Review of the Privacy Act 1988 (Cth) – Issues Paper

Total Page:16

File Type:pdf, Size:1020Kb

Review of the Privacy Act 1988 (Cth) – Issues Paper Review of the Privacy Act 1988 (Cth) – Issues Paper Attorney-General’s Department 17 December 2020 Telephone +61 2 6246 3788 • Fax +61 2 6248 0639 Email [email protected] GPO Box 1989, Canberra ACT 2601, DX 5719 Canberra 19 Torrens St Braddon ACT 2612 Law Council of Australia Limited ABN 85 005 260 622 www.lawcouncil.asn.au Table of Contents About the Law Council of Australia ............................................................................... 3 Acknowledgement .......................................................................................................... 4 Executive Summary ........................................................................................................ 5 General Comments ......................................................................................................... 7 From ‘notice and consent’ (user privacy self-management) to accountability of APP entities ........................................................................................................................... 7 Objectives of the Privacy Act (Question 1) ................................................................... 8 Australian Privacy Principles ......................................................................................... 9 Definition of personal information (Questions 2 to 5) .................................................10 Flexibility of the APPs in regulating and protecting privacy (Question 6) .................12 Exemptions ....................................................................................................................13 Small business exemption (Questions 7 to 12) .............................................................13 Employee exemption (Questions 13 to 15) ...................................................................14 Political exemption (Question 16) .................................................................................16 Journalism exemption (Questions 17 to 19) .................................................................16 Notice and consent (Questions 20 to 35) .....................................................................17 Consent requirements including default privacy settings ..............................................17 Default privacy settings ................................................................................................18 Control and security of personal information (Questions 43 to 47) ...........................19 Security and retention ..................................................................................................19 Erasure of personal information....................................................................................20 Overseas data flows and third-party certification (Questions 48 to 52) .....................21 Enforcement powers under the Privacy Act and role of the OAIC (Questions 53 to 55) ...............................................................................................................................23 Direct right of action (Question 56) ..............................................................................23 Statutory tort (Questions 57 to 62) ...............................................................................24 Notifiable Data Breaches scheme: impact and effectiveness (Questions 63 to 65) ...................................................................................................................................25 The impact of the notifiable data breach scheme and its effectiveness in meeting its objectives .....................................................................................................................25 Interaction between the Privacy Act and other regulatory schemes (Questions 66 to 68) ..........................................................................................................................26 The desirability and feasibility of independent certification scheme to monitor and demonstrate compliance with Australian privacy laws ..................................................26 Data privacy and artificial intelligence ...........................................................................26 Review of the Privacy Act 1988 (Cth) – Issues Paper Page 2 About the Law Council of Australia The Law Council of Australia exists to represent the legal profession at the national level, to speak on behalf of its Constituent Bodies on national issues, and to promote the administration of justice, access to justice and general improvement of the law. The Law Council advises governments, courts and federal agencies on ways in which the law and the justice system can be improved for the benefit of the community. The Law Council also represents the Australian legal profession overseas, and maintains close relationships with legal professional bodies throughout the world. The Law Council was established in 1933, and represents 16 Australian State and Territory law societies and bar associations and the Law Firms Australia, which are known collectively as the Council’s Constituent Bodies. The Law Council’s Constituent Bodies are: • Australian Capital Territory Bar Association • Australian Capital Territory Law Society • Bar Association of Queensland Inc • Law Institute of Victoria • Law Society of New South Wales • Law Society of South Australia • Law Society of Tasmania • Law Society Northern Territory • Law Society of Western Australia • New South Wales Bar Association • Northern Territory Bar Association • Queensland Law Society • South Australian Bar Association • Tasmanian Bar • Law Firms Australia • The Victorian Bar Inc • Western Australian Bar Association Through this representation, the Law Council effectively acts on behalf of more than 60,000 lawyers across Australia. The Law Council is governed by a board of 23 Directors – one from each of the constituent bodies and six elected Executive members. The Directors meet quarterly to set objectives, policy and priorities for the Law Council. Between the meetings of Directors, policies and governance responsibility for the Law Council is exercised by the elected Executive members, led by the President who normally serves a 12 month term. The Council’s six Executive members are nominated and elected by the board of Directors. Members of the 2020 Executive as at 1 January 2020 are: • Ms Pauline Wright, President • Dr Jacoba Brasch QC, President-elect • Mr Tass Liveris, Treasurer • Mr Ross Drinnan, Executive Member • Mr Greg McIntyre SC, Executive Member • Ms Caroline Counsel, Executive Member The Secretariat serves the Law Council nationally and is based in Canberra. Review of the Privacy Act 1988 (Cth) – Issues Paper Page 3 Acknowledgement The Law Council acknowledges the assistance of the Privacy Law and Media and Communications Committees of its Business Law Section, the Law Society of New South Wales, the Law Institute of Victoria, the Law Society of South Australia and the Law Society of Western Australia in the preparation of this submission. Review of the Privacy Act 1988 (Cth) – Issues Paper Page 4 Executive Summary 1. The Law Council appreciates the opportunity to provide this submission to the Attorney-General’s Department (the Department) in response to the Privacy Act Review Issues Paper (Issues Paper). 2. The Law Council notes that the Privacy Act 1988 (Cth) (Privacy Act) has now been in operation for over 30 years and that the Privacy Amendment (Private Sector) Act 2000 (Cth) was introduced some 20 years ago, extending privacy obligations to the private sector to provide a minimum set of privacy protections for individuals. During this time there have been significant changes to the landscape in which these pieces of legislation operate and therefore the Law Council welcomes the current review of the legislative framework. 3. The Law Council has not sought to respond to each of the 68 questions tendered in the Issues Paper in the time available in which to respond. Instead, the Law Council’s responses are grouped under the headings outlined in the Issues Paper, which are based on key themes or issues. The focus of the responses is on legal issues, noting that this area of law is highly sensitive to the speed of technological and social changes and impact on policy. 4. Noting that the Issues Paper is the first step in a broader review of the Privacy Act, the Law Council will endeavour to engage with its Constituent Bodies and other key stakeholders with the view to arriving at a settled and unified position on key privacy issues prior to participating in the next stage of the review. 5. The Law Council looks forward to contributing to future components of the Department’s review. At this point in the consultation process, the Law Council provides the following recommendations, designed to assist in the Department’s development of a Discussion Paper in early 2021, namely that consideration be given to: • Reinforcing accountability as part of Australia’s privacy framework. This needs to be considered in the context of other obligations and the limitations of the consent driven model. • Amending the objects of the Privacy Act to include ensuring that acts and practices of Australian Privacy Principle (APP) entities do not unreasonably interfere with the privacy of individuals and providing enforceable rights for individuals to seek redress for an interference with their privacy, in addition to any complaints process. • Including, as expressly operative concepts within the APPs, additional matters to help
Recommended publications
  • Australian Political Writings 2009-10
    Parliament of Australia Department of Parliamentary Services Parliamentary Library Information, analysis and advice for the Parliament BIBLIOGRAPHY www.aph.gov.au/library Selected Australian political writings 2009‐10 Contents Biographies ............................................................................................................................. 2 Elections, electorate boundaries and electoral systems ......................................................... 3 Federalism .............................................................................................................................. 6 Human rights ........................................................................................................................... 6 Liberalism and neoliberalism .................................................................................................. 6 Members of Parliament and their staff .................................................................................... 7 Parliamentary issues ............................................................................................................... 7 Party politics .......................................................................................................................... 13 Party politics- Australian Greens ........................................................................................... 14 Party politics- Australian Labor Party .................................................................................... 14 Party politics-
    [Show full text]
  • Australia 2019
    Australia Free 77 100 A Obstacles to Access 23 25 B Limits on Content 29 35 C Violations of User Rights 25 40 Last Year's Score & Status 79 100 Free Overview Internet freedom in Australia declined during the coverage period. The country’s information and communication technology (ICT) infrastructure is well developed, and prices for connections are low, ensuring that much of the population enjoys access to the internet. However, a number of website restrictions, such as those related to online piracy or “abhorrent” content, limit the content available to users. The March 2019 terrorist attack on mosques in Christchurch, New Zealand, prompted internet service providers (ISPs) to block certain websites and the government subsequently introduced a new law that criminalized the failure to delete “abhorrent” content. Other legal changes—including court decisions expanding the country’s punitive defamation standards, an injunction silencing digital media coverage of a high-profile trial, and a problematic law that undermines encryption—shrunk the space for free online expression in Australia. Finally, an escalating series of cyberattacks sponsored by China profoundly challenged the security of Australia’s digital sphere. Australia is a democracy with a strong record of advancing and protecting political rights and civil liberties. Recent challenges to these freedoms have included the threat of foreign political influence, harsh policies toward asylum seekers, and ongoing disparities faced by indigenous Australians. Key Developments June 1, 2018 – May 31, 2019 After the March 2019 Christchurch attack, in which an Australian man who had espoused white supremacist views allegedly killed 51 people at two New Zealand mosques, ISPs acted independently to block access to more than 40 websites that hosted the attacker’s live-streamed video of his crimes.
    [Show full text]
  • Privacy and Data Protection in Australia: a Critical Overview (Extended Abstract)
    Privacy and Data Protection in Australia: a Critical overview (extended abstract) David Watts1, Pompeu Casanovas2,3 1 La Trobe Law School, La Trobe University, Melbourne, Australia 2 UAB Institute of Law and Technology, Universitat Autònoma de Barcelona, Spain Abstract. This extended abstract describes the regulation of privacy under Aus- tralian laws and policies. In the CRC D2D programme, we will develop a strategy to model legal requirements in a situation that is far from clear. Law enforcement agencies are facing big floods of data to be acquired, stored, assessed and used. We will propose in the final paper a linked data regulatory model to organise and set the legal and policy requirements to model privacy in this unstructured con- text. Keywords: Australian privacy law, legal requirements, privacy modelling 1 Introduction Australia has a federal system of government that embodies a number of the structural elements of the US Constitutional system but retains a Constitutional monarchy. It con- sists of a national government (the Commonwealth), six state governments (New South Wales, Victoria, Tasmania, Queensland, South Australia and Western Australia) as well as two Territories (the Australian Capital Territory and the Northern Territory). Under this system, specific Constitutional powers are conferred on the Common- wealth. Any other powers not specifically conferred on the Commonwealth are retained by the States (and, to a lesser extent, the Territories). There is no general law right to privacy in Australia. Although Australia is a signa- tory to the International Convention on Civil and Political Rights, the international law right to privacy conferred under Article 17 of the ICCPR has not been enacted into Australia’s domestic law.
    [Show full text]
  • Legitimacy in the New Regulatory State
    LEGITIMACY IN THE NEW REGULATORY STATE KAREN LEE A THESIS IN FULFILMENT OF THE REQUIREMENTS FOR THE DEGREE OF DOCTOR OF PHILOSOPHY FACULTY OF LAW MARCH 2016 TABLE OF CONTENTS ACKNOWLEDGEMENTS ...................................................................................................... I PUBLICATIONS AND PRESENTATIONS ARISING FROM THE WRITING OF THE THESIS .. III GLOSSARY AND TABLE OF ABBREVIATIONS .................................................................. IV CHAPTER 1 INTRODUCTION ............................................................................................. 1 I JUSTIFICATION FOR RESEARCH AND ITS APPROACH .......................................... 4 A THE NEED FOR EMPIRICAL STUDY OF INDUSTRY RULE-MAKING ....................... 4 B PART 6 RULE-MAKING ....................................................................................... 7 1 THE COMMUNICATIONS ALLIANCE ................................................................ 8 2 CONSUMER CODES ....................................................................................... 10 C PROCEDURAL AND INSTITUTIONAL LEGITIMACY, RESPONSIVENESS AND THEIR CRITERIA ......................................................................................................... 11 II TERMINOLOGY ................................................................................................ 15 A CONSUMER AND PUBLIC INTERESTS................................................................. 15 1 CONSUMER INTEREST .................................................................................
    [Show full text]
  • Mark Burdon Thesis
    THE CONCEPTUAL AND OPERATIONAL COMPATIBILITY OF DATA BREACH NOTIFICATION AND INFORMATION PRIVACY LAWS Mark Burdon M.Sc. (Econ) Public Policy (Lon), LLB (Hons) (London South Bank University, UK) Submitted in fulfilment of the requirements for the degree of PhD by publications Faculty of Law Queensland University of Technology 2011 Keywords Data Breach Notification Law – Information Privacy Law – Data Protection – Contextualisation - Information Security Law ii Abstract Mandatory data breach notification laws are a novel and potentially important legal instrument regarding organisational protection of personal information. These laws require organisations that have suffered a data breach involving personal information to notify those persons that may be affected, and potentially government authorities, about the breach. The Australian Law Reform Commission (ALRC) has proposed the creation of a mandatory data breach notification scheme, implemented via amendments to the Privacy Act 1988 (Cth). However, the conceptual differences between data breach notification law and information privacy law are such that it is questionable whether a data breach notification scheme can be solely implemented via an information privacy law. Accordingly, this thesis by publications investigated, through six journal articles, the extent to which data breach notification law was conceptually and operationally compatible with information privacy law. The assessment of compatibility began with the identification of key issues related to data breach notification law. The first article, Stakeholder Perspectives Regarding the Mandatory Notification of Australian Data Breaches started this stage of the research which concluded in the second article, The Mandatory Notification of Data Breaches: Issues Arising for Australian and EU Legal Developments (‘Mandatory Notification‘). A key issue that emerged was whether data breach notification was itself an information privacy issue.
    [Show full text]
  • Review of Secrecy Laws
    Review of Secrecy Laws ISSUES PAPER You are invited to provide a submission or comment on this Issues Paper ISSUES PAPER 34 December 2008 This Issues Paper reflects the law as at 1 November 2008. © Commonwealth of Australia 2008 This work is copyright. You may download, display, print and reproduce this material in whole or part, subject to acknowledgement of the source, for your personal, non- commercial use or use within your organisation. Apart from any use as permitted under the Copyright Act 1968 (Cth), all other rights are reserved. Requests for further authorisation should be directed by letter to the Commonwealth Copyright Administration, Copyright Law Branch, Attorney-General’s Department, Robert Garran Offices, National Circuit, Barton ACT 2600 or electronically via www.ag.gov.au/cca. ISBN-978-0-9804153-4-6 Commission Reference: IP 34 The Australian Law Reform Commission was established on 1 January 1975 by the Law Reform Commission Act 1973 (Cth) and reconstituted by the Australian Law Reform Commission Act 1996 (Cth). The office of the ALRC is at Level 25, 135 King Street, Sydney, NSW, 2000, Australia. All ALRC publications can be made available in a range of accessible formats for people with disabilities. If you require assistance, please contact the ALRC. Telephone: within Australia (02) 8238 6333 International +61 2 8238 6333 TTY: (02) 8238 6379 Facsimile: within Australia (02) 8238 6363 International +61 2 8238 6363 E-mail: [email protected] ALRC homepage: www.alrc.gov.au Printed by Ligare Making a submission Any public contribution to an inquiry is called a submission and these are actively sought by the ALRC from a broad cross-section of the community, as well as those with a special interest in the particular inquiry.
    [Show full text]
  • Telecommunications Act 1997
    Telecommunications Act 1997 Act No. 47 of 1997 as amended This compilation was prepared on 26 November 2008 taking into account amendments up to Act No. 117 of 2008 [Note: Subsections 531F(1) and (2) and paragraphs 531G(2)(e) and (3A)(e) cease to have effect on 27 May 2009, see subsections 531F(3), 531G(3) and (3B)] The text of any of those amendments not in force on that date is appended in the Notes section The operation of amendments that have been incorporated may be affected by application provisions that are set out in the Notes section Prepared by the Office of Legislative Drafting and Publishing, Attorney-General’s Department, Canberra Contents Part 1—Introduction 1 1 Short title [see Note 1].......................................................................1 2 Commencement [see Note 1].............................................................1 3 Objects...............................................................................................1 4 Regulatory policy ..............................................................................3 5 Simplified outline ..............................................................................3 6 Main index.........................................................................................7 7 Definitions.........................................................................................8 8 Crown to be bound ..........................................................................18 9 Extra-territorial application .............................................................18
    [Show full text]
  • Download PDF Read More
    This Issues Paper reflects the law as at 30 November 2006 © Commonwealth of Australia 2006 This work is copyright. You may download, display, print and reproduce this material in whole or part, subject to acknowledgement of the source, for your personal, non- commercial use or use within your organisation. Apart from any use as permitted under the Copyright Act 1968 (Cth), all other rights are reserved. Requests for further authorisation should be directed by letter to the Commonwealth Copyright Administration, Copyright Law Branch, Attorney-General’s Department, Robert Garran Offices, National Circuit, Barton ACT 2600 or electronically via www.ag.gov.au/cca. ISBN 0-9758213-7-7 Commission Reference: IP 32 The Australian Law Reform Commission was established on 1 January 1975 by the Law Reform Commission Act 1973 (Cth) and reconstituted by the Australian Law Reform Commission Act 1996 (Cth). The office of the ALRC is at Level 25, 135 King Street, Sydney, NSW, 2000, Australia. All ALRC publications can be made available in a range of accessible formats for people with disabilities. If you require assistance, please contact the ALRC. Telephone: within Australia (02) 8238 6333 International +61 2 8238 6333 TTY: (02) 8238 6379 Facsimile: within Australia (02) 8238 6363 International +61 2 8238 6363 E-mail: [email protected] ALRC homepage: www.alrc.gov.au Printed by Canprint Communications Pty Ltd Making a submission Any public contribution to an inquiry is called a submission and these are actively sought by the ALRC from a broad cross-section of the community, as well as those with a special interest in the inquiry.
    [Show full text]
  • Review of the Privacy Act 1993
    NZLC REPORT 123 E31(123) NovemberJune 2011, 2010, Wellington, Wellington, New New Zealand Zealand | | REPORT REPORT 123 119 REVIEW OF THE PRIVACY ACT 1993 REVIEW OF THE LAW OF PRIVACY STAGE 4 LAW COMMISSION E31 (123) June 2011, Wellington, New Zealand | REPORT 123 REVIEW OF THE PRIVACY ACT 1993 REVIEW OF THE LAW OF PRIVACY STAGE 4 The Law Commission is an independent, publicly funded, central advisory body established by statute to undertake the systematic review, reform and development of the law of New Zealand. Its purpose is to help achieve law that is just, principled, and accessible, and that reflects the heritage and aspirations of the peoples of New Zealand. The Commissioners are: Honourable Sir Grant Hammond KNZM – President Dr Warren Young – Deputy President Emeritus Professor John Burrows QC George Tanner QC Professor Geoff McLay The General Manager of the Law Commission is Brigid Corcoran The office of the Law Commission is at Level 19, HP Tower, 171 Featherston Street, Wellington Postal address: PO Box 2590, Wellington 6140, New Zealand Document Exchange Number: sp 23534 Telephone: (04) 473-3453, Facsimile: (04) 471-0959 Email: [email protected] Internet: www.lawcom.govt.nz National Library of New Zealand Cataloguing-in-Publication Data New Zealand. Law Commission. Review of the Privacy Act 1993 : review of the law of privacy, stage 4. (Law Commission report ; 123) ISBN 978-1-877569-14-2 (pbk.)—ISBN 978-1-877569-23-4 (internet) 1. New Zealand. Privacy Act 1993. 2. Privacy, Right of—New Zealand. I. Title. II. Series: New Zealand. Law Commission. Report ; no.
    [Show full text]
  • Secrecy Laws and Open Government in Australia
    Secrecy Laws and Open Government in Australia REPORT REPORT 112 December 2009 This Report reflects the law as at 11 November 2009 © Commonwealth of Australia 2009 This work is copyright. You may download, display, print and reproduce this material in whole or part, subject to acknowledgement of the source, for your personal, non- commercial use or use within your organisation. Apart from any use as permitted under the Copyright Act 1968 (Cth), all other rights are reserved. Requests for further authorisation should be directed by letter to the Commonwealth Copyright Administration, Copyright Law Branch, Attorney-General’s Department, Robert Garran Offices, National Circuit, Barton ACT 2600 or electronically via www.ag.gov.au/cca. ISBN- 978-0-9807194-0-6 Commission Reference: ALRC Report 112 The Australian Law Reform Commission was established on 1 January 1975 by the Law Reform Commission Act 1973 (Cth) and reconstituted by the Australian Law Reform Commission Act 1996 (Cth). The office of the ALRC is at Level 25, 135 King Street, Sydney, NSW, 2000, Australia. All ALRC publications can be made available in a range of accessible formats for people with disabilities. If you require assistance, please contact the ALRC. Telephone: within Australia (02) 8238 6333 International +61 2 8238 6333 TTY: (02) 8238 6379 Facsimile: within Australia (02) 8238 6363 International +61 2 8238 6363 E-mail: [email protected] Homepage: www.alrc.gov.au Printed by Ligare The Hon Robert McClelland MP Attorney-General of Australia Parliament House Canberra ACT 2600 11 December 2009 Dear Attorney-General Review of Secrecy Laws On 5 August 2008, you issued terms of reference for the ALRC to undertake a comprehensive review of secrecy laws and related issues.
    [Show full text]
  • The Legal Protection of Personal Images Shared on Social Networks in Australia
    The Legal Protection of Personal Images Shared on Social Networks in Australia Author Georgiades, Eugenia Published 2017 Thesis Type Thesis (PhD Doctorate) School Griffith Law School DOI https://doi.org/10.25904/1912/3656 Copyright Statement The author owns the copyright in this thesis, unless stated otherwise. Downloaded from http://hdl.handle.net/10072/367723 Griffith Research Online https://research-repository.griffith.edu.au The Legal Protection of Personal Images Shared on Social Networks in Australia Eugenia Georgiades Bachelor of Arts (Hons), Bachelor of Laws, Graduate Diploma Legal Practice, Master of Laws School of Law, Griffith University This thesis is submitted in fulfilment of the requirements of the degree of Doctor of Philosophy December 2016 ii Abstract Social networks have changed the nature of communication in the modern world: they have changed how people communicate, the frequency and mode of communication, and how people relate to those communications. Social networks have also changed the type of information that is communicated. One of the notable developments has been a proliferation of the sharing of images that people have taken themselves. From the ubiquitous selfie through to group shots, personal images are now a key part of modern social communication. A number of problems have arisen as a consequence of the rapid increase in the sharing of personal images online. This is because personal images uploaded online are, more now than ever, prone to misuse. Third parties are easily able to reuse, distort and alter images that are uploaded on social networks. As a result, people are at risk of losing control over the images that they upload online.
    [Show full text]
  • Upholding the Australian Constitution Volume Fourteen
    Upholding the Australian Constitution Volume Fourteen Proceedings of the Fourteenth Conference of The Samuel Griffith Society Menzies Hotel, Carrington Street, Sydney, 14 – 16 June, 2002 © Copyright 2002 by The Samuel Griffith Society. All rights reserved. Table of Contents Foreword John Stone Dinner Address Hon Chief Justice Murray Gleeson, AC The Birth, Life and Death of Section 74 Introductory Remarks John Stone Chapter One Professor Geoffrey de Q Walker The Seven Pillars of Centralism: Federalism and the Engineers’ Case Chapter Two Dr Nicholas Aroney The Ghost in the Machine: Exorcising Engineers Chapter Three Hon Justice Kenneth Handley, AO When “Maybe” means “No” Chapter Four Professor David Flint, AM The Republic: Report from Corowa Chapter Five Professor John McMillan Immigration Law and the Courts Chapter Six Hon Philip Ruddock, MHR Immigration Policy and the Separation of Powers Chapter Seven Piers Akerman Immigration Policy, Sovereignty and the Media Chapter Eight Hon Justice Lloyd Waddy Memories of a Monarchist – now a Trappist Judge Chapter Nine Dr Stephen Hall September 11 and International Law Chapter Ten Dr Janet Albrechtsen National Interest versus International Law: The International Criminal Court Chapter Eleven Steven Franks, MP (NZ) Treaty of Waitangi: Only Good Intentions? Concluding Remarks Rt Hon Sir Harry Gibbs, GCMG, AC, KBE Appendix Contributors Foreword John Stone The fourteenth Conference of The Samuel Griffith Society, which was held in Sydney in June, 2002, was more than usually notable, for several reasons. This Volume of the Society’s Proceedings, Upholding the Australian Constitution, contains the papers, and Dinner Addresses, delivered to that Conference, together with the usual brief concluding remarks of our President, the Rt Hon Sir Harry Gibbs.
    [Show full text]