the APPS


RIW app

The RIW app is used by Access Controllers and Spot Checkers to scan cards in the field.

If using an iPhone, download the app from the Apple iTunes Store here (the app is simply titled RIW). The current version is 1.1.0.

If using an Android phone, you can choose from two apps in the Google Play Store. The RIW (QR) app functions similar to the Apple version, which means you can only read and scan QR codes. The RIW (NFC) app allows Near Field Communication, which enables the Spot Checker to read the actual chip in the card. The benefit of this version is that the chip can be read in situations where the user may be offline.

Download RIW (QR) app here. Current version is 1.1.

Download RIW (NFC) app here. Current version is 1.1.

If you need help, watch the short RIW App Walkthrough video and check out the printable Quick Guides for Access Controllers and Spot Checkers.

Vircarda app

The RIW system allows workers to hold both a physical and virtual card. The virtual card is maintained in a virtual wallet app called Vircarda, which is stored on the worker’s smart device. The virtual card can be scanned/swiped in the same way as the physical card. It allows Access Controllers and Spot Checkers to verify job roles, competencies and any associated work restrictions prior to granting access to a worksite. Virtual cards must be issued by your Primary Employer. If this has not already been actioned, please request this from your Primary Employer RIW Administrator.    

The Vircarda App can be downloaded from here.

Need help? Check out the printable Quick Guide titled Vircarda App and the virtual RIW card.

Privacy Policy

Privacy Policy – RIW Program

Metro Trains AustraliaPty Ltd (“MTA”, “we”,”our” or “us”) ACN 614 061 960, is committed to protecting the privacy of individuals.

The protection of personal information in the private sector is required by the Privacy Act 1988 (Cth) and, where applicable, State and Territory privacy laws (collectively the “Privacy Laws“) and we are bound to comply with these Privacy Laws as they apply to our business. All of our employees and officers are expected to comply with the Privacy Laws and our policies and procedures concerning the protection of personal information.

As used in this policy, “Personal Information” means information or an opinion (including information or an opinion forming part of a database and whether or not recorded in a material form) about an individual whose identity is apparent or who is reasonably identifiable.

This policy deals with our management of personal information for the purposes of the Rail Industry Worker Program (RIW Program).  The RIW Program provides an online competency and safety management system for Australian rail workers. It is owned and endorsed by the Australasian Railway Association (ARA) and operated by MTA.

For details of how we manage personal information for other aspects of our business, please see our general Privacy Policy on the MTA website.

This policy is based on the following principles:

  • Privacy of Personal Information is of paramount importance to us;
  • We will only use your Personal Information for purposes for which it was collected as set out in this policy; and
  • Your Personal Information will not be disclosed, other than in accordance with this policy without your permission or in accordance with the Privacy Laws.

What Personal Information do we collect?

For the RIW Program we may collect your name, gender, photo, date of birth, address, contact details, identification information (e.g. signatures, driver’s licence), health information (e.g. fitness for work assessments, medical records, and results of drug and alcohol tests), competency information (e.g. skills, credentials, registrations and qualifications), right to work details (e.g. visas and passports), work roles, site attendance timestamps, employment history, emergency contact and other personal information as required for the RIW Program.

How do we collect Personal Information?

MTA will collect information for the RIW Program when it is entered onto the RIW System by an authorised user.  This may include information entered by you, your employer, an authorised health practitioner, registered training organisation, or by one of our service team members on the instructions of an authorised user.

If you provide us with the Personal Information of another person, we rely on you to inform that person and obtain their consent for the disclosure by you to us of their Personal Information.

Before creating an account for a new Rail Industry Worker (RIW) on the RIW System, each authorised user of the RIW System must ensure that the RIW has accepted the terms of a Permission Access Agreement (PAA) prescribed by MTA. The PAA sets out further detail about the operation of the RIW Program. In order to maintain an active account on the RIW System, existing RIWs must confirm their acceptance of the terms of the PAA either by registering on the RIW System or else by actively using the card issued to them as part of the RIW Program. If an RIW fails to do so by 31 March 2020 then their account may be suspended or blocked.

The terms of the Permission Access Agreement can be viewed here: Each authorised user of the RIW System must maintain a separate policy that sets out their approach to the management of Personal Information that they collect and enter into the RIW System.  If you have any queries about the management of your Personal Information by an authorised user of the RIW System, please consult their relevant privacy policy.

Why do we collect and how do we use Personal Information

We collect and use Personal Information in order to manage and provide services in relation to the RIW Program.

We will only disclose Personal Information that we collect for the RIW Program to:

  • The Australasian Railway Association;
  • Rail Transport Operators and other organisations that wish to access and use the RIW Program;
  • Our contractors, agents and advisors helping us to manage and provide services in relation to the Rail Industry Worker Program;
  • Authorised health practitioners;
  • Other entities as required or permitted by law.

Personal Information will only be disclosed to these entities to the extent that those entities are entitled to access that information under the RIW Program

Retention and Disposal of Information

We only keep Personal Information in accordance with this Privacy Policy. We will destroy such information or de-identify that information once sufficient time has elapsed to be certain that the information will no longer be required for those purposes for which it may be used under this Policy.

Sending Personal Information Overseas

We may disclose your Personal Information to third party service providers overseas, including in the UK and countries where they are not subject to similar laws to the Privacy Laws. However, where your Personal Information is disclosed to our third party service providers who are located overseas, we will also take adequate measures to ensure that the Personal Information is handled by the overseas recipient in accordance with the Privacy Laws and our instructions for the purposes described above. By providing MTA with your Personal Information or by being a user of or applicant for the RIW Program you consent to this disclosure of your Personal Information.

Email Security

Any email you send to us and information you submit through our websites may be scanned for IT security purposes.

RIW Website

When visiting the web site for the RIW Program, the site server makes a record of the visit and logs the following information for statistical and administrative purposes:

  • The user’s I.P. address – to consider the users who use the site regularly and tailor the site to their interests and requirements;
  • The date and time of the visit to the site – this is important for identifying the website’s busy times and ensuring maintenance on the site is conducted outside these periods;
  • Pages accessed and documents downloaded – this indicates to MTA which pages or documents are most important to users and also helps identify important information that may be difficult to find;
  • Duration of the visit – this indicates to us how interesting and informative the site is to our customers;
  • The type of browser used – this is important for browser specific coding;
  • In order to optimize the web site and better understand it’s usage, we collect the visiting domain name or IP address, Computer Operating System, Browser Type and Screen Resolution;
  • For authorised users of the RIW System accessing and using the RIW System by means of a login and password, all data access and data update activities are logged for audit purposes.

A cookie is a piece of information that an Internet web site sends to your browser when you access information at that site. Cookies are either session cookies or persistent cookies. The RIW Web site does not use persistent cookies. Upon closing your browser the session cookie set by this web site is destroyed and no Personal Information is maintained which might identify you should you visit our web site at a later date.

Security of Information

You should be aware that the internet is not a secure environment and information sent via the internet (including via email) may be intercepted by a third party. We use reasonable efforts to ensure that any Personal Information collected by us is held securely.

We strive to ensure the security, integrity and privacy of information we collect. MTA has established reasonable security measures to protect your Personal Information from misuse, interference, loss, unauthorised access, modification or disclosure in contravention of this Policy. Our employees, contractors, agents and service providers who provide services related to our information systems, are obliged to respect the confidentiality of any Personal Information held by us. We review and update our security measures in light of current technologies.

You can access and update your Personal Information

Subject to certain exemptions provided for under the Privacy Laws, you have a right to access Personal Information we hold about you. We will also take reasonable steps to keep accurate and up to date any Personal Information which we hold about you. If you believe that the Personal Information we hold about you is inaccurate, incomplete, out of date or no longer relevant please notify us via the contact details set out below.

If you would like to seek access to Personal Information that MTA may have about you or update that information then please contact the MTA Service Desk in the first instance or write to MTA’s Privacy Officer via the details set out below.

Questions and complaints

MTA is committed to providing its customers with a fair and responsible system for the handling and resolution of privacy related complaints. If you have any questions about this Policy or believe that we have at any time failed to keep one of our commitments to you to handle your Personal Information in the manner required by the Privacy Laws, then we ask that you contact us immediately in writing using the contact details provided below.

We will respond and advise whether we agree with your complaint or not.  If we do not agree, we will provide reasons. If we do agree, we will advise what (if any) action we consider it appropriate to take in response. If you are still not satisfied after having contacted us and given us a reasonable time to respond, then we suggest that you contact the Office of the Australian Information Commissioner by:

Phone: 1300 363 992 (local call cost, but calls from mobile and pay phones may incur higher charges). If calling from overseas (including Norfolk Island): +61 2 9284 9749

TTY: 1800 620 241 (this number is dedicated to the hearing impaired only, no voice calls)

TIS: Translating and Interpreting Service: 1 31 450 (If you don’t speak English or English is your second language and you need assistance and ask for the Office of the Australian Information Commissioner)

Post: GPO Box 2999 Canberra ACT 2601

Fax: +61 2 9284 9666

Email: [email protected]

Changes to this Privacy Policy

This statement sets out our current Privacy Policy for the RIW Program. This policy may change from time to time. The current version of the policy is available from . The current version of our Privacy Policy replaces all previous versions of the policy.

Contact us for further information regarding our Privacy Policy

If you require further information about how we handle Personal Information or any privacy issues please contact our office on (03) 9610 2400 or write to our Privacy Officer at the address below.

Our Contact Details:

Catherine Speers
Privacy Officer
Metro Trains Australia Pty Ltd
GPO Box 1880
Melbourne VIC 3001
[email protected]

Leah Waymark
Executive Officer

Terms and Conditions

Legal Terms & Conditions

Your use of the RIW System and participation in the RIW Program will be subject to the following legal terms and conditions:

Permission Access Agreement (PAA) – The PAA sets out the basis upon which individual Rail Industry Workers (RIWs) may apply for and use an RIW Card.  The PAA also explains how information about RIWs is collected and used for the purposes of the RIW Program.  Each RIW will need to accept the terms of the PAA in order to activate a new RIW Card. You can access the PAA at

RIW Privacy Policy – The RIW Privacy Policy sets out MTA’s policies on the management of personal information for the purposes of the RIW Program. The RIW Privacy Policy has been designed to comply with the requirements of the Australian Privacy Principles made under the Privacy Act 1988 (Cth). You can access the RIW Privacy Policy at

Company Registration T&Cs and RIW Privacy Protocol – The Company Registration T&Cs (together with the accompanying RIW Privacy Protocol) sets out the basis upon which rail operators and other organisations working in the rail industry may participate in the RIW Program. These terms apply as a default unless a company is a Fee Paying Rail Transport Operator as determined by the ARA. You can access the Company Registration T&Cs at and the Privacy Protocol at

Other – Some aspects of the RIW Program (such as identity verification or competency training services) may be delivered by a third party rather than by MTA, and may be subject to additional legal terms and conditions imposed by that third party. Where this is the case, we will clearly explain this and will ask you to review and accept the additional terms and conditions before proceeding.

Contact Us

Contact Network Operators

Every rail network operator can provide advice on the specific requirements for compliance on their network, as well as guidance regarding the business rules governing working on their railway.

Get in Touch

If you require assistance with general RIW enquiries, using the RIW System or card related issues, then the RIW Service Desk can help 24 hours a day, 7 days a week, 365 days a year.

1300 101 682

Alternatively, please log through a Service Request using the Service Request option via Contact Us.

Sign up to stay up to date with the latest RIW news and changes:

Support Team


Support Team