Victorian Numbered Acts

[Index] [Table] [Search] [Search this Act] [Notes] [Noteup] [Previous] [Next] [Download] [Help]

FAMILY VIOLENCE PROTECTION AMENDMENT (INFORMATION SHARING) ACT 2017 (NO. 23 OF 2017) - SECT 7

New Part 5A of Principal Act inserted

After Part 5 of the Principal Act insert

" Part 5A—Information sharing

Division 1—Preliminary

        144A     Definitions

In this Part—

Central Information Point has the meaning set out in section 144O;

CIP data custodian has the meaning set out in section 144F;

CIP purpose has the meaning set out in section 144OA;

CIP request has the meaning set out in section 144OC;

"CIP requester" means an information sharing entity or a class of information sharing entity declared under section 144G;

"confidential information" means—

        (a)     health information; or

        (b)     personal information, including sensitive information; or

        (c)     unique identifiers; or

        (d)     identifiers;

"consent" means express or implied consent;

excluded information has the meaning set out in section 144C;

"family violence assessment purpose "means the purpose of establishing or assessing the risk of—

        (a)     a person committing family violence; or

        (b)     a person being subjected to family violence;

"family violence protection purpose "means the purpose of managing a risk of—

        (a)     a person committing family violence and includes the ongoing assessment of the risk of the person committing family violence; or

        (b)     a person being subjected to family violence and includes the ongoing assessment of the risk of the person being subjected to family violence;

"handling", in relation to confidential information, has the meaning set out in  section 3 of the Privacy and Data Protection Act 2014 in relation to personal information;

health information has the meaning set out in section 3(1) of the Health Records Act 2001 ;

identifier has the meaning set out in section 3(1) of the Health Records Act 2001 ;

information sharing entity has the meaning set out in section 144D;

"linked person" means any person whose confidential information is relevant to a family violence assessment purpose or family violence protection purpose other than a person who—

        (a)     is a primary person; or

        (b)     is a person of concern; or

        (c)     is alleged to pose a risk of family violence;

person of concern has the meaning set out in section 144B;

personal information has the meaning set out in section 3 of the Privacy and Data Protection Act 2014 ;

primary person has the meaning set out in section 144E;

"protection entity" means an information sharing entity that is prescribed to be a protection entity for the purposes of section 144D(2)(b);

"risk assessment entity" means an information sharing entity that is prescribed to be a risk assessment entity for the purposes of section 144D(2)(a);

sensitive information has the meaning set out in Schedule 1 to the Privacy and Data Protection Act 2014 ;

unique identifier has the meaning set out in Schedule 1 to the Privacy and Data Protection Act 2014 .

        144B     Meaning of person of concern

    (1)     In this Part, a person is a person of concern if an information sharing entity reasonably believes that there is a risk that the person may commit family violence.

    (2)     Without limiting subsection (1), a respondent may be a person of concern.

        144C     Meaning of excluded information

In this Part, confidential information is excluded information if the collection, use or disclosure of that information could be reasonably expected to—

        (a)     endanger a person's life or result in physical injury; or

        (b)     prejudice the investigation of a breach or possible breach of the law or prejudice the enforcement or proper administration of the law in a particular instance; or

        (c)     prejudice a coronial inquest or inquiry; or

        (d)     prejudice the fair trial of a person or the impartial adjudication of a particular case; or

        (e)     disclose the contents of a document, or a communication, that is of such a nature that the contents of the document, or the communication, would be privileged from production in legal proceedings on the ground of legal professional privilege or client legal privilege; or

        (f)     disclose, or enable a person to ascertain, the identity of a confidential source of information in relation to the enforcement or administration of the law; or

        (g)     contravene a court order or a provision made by or under this Act or any other Act that—

              (i)     prohibits or restricts, or authorises a court or tribunal to prohibit or restrict, the publication or other disclosure of information for or in connection with any proceeding; or

              (ii)     requires or authorises a court or tribunal to close any proceeding to the public; or

        (h)     be contrary to the public interest.

        144D     Meaning of "information sharing entity"

    (1)     In this Part, "information sharing entity" means a person or body prescribed, or a class of person or body prescribed, to be an information sharing entity for the purposes of this Part.

    (2)     An information sharing entity may be prescribed to belong to any of the following categories—

        (a)     risk assessment entity;

        (b)     protection entity;

        (c)     any other category of entity specified in the regulations.

    (3)     An information sharing entity referred to in subsection (2) must only share confidential information to the extent permitted by this Part or the regulations for the category of information sharing entity to which the information sharing entity belongs.

    (4)     For the avoidance of doubt, if a provision of this Part or the regulations does not specify that it applies to a category of information sharing entity, then the provision applies to all information sharing entities.

        144E     Meaning of primary person

    (1)     In this Part, a person is a primary person if an information sharing entity reasonably believes that there is a risk that the person may be subjected to family violence.

    (2)     Without limiting subsection (1), any of the following persons may be a primary person—

        (a)     an affected family member;

        (b)     a child;

        (c)     a protected person.

        144F     Meaning of "CIP data custodian"

In this Part, "CIP data custodian" means an information sharing entity prescribed, or a class of information sharing entity prescribed, to be a CIP data custodian for the purposes of this Act.

        144G     Meaning of CIP requester

    (1)     The Minister may declare, in writing, an     information sharing entity, or a class of information sharing entity, to be a CIP requester for the purposes of this Act.

    (2)     A declaration under subsection (1) is not a legislative instrument within the meaning of the Subordinate Legislation Act 1994 .

        144H     Objects of Part

The objects of this Part are—

        (a)     to provide for the sharing of confidential information between specified persons and bodies for the purposes of establishing, assessing and managing risks of family violence; and

        (b)     to promote the coordination of services by those persons and bodies to further the purposes of the Act; and

        (c)     to enable certain information sharing entities to obtain consolidated and updated information from a central information point for the purposes of establishing, assessing and managing risks of family violence.

        144I     Application of this Part to Courts

If any of the following persons or bodies are prescribed to be information sharing entities, nothing in this Part applies to the collection, use or disclosure of confidential information by those persons or bodies in relation to, or for the purposes of, their judicial or quasi-judicial functions—

        (a)     a court or tribunal;

        (b)     the holder of a judicial or quasi-judicial office or other office pertaining to a court or tribunal in their capacity as the holder of that office;

        (c)     a registry or other office of a court or tribunal;

        (d)     the staff of such a registry or other office in their capacity as members of that staff.

        144J     Principles

    (1)     The principles set out in this section should be used for guidance in relation to the collection, use or disclosure of confidential information that is authorised or required to be collected, used or disclosed under this Part.

    (2)     Information sharing entities should—

        (a)     work collaboratively to coordinate services in a manner that respects the functions and expertise of each information sharing entity; and

        (b)     give precedence to the right to be safe from family violence over the right to privacy; and

        (c)     only collect, use or disclose a person's confidential information to the extent that the collection, use or disclosure of the information is necessary—

              (i)     to assess or manage risk to the safety of a person from family violence; and

              (ii)     to hold perpetrators of family violence accountable for their actions; and

        (d)     collect, use or disclose the confidential information of a person who identifies as Aboriginal or Torres Strait Islander in a manner that—

              (i)     promotes the right to self-determination and is culturally sensitive; and

              (ii)     considers the person's familial and community connections; and

        (e)     have regard to and be respectful of a person's cultural, sexual and gender identity and religious faith.

    (3)     In addition to the principles set out in subsection (2), when collecting, using and disclosing confidential information relating to a child to assess any risk to the safety of the child from family violence or to protect the child from family violence, information sharing entities should—

        (a)     promote the agency of the child and other family members at risk of family violence by ensuring their wishes are taken into account having regard to the appropriateness of doing so and the child's age and maturity; and

        (b)     if the collection, use and disclosure of that information includes the confidential information of other family members at risk of family violence, take all reasonable steps to ensure the information is collected, used and disclosed in a way that—

              (i)     plans for the safety of those family members at risk of being subjected to family violence; and

              (ii)     recognises the desirability of preserving and promoting positive relationships between those family members and the child.

    (4)         The Parliament does not intend these principles—

        (a)     to create in any person any legal right or give rise to any civil cause of action; or

        (b)     to affect in any way the interpretation of any Act or law in force in Victoria.

Division 2—Information sharing for family violence assessment purpose

        144K     Application of Division to confidential information of certain persons

This Division applies to the confidential information of any of the following persons—

        (a)     a primary person;

        (b)     a person of concern;

        (c)     a person who is alleged to pose a risk of family violence;

        (d)     a linked person.

        144KA     Voluntary disclosure for family violence assessment purpose

An information sharing entity may disclose confidential information to a risk assessment entity for a family violence assessment purpose if the confidential information—

        (a)     is not excluded information; and

        (b)     is permitted to be disclosed under Division 5.

        144KB     Request for information sharing for family violence assessment purpose

    (1)     A risk assessment entity (a requesting entity ) may request an information sharing entity (a  responding entity ) to disclose confidential information to the requesting entity for a family violence assessment purpose.

    (2)     In making a request under this section, a requesting entity may provide the responding entity with any confidential information that may assist the responding entity to—

        (a)     identify the confidential information held by the responding entity that is relevant to the request; and

        (b)     determine whether to disclose the confidential information.

    (3)     A responding entity that does not comply with a request made under this section must provide, in writing, the requesting entity with the reason for the failure to comply with the request.

        144KC     Obligation to disclose for family violence assessment purpose

    (1)     Subject to subsection (2), an information sharing entity must disclose confidential information to a risk assessment entity that has requested the information for a family violence assessment purpose if the confidential information—

        (a)     is not excluded information; and

        (b)     is permitted to be disclosed under Division 5.

    (2)     This section does not apply to any person or body specified in section 144I that has been prescribed to be an information sharing entity.

        144KD     Collection and use of confidential information for family violence assessment purpose

A risk assessment entity may collect or use any confidential information disclosed to the risk assessment entity under this Division for a family violence assessment purpose.

Division 3—Information sharing for family violence protection purpose

        144L     Application of Division to confidential information of certain persons

This Division applies to the confidential information of any of the following persons—

        (a)     a primary person;

        (b)     a person of concern;

        (c)     a linked person.

        144LA     Voluntary disclosure for family violence protection purpose

An information sharing entity may disclose confidential information to another information sharing entity for a family violence protection purpose if the confidential information—

        (a)     is not excluded information; and

        (b)     is permitted to be disclosed under Division 5.

        144LB     Request for information sharing for family violence protection purpose

    (1)     An information sharing entity (a requesting entity ) may request another information sharing entity (a responding entity ) to disclose confidential information to the requesting entity for a family violence protection purpose.

    (2)     In making a request under this section, a requesting entity may provide the responding entity with any confidential information that may assist the responding entity to—

        (a)     identify the confidential information held by the information sharing entity that is relevant to the request; and

        (b)     determine whether to disclose the confidential information.

    (3)     A responding entity that does not comply with a request made under this section must provide, in writing, the requesting entity with the reason for the failure to comply with the request.

        144LC     Obligation to disclose for family violence protection purpose

    (1)     Subject to subsection (2), an information sharing entity (a responding entity ) must disclose confidential information to another information sharing entity (a requesting entity ) that has requested the information for a family violence protection purpose if—

        (a)     the responding entity reasonably believes that the disclosure of the relevant information to the requesting entity is necessary for a family violence protection purpose; and

        (b)     the confidential information is not excluded information; and

        (c)     the confidential information is permitted to be disclosed under Division 5.

    (2)     This section does not apply to any person or body specified in section 144I that has been prescribed to be an information sharing entity.

        144LD     Collection and use of confidential information for family violence protection purpose

An information sharing entity may collect or use any confidential information disclosed to the information sharing entity under this Division for a family violence protection purpose.

Division 4—Information sharing with primary persons

        144M     Voluntary disclosure to primary person

    (1)     An information sharing entity may disclose confidential information about a person of concern to a primary person for a family violence protection purpose if the confidential information is not excluded information.

    (2)     An information sharing entity may disclose confidential information about a person of concern to any of the following persons if the primary person is a child and the confidential information is not excluded information—

        (a)     the child;

        (b)     a person who is a parent of the child, other than a person who is a person of concern in relation to the child.

        144MA     Primary person not to disclose confidential information other than for reasons of safety

A person who has been given confidential information under section 144M must not use or disclose that information except for the purposes of managing the primary person's risk of being subjected to family violence.

Division 5—Consent

        144N     Consent of person of concern and certain other persons not required

    (1)     For the purposes of this Part, an information sharing entity may collect, use and disclose confidential information about a relevant person without the consent of the relevant person.

    (2)     In this section—

"relevant person" means—

        (a)     a person of concern; or

        (b)     a person who is alleged to pose a risk of family violence.

        144NA     Consent of primary person who is an adult

For the purposes of this Part, an information sharing entity must not collect, use or disclose confidential information about a primary person who is an adult unless—

        (a)     the primary person consents to the collection, use or disclosure of the confidential information by the information sharing entity; or

        (b)     the information sharing entity reasonably believes that the collection, use or disclosure of the confidential information is necessary to lessen or prevent a serious threat to an individual's life, health, safety or welfare.

Note

See section 144Q.

        144NB     Consent of linked person

For the purposes of this Part, an information sharing entity must not collect, use or disclose confidential information about a linked person unless—

        (a)     the linked person consents to the collection, use or disclosure of the confidential information by the information sharing entity; or

        (b)     the information sharing entity reasonably believes that the collection, use or disclosure of the confidential information is necessary to lessen or prevent a serious threat to an individual's life, health, safety or welfare.

Note

See section 144Q.

        144NC     Consent not required if primary person is a child

    (1)     For the purposes of this Part, an information sharing entity may collect, use and disclose confidential information about a primary person who is a child without the consent of any person if—

        (a)     the collection, use or disclosure is for a family violence protection purpose relating to a primary person who is child; or

        (b)     the collection, use or disclosure is for, or made to a risk assessment entity for, a family violence assessment purpose relating to a primary person who is a child.

Note

An information sharing entity must comply with guidelines issued under section 144P(1) relating to child consent to the collection, use or disclosure of confidential information about the child.

    (2)     Despite sections 144NA and 144NB, an information sharing entity may collect, use and disclose confidential information about a primary person who is an adult or a linked person (a related person ) without the consent of that related person if that information relates to confidential information—

        (a)     about a primary person who is a child; and

        (b)     that is collected, used and disclosed for a purpose specified in subsection (1).

        144ND     Capacity to consent

    (1)     If an information sharing entity requires the consent of a primary person or a linked person before disclosing confidential information under this Part, and that person is incapable of giving consent to the disclosure, the information sharing entity may obtain consent from that person's authorised representative unless the authorised representative is—

        (a)     a person of concern; or

        (b)     alleged to pose a risk of family violence.

    (2)     For the purposes of subsection (1), a primary person or a linked person is incapable of giving consent if the person is incapable (despite the provision of reasonable assistance by another person) by reason of age, injury, disease, illness, disability, physical impairment or mental disorder of—

        (a)     understanding the general nature and effect of giving the consent; or

        (b)     communicating the consent or refusal of consent.

    (3)     In this section—

"authorised representative", in relation to a primary person or a linked person means a person who is—

        (a)     the primary person's or linked person's guardian; or

        (b)     an agent for the primary person or linked person within the meaning of the Medical Treatment Act 1988 ; or

        (c)     an administrator or a person responsible within the meaning of the Guardianship and Administration Act 1986 ; or

        (d)     otherwise empowered under law to perform any functions or duties or exercise powers as an agent of or in the best interests of the primary person or linked person;

"disability" has the same meaning as in the Disability Act 2006 .

Division 6—The Central Information Point

        144O     Central Information Point

    (1)     The Central Information Point is—

        (a)         the Secretary of the Department responsible to the Minister administering this Part; or

        (b)     if an Administrative Office Head is prescribed by the regulations—the Administrative Office Head.

    (2)         The Central Information Point is not, in that capacity, an information sharing entity, even if the person who is the Central Information Point is an information sharing entity in another capacity.

        144OA     CIP purpose

Each of the following is a purpose of the Central Information Point (a "CIP purpose")—

        (a)         to receive and respond to CIP requests;

        (b)     to provide CIP requesters and CIP data custodians with new or updated information about people in relation to whom CIP requests have at any time been made;

        (c)     to do anything necessary for the above purposes.

        144OB     Central Information Point may handle confidential information for CIP purpose

The Central Information Point may do any or all of the following for a CIP purpose

        (a)     request and collect confidential information from a CIP requester or a CIP data custodian;

        (b)     disclose confidential information to a CIP requester or a CIP data custodian;

        (c)     use confidential information collected from a CIP requester or a CIP data custodian.

        144OC     CIP requests

    (1)     A CIP requester may request the Central Information Point to disclose confidential information to it—

        (a)     if the CIP requester is a risk assessment entity—for a family violence assessment purpose; or

        (b)     in any case—for a family violence protection purpose.

    (2)     A request under subsection (1) is a CIP request .

        144OD     CIP requester may disclose information to Central Information Point

    (1)     A CIP requester may, in making a CIP request, disclose confidential information to the Central Information Point.

    (2)     The purpose of the disclosure must be to assist one or more CIP data custodians to—

        (a)     identify the confidential information held by the CIP data custodians that is relevant to the request; and

        (b)     determine whether to disclose the confidential information to the Central Information Point under section 144OE.

        144OE     CIP data custodian may disclose confidential information to Central Information Point

    (1)     A CIP data custodian may disclose confidential information to the Central Information Point if—

        (a)     the Central Information Point has requested the information from the CIP data custodian for the purposes of dealing with a CIP request; and

        (b)     the CIP data custodian could have disclosed the information to the CIP requester concerned in response to a request under Division 2 or 3.

    (2)     Subsection (1) does not require a CIP data custodian to disclose confidential information.

        144OF     CIP data custodian may disclose information to other CIP data custodians

A CIP data custodian may disclose confidential information to another CIP data custodian if—

        (a)     the Central Information Point has requested confidential information from any CIP data custodian for the purposes of a CIP request; and

        (b)     the disclosure relates to that CIP request; and

        (c)         the CIP data custodian could have disclosed the information to the other CIP data custodian in response to a request under Division 2 or 3.

        144OG     CIP data custodians and CIP requesters may disclose information to Central Information Point on own initiative

A CIP data custodian or a CIP requester may, on its own initiative, disclose confidential information to the Central Information Point if—

        (a)     the purpose of the disclosure is to provide the Central Information Point with updated information relevant to a previous CIP request; and

        (b)     the CIP data custodian could have disclosed the information to another CIP data custodian or a CIP requester in response to a request under Division 2 or 3.

        144OH     References in certain provisions to CIP data custodians and CIP requesters

A reference in section 144OE(1)(b), 144OF(c) or 144OG(b) to a CIP data custodian or a CIP requester is a reference to the CIP data custodian or CIP requester in its capacity as an information sharing entity.

        144OI     Delegation

The Central Information Point may delegate to a person any power of the Central Information Point under this Act, except this power of delegation.

Division 7—Guidelines, protected disclosures and recording requirements

        144P     Guidelines

    (1)     The Minister must issue guidelines in relation to the operation of this Part including the specification of requirements to be complied with by an information sharing entity in order to demonstrate the capacity of that information sharing entity to handle confidential information responsibly and appropriately in accordance with this Part.

    (2)     Without limiting subsection (1), guidelines issued must address child consent to the collection, use or disclosure of confidential information about the child in accordance with this Part.

    (3)     Before issuing guidelines under subsection (1), the Minister must publish, on an appropriate Internet site—

        (a)     a draft of the proposed guidelines; and

        (b)     a statement that submissions may be made to the Minister on or before a specified date, being at least 28 days after the day on which the draft guidelines are published.    

    (4)     As soon as practicable after finalising draft guidelines, the Minister must publish the guidelines on an appropriate Internet site.

    (5)     Subject to subsection (6), an information sharing entity must comply with any guidelines issued under this section when handling confidential information in accordance with this Part.

    (6)     Subsection (5) does not apply to any person or body specified in section 144I that has been prescribed to be an information sharing entity.

    (7)     Guidelines issued under subsection (1) are not legislative instruments within the meaning of the Subordinate Legislation Act 1994 .

    (8)     The Minister may review guidelines issued under subsection (1) at any time, and may issue amended guidelines as the Minister considers necessary.

    (9)     If the Minister considers that an amendment to the guidelines is significant or substantial, the requirements of subsection (3) must be met before the amended guidelines may be issued.

        144PA     Disclosures made in good faith protected

A disclosure made by an individual under this Part in good faith and with reasonable care—

        (a)     does not for any purpose constitute unprofessional conduct or a breach of professional ethics on the part of the individual by whom it was made; and

        (b)     does not make the individual by whom it was made subject to any liability in respect of it; and

        (c)     without limiting paragraphs (a) and (b), does not constitute a contravention by the individual of any other Act.

        144PB     Information sharing entity and Central Information Point recording requirements

An information sharing entity, and the Central Information Point, must record the prescribed information in respect of the information sharing entity's, or the Central Information Point's, collection, use and disclosure of confidential information in accordance with this Part and the regulations.

Division 8—Relationship of this Part with other Acts

        144Q     Part does not affect handling of information permitted by other Acts

This Part does not affect the collection, use or disclosure of confidential information by an information sharing entity or the Central Information Point that would otherwise be permitted by or under the Privacy and Data Protection Act 2014 , the Health Records Act 2001 or this Act or any other Act .

        144QA         Access to confidential information under privacy laws restricted where risk to safety from family violence

    (1)     An information sharing entity may refuse to give an individual access to that individual's confidential information under a relevant privacy law if—

        (a)     the individual is a person of concern or a person who is alleged to pose a risk of committing family violence; and

        (b)     the information sharing entity believes on reasonable grounds that giving the individual access to the information would increase the risk to a primary person's safety from family violence.

    (2)     In this section—

"relevant privacy law" means—

        (a)     the Health Records Act 2001 ; or

        (b)     the Privacy and Data Protection Act 2014 ; or

        (c)     the Privacy Act 1988 of the Commonwealth; or

        (d)     the Privacy Act 1988 of the Commonwealth applied as a law of Victoria by another Act.

        144QB     Application of Privacy and Data Protection Act 2014 to certain information sharing entities

    (1)     This section applies to an information sharing entity that is not—

        (a)     an organisation within the meaning of the Privacy and Data Protection Act 2014 ; or

        (b)     subject to the Privacy Act 1988 of the Commonwealth, or that Act as applied as a law of Victoria by any other law.

    (2)     The Privacy and Data Protection
Act 2014 applies to the handling of personal information or unique identifiers by the information sharing entity under this Part as if the entity were an organisation within the meaning of that Act.

        144QC     Information sharing entity authorised to share confidential information despite specified provisions

An information sharing entity is authorised to collect, use or disclose confidential information in accordance with this Part and the regulations despite anything to the contrary in a provision of an Act—

        (a)     specified in Schedule 1; or

        (b)     prescribed for the purposes of this section.

        144QD     Disclosure of confidential information is not breach of Judicial Proceedings Reports Act 1958

Sections 3 and 4 of the Judicial Proceedings Reports Act 1958 do not prevent a disclosure of confidential information that is made by an information sharing entity for the purposes of this Part.

        144QE     Exemption from Freedom of Information Act 1982 for Central Information Point

    (1)     The Freedom of Information Act 1982 does not apply to a document that is in the possession of the Central Information Point, to the extent to which the document discloses

confidential information about a primary person, a person of concern, a person alleged to pose a risk of family violence or a linked person.

    (2)     In this section, "document" has the same meaning as it has in the Freedom of Information Act 1982 .

Division 9—Offences

        144R     Unauthorised use and disclosure of confidential information

    (1)     A person who uses or discloses confidential information in accordance with this Part must not use that information or disclose that information to another person except in accordance with this Part.

Penalty:     In the case of a natural person, 60 penalty units;

In the case of a body corporate, 300 penalty units.

    (2)     It is a defence to a charge under subsection (1) for the person charged to prove that the use or disclosure of the confidential information was done in good faith and with reasonable care.

    (3)     Subsection (1) does not apply to the following uses and disclosures of confidential information—

        (a)     a use or disclosure made with the consent of the person to whom the information relates;

        (b)     a use or disclosure made with the consent of a person (other than a person of concern or a person alleged to pose a risk of family violence) who is a parent of the person who is a child to whom the information relates;

        (c)     a disclosure made to a court or tribunal in the course of legal proceedings;

        (d)     a use or disclosure made pursuant to an order of a court or tribunal;

        (e)     a use or disclosure made to the extent reasonably required to enable the investigation or the enforcement of a law of this State or of any other State or of a Territory or of the Commonwealth;

        (f)     a disclosure made to an Australian legal practitioner for the purposes of obtaining legal advice or representation;

        (g)     a use or disclosure made as required or authorised by or under this Act or any other Act.

    (4)     Subsection (1) does not apply to the use or disclosure of confidential information by a primary person who is given the confidential information under section 144M.

    (5)     A person does not commit an offence against this section only for the reason that the person uses or discloses confidential information in a way that does not comply with guidelines issued under section 144P(1).

Note

Despite non-compliance not being an offence—

        (a)     this does not preclude non-compliance being taken into account in dealing with a complaint made under the Privacy and Data Protection Act 2014 , the Health Records Act 2001 or the Privacy Act 1988 of the Commonwealth; and

        (b)     non-compliance may lead to a person or body ceasing to be prescribed as an information sharing entity.

        144RA     Intentional or reckless unauthorised use and disclosure of confidential information

    (1)     A person authorised to use or disclose confidential information in accordance with this Part must not use or disclose that information in a manner that is unauthorised under this Part and that the person—

        (a)     knows is unauthorised under this Part; or

        (b)     is reckless as to whether the use or disclosure of the information is unauthorised under this Part.

Penalty:     In the case of a natural person, 600 penalty units or imprisonment for 5 years or both;

In the case of a body corporate, 3000 penalty units.

    (2)     Subsection (1) does not apply to the following uses and disclosures of confidential information—

        (a)     a use or disclosure made with the consent of the person to whom the information relates;

        (b)     a use or disclosure made with the consent of a person (other than a person of concern or a person alleged to pose a risk of family violence) who is a parent of the person who is a child to whom the information relates;

        (c)     a disclosure made to a court or tribunal in the course of legal proceedings;

        (d)     a use or disclosure made pursuant to an order of a court or tribunal;

        (e)     a use or disclosure made to the extent reasonably required to enable the investigation or the enforcement of a law of this State or of any other State or of a Territory or of the Commonwealth;

        (f)     a disclosure made to an Australian legal practitioner for the purposes of obtaining legal advice or representation;

        (g)     a use or disclosure made as required or authorised by or under this Act or any other Act.

    (3)     Subsection (1) does not apply to the use or disclosure of confidential information by a primary person who is given the confidential information under section 144M.

    (4)     A person does not commit an offence against this section only for the reason that the person uses or discloses confidential information in a way that does not comply with guidelines issued under section 144P(1).

Note

Despite non-compliance not being an offence—

        (a)     this does not preclude non-compliance being taken into account in dealing with a complaint made under the Privacy and Data Protection Act 2014 , the Health Records Act 2001 or the Privacy Act 1988 of the Commonwealth; and

        (b)     non-compliance may lead to a person or body ceasing to be prescribed as an information sharing entity.

Division 10—Review

        144S     Review of operation of Part after 2 years of operation

    (1)     The Minister must cause an independent review to be conducted of the first 2 years of operation of this Part.

    (2)     The Minister must cause a copy of the review to be laid before each House of the Parliament within 6 months after the end of the 2 year period.

    (3)     The review must include consideration of any adverse effects of this Part.

    (4)     The review may include any recommendations on any matter addressed in the review.

        144SA     Review of operation of Part after 5 years of operation

    (1)     The Minister must cause an independent review to be conducted of the 3rd to 5th years of operation of this Part.

    (2)     The Minister must cause a copy of the review to be laid before each House of the Parliament within 6 months of the end of the 5th year of operation of this Part.

    (3)     The review must include consideration of any adverse effects of this Part.

    (4)     The review may include any recommendations on any matter addressed in the review.



AustLII: Copyright Policy | Disclaimers | Privacy Policy | Feedback