Agency overview | |
---|---|
Formed | 1 November 2010 |
Preceding agency |
|
Jurisdiction | Commonwealth of Australia |
Employees | 195 (2023–24) [1] |
Annual budget | $47.9 billion (2023–24) [1] |
Minister responsible | |
Agency executives |
|
Parent agency | Office of the Attorney-General |
Key documents |
|
Website | www |
The Office of the Australian Information Commissioner (OAIC), known until 2010 as the Office of the Australian Privacy Commissioner is an independent Australian Government agency, acting as the national data protection authority for Australia, established under the Australian Information Commissioner Act 2010, [2] headed by the Australian Information Commissioner.
The office has three primary functions: [2]
The office is an agency within the Attorney-General's portfolio. The office liaises with the Business and Information Law Branch, part of the Civil Law Division within the Civil Justice and Legal Services Group of the Attorney-General's Department. The office is an independent agency and reports to the Attorney-General.
The first Australian Privacy Commissioner was appointed in 1989 to the former Office of the Privacy Commissioner, which was the national privacy regulatory body until 2010. Major changes to federal freedom of information (FOI) law made in 2010 established the present office as the body responsible for FOI, privacy, and information policy. The Freedom of Information Amendment (Reform) Act 2010 [5] was passed in May 2010, and came into effect from November 2010. This Act introduced fundamental changes to the way information held by government is managed and accessed by members of the public (see Freedom of Information).
The Office of the Privacy Commissioner was integrated into the office at this time.
The office is headed by the Australian Information Commissioner. Despite their titles, all commissioners can exercise the privacy and freedom of information (FOI) functions. However, only the Information Commissioner may exercise the information policy functions.
The office’s responsibilities include:
The office has freedom of information functions, including the oversight of the operation of the FOI Act and review of decisions made by agencies and ministers under that Act. If a person is dissatisfied with the result of an FOI request, they may seek review by the office. A person may also complain to the office if they are unhappy with the manner in which their request was handled by an agency.
The FOI Act has been a feature of Australia's legislative landscape since 1982. The purpose of the FOI Act was to open government activity to public scrutiny, so as to enhance accountability and encourage citizen engagement with public administration. In 2010, the Australian Parliament implemented wide-ranging open government reforms — the most significant FOI reforms in thirty years. The office was established and substantial changes were made to the FOI Act. These reforms simplified the process for accessing government information, tightened the exemptions to information release, strengthened independent oversight and review of FOI administration, promoted proactive publication of government information, and clearly stated the open government object of the FOI Act.
The object of the Act is 'to increase recognition that information held by the Government is to be managed for public purposes, and is a national resource'. [5] The Reform Act introduced a new scheme for the proactive publication of government information called the Information Publication Scheme, under which government agencies are required to provide certain operational information on their websites.
The office may initiate an own motion investigation (OMI). The office can also provide information and advice on FOI to individuals and agencies, via the OAIC enquiries line.
Privacy is one of three broad functions conferred on the office. The legislative basis of these privacy functions is drawn primarily from the Privacy Act. The Privacy Act regulates how an individual's personal information is handled. For example, it covers:
The Act also covers more specific matters, such as:
The office has a range of responsibilities under other laws, including laws relating to data matching, eHealth, spent convictions and tax file numbers. [6] The office provides information and advice on privacy to individuals, businesses and agencies via the OAIC enquiries line.
Under the Privacy Act a person can make a complaint to the office about the handling of their personal information by Australian, ACT and Norfolk Island government agencies and private sector organisations covered by the Privacy Act. In some circumstances, the office may also initiate an OMI.
The office has the power to conduct privacy audits of Australian and ACT Government agencies, as well as some other organisations in certain circumstances.
The Privacy Advisory Committee (PAC) provides strategic advice on privacy, from a broad range of perspectives, to the Australian Information Commissioner. PAC was established under section 82 of the Privacy Act. [3] All members except the Commissioner are appointed by Her Excellency the Governor-General. PAC consists of no more than six members and is convened by the Australian Information Commissioner.
The Information Commissioner reports to the Attorney-General on matters relating to Australian Government information management policy and practice, including FOI and privacy.
The Information Commissioner is assisted in this regard by an Information Advisory Committee (IAC), comprising senior officers from key agencies and people from outside government who have suitable qualifications or experience.
The office has released a set of Principles on open public sector information [7] and an accompanying report. The principles are based on the premise that public sector information is to be managed for public purposes as a national resource.
The office encourages agencies to embed the principles in their internal policies and procedures on information management. The intention is that by doing so they will help build a culture of proactive information disclosure and community engagement.
Freedom of information laws allow access by the general public to data held by national governments and, where applicable, by state and local governments. The emergence of freedom of information legislation was a response to increasing dissatisfaction with the secrecy surrounding government policy development and decision making. In recent years Access to Information Act has also been used. They establish a "right-to-know" legal process by which requests may be made for government-held information, to be received freely or at minimal cost, barring standard exceptions. Also variously referred to as open records, or sunshine laws, governments are typically bound by a duty to publish and promote openness. In many countries there are constitutional guarantees for the right of access to information, but these are usually unused if specific support legislation does not exist. Additionally, the United Nations Sustainable Development Goal 16 has a target to ensure public access to information and the protection of fundamental freedoms as a means to ensure accountable, inclusive and just institutions.
The role of information commissioner differs from nation to nation. Most commonly it is a title given to a government regulator in the fields of freedom of information and the protection of personal data in the widest sense. The office often functions as a specialist ombudsman service.
The Campaign for Freedom of Information is an advocacy group that promotes and defends freedom of information in the UK. It seeks to strengthen the public's rights under the Freedom of Information Act 2000 and related laws and opposes attempts to weaken them. It does this through campaigning, the publication of briefings and other reports and research. The Campaign also provides advice to the public and assistance to people challenging unreasonable refusals to disclose information, and runs training courses on freedom of information.
The Australian Human Rights Commission is the national human rights institution of the Commonwealth of Australia, established in 1986 as the Human Rights and Equal Opportunity Commission (HREOC) and renamed in 2008. It is a statutory body funded by, but operating independently of, the Australian Government. It is responsible for investigating alleged infringements of Australia's anti-discrimination legislation in relation to federal agencies.
The Freedom of Information Act 2000 is an Act of the Parliament of the United Kingdom that creates a public "right of access" to information held by public authorities. It is the implementation of freedom of information legislation in the United Kingdom on a national level. Its application is limited in Scotland to UK Government offices located in Scotland. The Act implements a manifesto commitment of the Labour Party in the 1997 general election, developed by David Clark as a 1997 White Paper. The final version of the Act was criticised by freedom of information campaigners as a diluted form of what had been proposed in the White Paper. The full provisions of the act came into force on 1 January 2005. The Act was the responsibility of the Lord Chancellor's Department. However, freedom of information policy is now the responsibility of the Cabinet Office. The Act led to the renaming of the Data Protection Commissioner, who is now known as the Information Commissioner. The Office of the Information Commissioner oversees the operation of the Act.
A privacy policy is a statement or legal document that discloses some or all of the ways a party gathers, uses, discloses, and manages a customer or client's data. Personal information can be anything that can be used to identify an individual, not limited to the person's name, address, date of birth, marital status, contact information, ID issue, and expiry date, financial records, credit information, medical history, where one travels, and intentions to acquire goods and services. In the case of a business, it is often a statement that declares a party's policy on how it collects, stores, and releases personal information it collects. It informs the client what specific information is collected, and whether it is kept confidential, shared with partners, or sold to other firms or enterprises. Privacy policies typically represent a broader, more generalized treatment, as opposed to data use statements, which tend to be more detailed and specific.
Freedom of information (FOI) in the United Kingdom refers to members of the general public's right to access information held by public authorities. This right is covered in two parts:
Australian administrative law defines the extent of the powers and responsibilities held by administrative agencies of Australian governments. It is basically a common law system, with an increasing statutory overlay that has shifted its focus toward codified judicial review and to tribunals with extensive jurisdiction.
The Privacy Act 1988 is an Australian law dealing with privacy. Section 14 of the Act stipulates a number of privacy rights known as the Australian Privacy Principles (APPs). These principles apply to Australian Government and Australian Capital Territory agencies or private sector organizations contracted to these governments, organizations and small businesses who provide a health service, as well as to private organizations with an annual turnover exceeding AUD$3M. The principles govern when and how personal information can be collected by these entities. Information can only be collected if it is relevant to the agencies' functions. Upon this collection, that law mandates that Australians have the right to know why information about them is being acquired and who will see the information. Those in charge of storing the information have obligations to ensure such information is neither lost nor exploited. An Australian will also have the right to access the information unless this is specifically prohibited by law.
The Access to Information Act or Information Act is a Canadian Act providing the right of access to information under the control of a federal government institution. As of 2020, the Act allowed "people who pay $5 to request an array of federal files". Paragraph 2. (1) of the Act ("Purpose") declares that government information should be available to the public, but with necessary exceptions to the right of access that should be limited and specific, and that decisions on the disclosure of government information should be reviewed independently of government. Later paragraphs assign responsibility for this review to an Information Commissioner, who reports directly to parliament rather than the government in power. However, the Act provides the commissioner the power only to recommend rather than compel the release of requested information that the commissioner judges to be not subject to any exception specified in the Act.
The Information and Privacy Commissioner of Ontario was established as an officer of the Legislature by Ontario's Freedom of Information and Protection of Privacy Act, which came into effect on January 1, 1988. The current commissioner is Patricia Kosseim.
The Official Information Act 1982 (OIA) is an act of the New Zealand Parliament which creates a public right to access information held by government bodies. It is New Zealand's primary freedom of information law and has become an important part of New Zealand's constitutional framework.
The Access to Information and Protection of Privacy Act (AIPPA) was passed in 2002 by the Zimbabwean Parliament under the majority of the Zimbabwe African National Union – Patriotic Front (ZANU–PF) and Former President Robert Mugabe.
The Freedom of Information Act 1982(Cth) is an Act of the Parliament of Australia which guarantees freedom of information (FOI) and the rights of access to official documents of the Commonwealth Government and of its agencies to members of the public. It was passed by the Australian Parliament on 9 March 1982, and commenced on 1 December 1982.
Canadian privacy law is derived from the common law, statutes of the Parliament of Canada and the various provincial legislatures, and the Canadian Charter of Rights and Freedoms. Perhaps ironically, Canada's legal conceptualization of privacy, along with most modern legal Western conceptions of privacy, can be traced back to Warren and Brandeis’s "The Right to Privacy" published in the Harvard Law Review in 1890, Holvast states "Almost all authors on privacy start the discussion with the famous article 'The Right to Privacy' of Samuel Warren and Louis Brandeis".
Freedom of information in Canada describes the capacity for the Canadian Government to provide timely and accurate access to internal data concerning government services. Each province and territory in Canada has its own access to freedom of information legislation.
There is no absolute right to privacy in Australian law and there is no clearly recognised tort of invasion of privacy or similar remedy available to people who feel their privacy has been violated. Privacy is, however, affected and protected in limited ways by common law in Australia and a range of federal, state and territorial laws, as well as administrative arrangements.
New Zealand is committed to the Universal Declaration of Human Rights and has ratified the International Covenant on Civil and Political Rights, both of which contain a right to privacy. Privacy law in New Zealand is dealt with by statute and the common law. The Privacy Act 2020 addresses the collection, storage and handling of information. A general right to privacy has otherwise been created in the tort of privacy. Such a right was recognised in Hosking v Runting [2003] 3 NZLR 385, a case that dealt with publication of private facts. In the subsequent case C v Holland [2012] NZHC 2155 the Court recognised a right to privacy in the sense of seclusion or a right to be free from unwanted intrusion.
The Australian Privacy Commissioner is an independent statutory office-holder, appointed under subsection 14 (4) of the Australian Information Commissioner Act 2010. The Privacy Commissioner is one of three commissioners in the Office of the Australian Information Commissioner, and has functions relating to privacy and freedom of information.
The Office of the Privacy Commissioner administers the Privacy Act 2020. The Privacy Commissioner is entrusted to protect personal information of New Zealanders in accordance with the Privacy Act. Current Privacy Commissioner, Michael Webster, began his role in July 2022.