Office of the Australian Information Commissioner

Last updated
Office of the Australian Information Commissioner
Agency overview
Formed1 November 2010;12 years ago (1 November 2010)
Preceding agency
  • Office of the Australian Privacy Commissioner
JurisdictionCommonwealth of Australia
Employees118 (2021–22) [1]
Annual budget$33.4 million (2022–23) [2]
Minister responsible
Agency executive
Parent agency Office of the Attorney-General
Website www.oaic.gov.au

The Office of the Australian Information Commissioner (OAIC), known until 2010 as the Office of the Australian Privacy Commissioner is an independent Australian Government agency, acting as the national data protection authority for Australia, established under the Australian Information Commissioner Act 2010, [3] headed by the Australian Information Commissioner.

Contents

The office has three primary functions: [3]

The office is an agency within the Attorney-General's portfolio. The office liaises with the Business and Information Law Branch, part of the Civil Law Division within the Civil Justice and Legal Services Group of the Attorney-General's Department. The office is an independent agency and reports to the Attorney-General.

The current Australian Information Commissioner and Privacy Commissioner is Angelene Falk, who was appointed in August 2018. [6]

History

The first Australian Privacy Commissioner was appointed in 1989 to the former Office of the Privacy Commissioner, which was the national privacy regulatory body until 2010. Major changes to federal freedom of information (FOI) law made in 2010 established the present office as the body responsible for FOI, privacy, and information policy. The Freedom of Information Amendment (Reform) Act 2010 [7] was passed in May 2010, and came into effect from November 2010. This Act introduced fundamental changes to the way information held by government is managed and accessed by members of the public (see Freedom of Information).

The Office of the Privacy Commissioner was integrated into the office at this time.

Structure

The office is headed by the Australian Information Commissioner. Despite their titles, all commissioners can exercise the privacy and freedom of information (FOI) functions. However, only the Information Commissioner may exercise the information policy functions.

Responsibilities

The office’s responsibilities include:

Freedom of Information

The office has freedom of information functions, including the oversight of the operation of the FOI Act and review of decisions made by agencies and ministers under that Act. If a person is dissatisfied with the result of an FOI request, they may seek review by the office. A person may also complain to the office if they are unhappy with the manner in which their request was handled by an agency.

The FOI Act has been a feature of Australia's legislative landscape since 1982. The purpose of the FOI Act was to open government activity to public scrutiny, so as to enhance accountability and encourage citizen engagement with public administration. In 2010, the Australian Parliament implemented wide-ranging open government reforms — the most significant FOI reforms in thirty years. The office was established and substantial changes were made to the FOI Act. These reforms simplified the process for accessing government information, tightened the exemptions to information release, strengthened independent oversight and review of FOI administration, promoted proactive publication of government information, and clearly stated the open government object of the FOI Act.

The object of the Act is 'to increase recognition that information held by the Government is to be managed for public purposes, and is a national resource'. [7] The Reform Act introduced a new scheme for the proactive publication of government information called the Information Publication Scheme, under which government agencies are required to provide certain operational information on their websites.

The office may initiate an own motion investigation (OMI). The office can also provide information and advice on FOI to individuals and agencies, via the OAIC enquiries line.

Privacy

Privacy is one of three broad functions conferred on the office. The legislative basis of these privacy functions is drawn primarily from the Privacy Act. The Privacy Act regulates how an individual's personal information is handled. For example, it covers:

The Act also covers more specific matters, such as:

The office has a range of responsibilities under other laws, including laws relating to data matching, eHealth, spent convictions and tax file numbers. [8] The office provides information and advice on privacy to individuals, businesses and agencies via the OAIC enquiries line.

Under the Privacy Act a person can make a complaint to the office about the handling of their personal information by Australian, ACT and Norfolk Island government agencies and private sector organisations covered by the Privacy Act. In some circumstances, the office may also initiate an OMI.

The office has the power to conduct privacy audits of Australian and ACT Government agencies, as well as some other organisations in certain circumstances.

The Privacy Advisory Committee (PAC) provides strategic advice on privacy, from a broad range of perspectives, to the Australian Information Commissioner. PAC was established under section 82 of the Privacy Act. [9] All members except the Commissioner are appointed by Her Excellency the Governor-General. PAC consists of no more than six members and is convened by the Australian Information Commissioner.

The OAIC has not learnt from the Medibank Breach. They still insist that companies and government departments should not need to have a secure portal through which you can provide private identifying documents. They truly believe that any skank at the electricity company should have the power to demand you email your driver's licence to their email address to change your direct debit details. Why? "Just because" seems to be all the justification needed. The OAIC does not care about keeping your private information safe and secure, they look for reasons to not investigate complaints and take months upon months to do so.

Information policy

The Information Commissioner reports to the Attorney-General on matters relating to Australian Government information management policy and practice, including FOI and privacy.

The Information Commissioner is assisted in this regard by an Information Advisory Committee (IAC), comprising senior officers from key agencies and people from outside government who have suitable qualifications or experience.

The office has released a set of Principles on open public sector information [10] and an accompanying report. The principles are based on the premise that public sector information is to be managed for public purposes as a national resource.

The office encourages agencies to embed the principles in their internal policies and procedures on information management. The intention is that by doing so they will help build a culture of proactive information disclosure and community engagement.

Related Research Articles


Freedom of information laws allow access by the general public to data held by national governments and, where applicable, by state and local governments. The emergence of freedom of information legislation was a response to increasing dissatisfaction with the secrecy surrounding government policy development and decision making. In recent years Access to Information Act has also been used. They establish a "right-to-know" legal process by which requests may be made for government-held information, to be received freely or at minimal cost, barring standard exceptions. Also variously referred to as open records, or sunshine laws, governments are typically bound by a duty to publish and promote openness. In many countries there are constitutional guarantees for the right of access to information, but these are usually unused if specific support legislation does not exist. Additionally, the United Nations Sustainable Development Goal 16 has a target to ensure public access to information and the protection of fundamental freedoms as a means to ensure accountable, inclusive and just institutions.

The role of information commissioner differs from nation to nation. Most commonly it is a title given to a government regulator in the fields of freedom of information and the protection of personal data in the widest sense. The office often functions as a specialist ombudsman service.

<span class="mw-page-title-main">Australian Human Rights Commission</span> Human rights institution of the Australian Government

The Australian Human Rights Commission is the national human rights institution of Australia, established in 1986 as the Human Rights and Equal Opportunity Commission (HREOC) and renamed in 2008. It is a statutory body funded by, but operating independently of, the Australian Government. It is responsible for investigating alleged infringements of Australia's anti-discrimination legislation in relation to federal agencies.

<span class="mw-page-title-main">Freedom of Information Act 2000</span> Act of Parliament in the United Kingdom

The Freedom of Information Act 2000 is an Act of the Parliament of the United Kingdom that creates a public "right of access" to information held by public authorities. It is the implementation of freedom of information legislation in the United Kingdom on a national level. Its application is limited in Scotland to UK Government offices located in Scotland. The Act implements a manifesto commitment of the Labour Party in the 1997 general election, developed by David Clark as a 1997 White Paper. The final version of the Act was criticised by freedom of information campaigners as a diluted form of what had been proposed in the White Paper. The full provisions of the act came into force on 1 January 2005.

A privacy policy is a statement or legal document that discloses some or all of the ways a party gathers, uses, discloses, and manages a customer or client's data. Personal information can be anything that can be used to identify an individual, not limited to the person's name, address, date of birth, marital status, contact information, ID issue, and expiry date, financial records, credit information, medical history, where one travels, and intentions to acquire goods and services. In the case of a business, it is often a statement that declares a party's policy on how it collects, stores, and releases personal information it collects. It informs the client what specific information is collected, and whether it is kept confidential, shared with partners, or sold to other firms or enterprises. Privacy policies typically represent a broader, more generalized treatment, as opposed to data use statements, which tend to be more detailed and specific.

Public records are documents or pieces of information that are not considered confidential and generally pertain to the conduct of government.

Freedom of information (FOI) in the United Kingdom refers to members of the general public’s right to access information held by public authorities. This right is covered in two parts:

  1. Public authorities must regularly publish updates and information regarding their activities, and
  2. Members of the public can make requests for information and updates regarding the activities of public authorities.

The Australian Intelligence Community (AIC) and the National Intelligence Community (NIC) or National Security Community of the Australian Government are the collectives of statutory intelligence agencies, policy departments, and other government agencies concerned with protecting and advancing the national security and national interests of the Commonwealth of Australia. The intelligence and security agencies of the Australian Government have evolved since the Second World War and the Cold War and saw transformation and expansion during the Global War on Terrorism with military deployments in Afghanistan, Iraq and against ISIS in Syria. Key international and national security issues for the Australian Intelligence Community include terrorism and violent extremism, cybersecurity, transnational crime, the rise of China, and Pacific regional security.

<span class="mw-page-title-main">Privacy Act 1988</span> Act of the Parliament of Australia

The Privacy Act 1988 is an Australian law dealing with privacy. Section 14 of the Act stipulates a number of privacy rights known as the Australian Privacy Principles (APPs). These principles apply to Australian Government and Australian Capital Territory agencies or private sector organizations contracted to these governments, organizations and small businesses who provide a health service, as well as to private organisations with an annual turnover exceeding AUD$3M. The principles govern when and how personal information can be collected by these entities. Information can only be collected if it is relevant to the agencies' functions. Upon this collection, that law mandates that Australians have the right to know why information about them is being acquired and who will see the information. Those in charge of storing the information have obligations to ensure such information is neither lost nor exploited. An Australian will also have the right to access the information unless this is specifically prohibited by law.

<i>Access to Information Act</i> Canadian freedom of information act

The Access to Information Act or Information Act is a Canadian Act providing the right of access to information under the control of a federal government institution. As of 2020, the Act allowed "people who pay $5 to request an array of federal files". Paragraph 2. (1) of the Act ("Purpose") declares that government information should be available to the public, but with necessary exceptions to the right of access that should be limited and specific, and that decisions on the disclosure of government information should be reviewed independently of government. Later paragraphs assign responsibility for this review to an Information Commissioner, who reports directly to parliament rather than the government in power. However, the Act provides the commissioner the power only to recommend rather than compel the release of requested information that the commissioner judges to be not subject to any exception specified in the Act.

<span class="mw-page-title-main">Official Information Act 1982</span> Act governing freedom of information in New Zealand

The Official Information Act 1982 (OIA) is an Act of the New Zealand Parliament which creates a public right to access information held by government bodies. It is New Zealand's primary freedom of information law and has become an important part of New Zealand's constitutional framework.

The Access to Information and Protection of Privacy Act (AIPPA) was passed in 2002 by the Zimbabwean Parliament under the majority of the Zimbabwe African National Union – Patriotic Front (ZANU–PF) and Former President Robert Mugabe.

<span class="mw-page-title-main">Freedom of Information Act 1982</span>

The Freedom of Information Act 1982(Cth) is an Act of the Parliament of Australia which guarantees freedom of information (FOI) and the rights of access to official documents of the Commonwealth Government and of its agencies to members of the public.

Freedom of information in Canada describes the capacity for the Canadian Government to provide timely and accurate access to internal data concerning government services. Each province and territory in Canada has its own access to freedom of information legislation.

<span class="mw-page-title-main">Ombudsman</span> Official representing the interests of the public

An ombudsman, ombud, ombuds, ombudswoman, ombudsperson or public advocate is an official who is usually appointed by the government or by parliament to investigate complaints and attempt to resolve them, usually through recommendations or mediation.

There is no absolute right to privacy in Australian law and there is no clearly recognised tort of invasion of privacy or similar remedy available to people who feel their privacy has been violated. Privacy is, however, affected and protected in limited ways by common law in Australia and a range of federal, state and territorial laws, as well as administrative arrangements.

New Zealand is committed to the Universal Declaration of Human Rights and has ratified the International Covenant on Civil and Political Rights, both of which contain a right to privacy. Privacy law in New Zealand is dealt with by statute and the common law. The Privacy Act 2020 addresses the collection, storage and handling of information. A general right to privacy has otherwise been created in the tort of privacy. Such a right was recognised in Hosking v Runting [2003] 3 NZLR 385, a case that dealt with publication of private facts. In the subsequent case C v Holland [2012] NZHC 2155 the Court recognised a right to privacy in the sense of seclusion or a right to be free from unwanted intrusion. For a useful summary see: court-recognises-intrusion-on-seclusion-privacy-tort-hugh-tomlinson-qc/

The Australian Privacy Commissioner is an independent statutory office-holder, appointed under subsection 14 (4) of the Australian Information Commissioner Act 2010. The Privacy Commissioner is one of three commissioners in the Office of the Australian Information Commissioner, and has functions relating to privacy and freedom of information.

<span class="mw-page-title-main">Telecommunications (Interception and Access) Amendment (Data Retention) Act 2015</span> Act of the Parliament of Australia

The Telecommunications (Interception and Access) Amendment (Data Retention) Act 2015(Cth) is an Act of the Parliament of Australia that amends the Telecommunications (Interception and Access) Act 1979 (original Act) and the Telecommunications Act 1997 to introduce a statutory obligation for Australian telecommunication service providers (TSPs) to retain, for a period of two years, particular types of telecommunications data (metadata) and introduces certain reforms to the regimes applying to the access of stored communications and telecommunications data under the original Act.

<span class="mw-page-title-main">Freedom of Information Order (Philippines)</span>

Philippine President Rodrigo Duterte signed Executive Order No. 02, also known as the Freedom of Information (FOI) Program, on July 23, 2016, in Davao City. The executive order established the first freedom of information (FOI) Program in the Philippines covering all government offices under the Executive Branch. It requires all executive departments, agencies, bureaus, and offices to disclose public records, contracts, transactions, and any information requested by a member of the public, except for matters affecting national security and other information that falls under the inventory of exceptions issued by Executive Secretary Salvador Medialdea. The landmark order was signed two days before Duterte delivered his first State of the Nation Address and just three weeks after he assumed the presidency on June 30, 2016.

References

  1. "Office of the Australian Information Commissioner | Annual report 2021–22" (PDF). Office of the Australian Information Commissioner . Australian Government. 19 October 2022. Retrieved 28 March 2023.
  2. Office of the Australian Information Commissioner - Entity resources and planned performance
  3. 1 2 3 "Australian Information Commissioner Act 2010".
  4. "The Privacy Act 1988".
  5. "The Freedom of Information Act 1982".
  6. "Who we are - Office of the Australian Information Commissioner (OAIC)". www.oaic.gov.au. Retrieved 2019-05-08.
  7. 1 2 "Freedom of Information Amendment (Reform) Act 2010".
  8. "Home - OAIC". Privacy.gov.au. Retrieved 2018-04-09.
  9. "The Privacy Act 1988".
  10. "Principles on open public sector information".