Compilation #9 | Effective 2024-12-11
FRBR Work URI: /akn/au/act/2010/52
This Act may be cited as the Australian Information Commissioner Act 2010.
Each provision of this Act specified in column 1 of the table commences, or is taken to have commenced, in accordance with column 2 of the table. Any other statement in column 2 has effect according to its terms.
Note: This table relates only to the provisions of this Act as originally passed by both Houses of the Parliament and assented to. It will not be expanded to deal with provisions inserted in this Act after assent.
Column 3 of the table contains additional information that is not part of this Act. Information in this column may be added to or edited in any published version of this Act.
In this Act:
agency has the meaning given by the Freedom of Information Act 1982.
consumer data right matters has the meaning given by section 32A.
Freedom of Information Commissioner means the person appointed under section 14 as the Freedom of Information Commissioner.
freedom of information functions has the meaning given by section 8.
freedom of information matters has the meaning given by subsection 31(1).
IGIS official has the meaning given by subsection 29(6).
Information Commissioner has the meaning given by section 3A.
information commissioner functions has the meaning given by section 7.
information officer has the meaning given by section 6.
partial access has a meaning affected by subsection 31(3).
Privacy Commissioner means the person appointed under section 14 as the Privacy Commissioner.
privacy functions has the meaning given by section 9.
privacy matters has the meaning given by section 32.
In any Act:
Information Commissioner means the person appointed under section 14 of this Act as the Australian Information Commissioner.
This Part establishes the Office of the Australian Information Commissioner.
The Office of the Australian Information Commissioner consists of the information officers and the staff of the Office.
The information officers are the Information Commissioner, the Freedom of Information Commissioner and the Privacy Commissioner. The Information Commissioner is the head of the Office (for the purposes of the Public Service Act 1999).
The functions of the Office are as follows:
(a) the freedom of information functions, which are about giving the Australian community access to information held by the Commonwealth Government in accordance with the Freedom of Information Act 1982 (and other Acts);
(b) the privacy functions, which are mainly about protecting the privacy of individuals in accordance with the Privacy Act 1988 (and other Acts);
the information commissioner functions, which are strategic functions concerning information management by the Commonwealth Government.
All of the information officers may perform the freedom of information functions and the privacy functions.
Only the Information Commissioner can perform the information commissioner functions.
The Office of the Australian Information Commissioner is established by this section.
The Office of the Australian Information Commissioner consists of:
the information officers; and
the staff mentioned in Part 3.
(3) For the purposes of the Public Service Act 1999:
the information officers and staff of the Office of the Australian Information Commissioner together constitute a Statutory Agency; and
the Information Commissioner is the Head of that Statutory Agency.
Note: The Information Commissioner holds an office equivalent to that of a Secretary of a Department (see the definition of Agency Head in section 7 of the Public Service Act 1999).
(4) For the purposes of the finance law (within the meaning of the Public Governance, Performance and Accountability Act 2013):
the Office of the Australian Information Commissioner is a listed entity; and
the Information Commissioner is the accountable authority of the Office of the Australian Information Commissioner; and
the following persons are officials of the Office of the Australian Information Commissioner:
the information officers;
the staff mentioned in Part 3;
consultants engaged under section 24; and
the purposes of the Office of the Australian Information Commissioner include:
the functions of the Information Commissioner referred to in section 10; and
the functions of the Freedom of Information Commissioner referred to in section 11; and
the functions of the Privacy Commissioner referred to in section 12.
Each of the following is an information officer:
the Information Commissioner;
the Freedom of Information Commissioner;
the Privacy Commissioner.
The information commissioner functions are as follows:
to report to the Minister on any matter that relates to the Commonwealth Government’s policy and practice with respect to:
the collection, use, disclosure, management, administration or storage of, or accessibility to, information held by the Government; and
the systems used, or proposed to be used, for the activities covered by subparagraph (i);
any other function conferred by this Act or another Act (or an instrument under this Act or another Act) on the Information Commissioner other than a freedom of information function or a privacy function.
The freedom of information functions are as follows:
(a) promoting awareness and understanding of the Freedom of Information Act 1982 and the objects of that Act (including all the matters set out in sections 3 and 3A of that Act);
(b) assisting agencies under Freedom of Information Act 1982 to publish information in accordance with the information publication scheme under Part II of that Act;section 8E of the
(c) the functions conferred by Freedom of Information Act 1982;section 8F of the
(d) providing information, advice, assistance and training to any person or agency on matters relevant to the operation of the Freedom of Information Act 1982;
(e) issuing guidelines under Freedom of Information Act 1982;section 93A of the
making reports and recommendations to the Minister about:
(i) proposals for legislative change to the Freedom of Information Act 1982; or
administrative action necessary or desirable in relation to the operation of that Act;
(g) monitoring, investigating and reporting on compliance by agencies with the Freedom of Information Act 1982;
(h) reviewing decisions under Freedom of Information Act 1982;Part VII of the
(i) undertaking investigations under Freedom of Information Act 1982;Part VIIB of the
collecting information and statistics from agencies and Ministers about the freedom of information matters (see section 31) to be included in the annual reports mentioned in section 30;
(k) any other function conferred on the Information Commissioner by the Freedom of Information Act 1982;
any other function conferred on the Information Commissioner by another Act (or an instrument under another Act) and expressed to be a freedom of information function.
(1) The privacy functions are functions conferred on the Information Commissioner by an Act (or an instrument under an Act), if:
the functions:
relate to the privacy of an individual; and
are not freedom of information functions; or
the functions are conferred by:
(i) Competition and Consumer Act 2010; orPart IVD (about the consumer data right) of the
an instrument made under that Part; or
another Act because of that Part.
The functions mentioned in subsection (1) include, but are not limited to, the provisions in the following table.
The Information Commissioner has the following functions:
the information commissioner functions;
the freedom of information functions;
the privacy functions.
The Information Commissioner has power to do all things necessary or convenient to be done for or in connection with the performance of functions conferred by this section.
The Freedom of Information Commissioner has the freedom of information functions.
The Freedom of Information Commissioner may also perform the privacy functions.
The Freedom of Information Commissioner has power to do all things necessary or convenient to be done for or in connection with the performance of functions conferred by this section.
However, the following actions may only be taken with the approval of the Information Commissioner:
the issue, variation or revocation of a guideline mentioned in paragraph 8(e);
the making of a report or recommendation under paragraph 8(f) to the Minister about:
(i) proposals for legislative change to the Freedom of Information Act 1982; or
administrative action necessary or desirable in relation to the operation of that Act.
If the Freedom of Information Commissioner performs a function, or exercises a power, expressed by an Act (or an instrument under an Act) to be conferred on the Information Commissioner:
the Freedom of Information Commissioner must perform the function or exercise the power upon his or her own belief or state of mind (to the extent that the performance or exercise is dependent on the belief or state of mind of the Information Commissioner); and
the function or power is taken to have been performed or exercised by the Information Commissioner; and
neither the Information Commissioner, nor the Privacy Commissioner, is prevented from performing the same function, or exercising the same power, on another occasion (in relation to a different matter).
The Privacy Commissioner has the privacy functions.
The Privacy Commissioner may also perform the freedom of information functions (whether or not the Privacy Commissioner holds the qualifications mentioned in subsection 14(3)).
The Privacy Commissioner has power to do all things necessary or convenient to be done for or in connection with the performance of functions conferred by this section.
However, the following actions may only be undertaken with the approval of the Information Commissioner:
(a) performing the functions, and exercising the powers, conferred on the Commissioner by Privacy Act 1988;Part IIIB of the
(c) the making of guidelines under paragraph 28(1)(a) or (b) of the Privacy Act 1988, or the variation or revocation of those guidelines;
the issue, variation or revocation of rules under:
(i) Privacy Act 1988; orsection 17 of the
(ii) Data-matching Program (Assistance and Tax) Act 1990; orsection 12 of the
(iii) National Health Act 1953;section 135AA of the
(e) the making of a report or recommendation to the Minister in relation to any matter that concerns the need for or the desirability of legislative or administrative action in the interests of the privacy of individuals under paragraph 28B(1)(c) of the Privacy Act 1988;
(g) advising the Minister whether an exclusion from the application of Crimes Act 1914 should be granted and whether there should be any restrictions on the circumstances in which an exclusion would apply under paragraph 85ZZ(1)(b) of that Act.Division 3 of Part VIIC of the
If the Privacy Commissioner performs a function, or exercises a power, expressed by an Act (or an instrument under an Act) to be conferred on the Information Commissioner:
the Privacy Commissioner must perform the function or exercise the power upon his or her own belief or state of mind (to the extent that the performance or exercise is dependent on the belief or state of mind of the Information Commissioner); and
the function or power is taken to have been performed or exercised by the Information Commissioner; and
neither the Information Commissioner, nor the Freedom of Information Commissioner, is prevented from performing the same function, or exercising the same power, on another occasion (in relation to a different matter).
This Division provides for:
the appointment of the information officers; and
(b) the staff of the Office of the Australian Information Commissioner, who are engaged under the Public Service Act 1999.
The Information Commissioner may engage consultants.
The Information Commissioner may delegate all of his or her functions or powers, other than the information commissioner functions, the preparation of reports, the making of certain instruments (such as guidelines and determinations) and certain formal procedural steps.
Appointment of the Australian Information Commissioner
The Australian Information Commissioner is to be appointed by the Governor-General by written instrument.
Note: The Australian Information Commissioner is referred to in this and other Acts as the Information Commissioner (see sections 3 and 3A).
Appointment of the Freedom of Information Commissioner
The Freedom of Information Commissioner is to be appointed by the Governor-General by written instrument.
A person may only be appointed as the Freedom of Information Commissioner if he or she has obtained a degree from a university, or an educational qualification of a similar standing, after studies in the field of law.
Appointment of the Privacy Commissioner
The Privacy Commissioner is to be appointed by the Governor-General by written instrument.
Note: The information officers are all eligible for reappointment: see Acts Interpretation Act 1901.section 33AA of the
An information officer holds office for the period specified in the information officer’s instrument of appointment. The period must not exceed 5 years.
An information officer holds office on a full-time basis.
An information officer holds office on the terms and conditions (if any), in relation to matters not covered by this Act, that are determined by the Governor-General.
An information officer must not engage in paid employment outside the duties of his or her office without the Minister’s approval.
An information officer is to be paid the remuneration that is determined by the Remuneration Tribunal. If no determination of remuneration by the Tribunal is in operation, the information officer is to be paid the remuneration that is prescribed by the regulations.
An information officer is to be paid the allowances that are prescribed by the regulations.
(3) This section has effect subject to the Remuneration Tribunal Act 1973.
An information officer has the recreation leave entitlements that are determined by the Remuneration Tribunal.
The Minister may grant an information officer leave of absence, other than recreation leave, on the terms and conditions as to remuneration or otherwise that the Minister determines.
An information officer may resign his or her appointment by giving the Governor-General a written resignation.
The resignation takes effect on the day it is received by the Governor-General or, if a later day is specified in the resignation, on that later day.
The Governor-General may terminate the appointment of an information officer for misbehaviour or physical or mental incapacity.
The Governor-General must terminate the appointment of an information officer if any of the following apply:
the information officer:
becomes bankrupt; or
applies to take the benefit of any law for the relief of bankrupt or insolvent debtors; or
compounds with his or her creditors; or
makes an assignment of his or her remuneration for the benefit of his or her creditors;
the information officer is absent, except on leave of absence, for 14 consecutive days or for 28 days in any 12 months;
the information officer engages, except with the Minister’s approval, in paid employment outside the duties of his or her office;
(d) the information officer fails, without reasonable excuse, to comply with Public Governance, Performance and Accountability Act 2013 (which deals with the duty to disclose interests) or rules made for the purposes of that section.section 29 of the
The Minister may, by written instrument, appoint a person to act as an information officer:
during a vacancy in the office of the information officer (whether or not an appointment has previously been made to the office); or
during any period, or during all periods, when the information officer:
is absent from duty or from Australia; or
is, for any reason, unable to perform the duties of the office.
Note: For rules that apply to acting appointments, see Acts Interpretation Act 1901.section 33A of the
A person must not be appointed to act as the Freedom of Information Commissioner unless he or she is qualified, as mentioned in subsection 14(3), to be appointed as the Freedom of Information Commissioner.
(1) A disclosure by an information officer under Public Governance, Performance and Accountability Act 2013 (which deals with the duty to disclose interests) must be made to the Minister.section 29 of the
Subsection (1) applies in addition to any rules made for the purposes of that section.
(3) For the purposes of this Act and the Public Governance, Performance and Accountability Act 2013, the information officer is taken not to have complied with section 29 of that Act if he or she does not comply with subsection (1) of this section.
The staff of the Office of the Australian Information Commissioner must be persons engaged under the Public Service Act 1999.
The Information Commissioner may, on behalf of the Commonwealth, engage consultants to assist in the performance of the functions and the exercise of the powers of the Information Commissioner (see section 10).
However, a consultant engaged under subsection (1) may only perform a function, or exercise a power, if the function or power can be delegated to a member of staff of the Office of the Australian Information Commissioner under section 25.
Subject to subsection (2), the Information Commissioner may delegate, in writing, all or any of his or her functions or powers to a member of staff of the Office of the Australian Information Commissioner, other than the following:
the information commissioner functions conferred by paragraph 7(a) (reporting to the Minister);
preparing the report mentioned in section 30;
issuing guidelines as mentioned in paragraph 8(e);
(d) the function conferred by Freedom of Information Act 1982 (referring questions of law in a review to the Federal Court of Australia);section 55H of the
(f) the function conferred by Freedom of Information Act 1982 (correcting errors in IC review decisions);section 55Q of the
(i) the function conferred by sections 89 and 89A of the Freedom of Information Act 1982 (implementation notices and reports);
(j) the function conferred by Freedom of Information Act 1982 (making a vexatious applicant declaration);section 89K of the
(k) issuing rules under Privacy Act 1988.section 17 of the
The Information Commissioner may only delegate the following functions or powers to a member of staff of the Office of the Australian Information Commissioner who is an SES employee, or an acting SES employee, or who holds, or is acting in, a position that is equivalent to, or higher than, a position occupied by an SES employee:
(a) the function conferred by Freedom of Information Act 1982 (making a decision on an IC review);section 55K of the
(b) the function conferred by Freedom of Information Act 1982 (discretion not to investigate a complaint);section 73 of the
(c) the function conferred by Freedom of Information Act 1982 (obligation to notify on completion of investigation);section 86 of the
(d) making determinations for the purposes of Privacy Act 1988.section 52 of the
This Part establishes an Information Advisory Committee to assist and advise the Information Commissioner on matters relating to the performance of the information commissioner functions.
There is to be an Information Advisory Committee, with the function of assisting and advising the Information Commissioner in matters relating to the performance of the information commissioner functions.
The Committee consists of the following persons:
the Information Commissioner, as Chair;
senior officers of agencies nominated in writing by the Minister, in consultation with the relevant Ministers;
such other persons as the Minister thinks fit and who, in the Minister’s opinion, hold suitable qualifications or experience.
A Committee member appointed by the Minister for the purposes of paragraph (2)(c) is entitled to be paid travel allowance in accordance with the regulations.
However, a person covered by subsection (3) is not entitled to be paid any remuneration or allowances in relation to the holding of the position of Committee member other than any travel allowance that is prescribed for the purposes of subsection (3).
Disclosure to Minister
A member of the Information Advisory Committee must give written notice to the Minister of all interests, pecuniary or otherwise, that the member has or acquires and that conflict or could conflict with the proper performance of the member’s functions.
Disclosure to Information Advisory Committee
A member of the Information Advisory Committee must disclose to a meeting of the Committee the nature of an interest, pecuniary or otherwise, that he or she has in a matter being considered, or about to be considered, by the Committee.
The disclosure must be made as soon as possible after the relevant facts have come to the Committee member’s knowledge.
The disclosure must be recorded in the minutes of the meeting of the Committee.
Unless the Committee otherwise determines, the Committee member:
must not be present during any deliberation by the Committee on the matter; and
must not take part in any decision of the Committee with respect to the matter.
For the purposes of making a determination under subsection (5), the Committee member:
must not be present during any deliberation of the Committee for the purpose of making the determination; and
must not take part in making the determination.
A determination under subsection (5) must be recorded in the minutes of the meeting of the Committee.
Information Commissioner
This section does not apply in relation to the disclosure of interests by the Information Commissioner.
Note: The Information Commissioner, as an information officer, is required to disclose material personal interests to the Minister (see section 22).
This Part deals with a number of other matters relevant to the operation of the Office of the Australian Information Commissioner. These are as follows:
an offence for unauthorised dealings with information;
the requirements for annual reports;
immunity from legal suit;
the making of regulations.
A person commits an offence if:
the person makes a record of, discloses or otherwise uses information; and
the information was acquired by the person in the course of performing functions or exercising powers conferred for the purposes of an information commissioner function, a freedom of information function or a privacy function.
Penalty: Imprisonment for 2 years.
Note: Chapter 2 of the Criminal Code sets out the general principles of criminal responsibility.
This section does not apply if:
both of the following apply:
the information was acquired by the person in the course of performing an information commissioner function or exercising a related power;
the person records, discloses or otherwise uses the information in the course of performing an information commissioner function or exercising a related power; or
both of the following apply:
the information was acquired by the person in the course of performing a freedom of information function or exercising a related power;
the person records, discloses or otherwise uses the information in the course of performing a freedom of information function or exercising a related power; or
both of the following apply:
the information was acquired by the person in the course of performing a privacy function or exercising a related power;
the person records, discloses or otherwise uses the information in the course of performing a privacy function or exercising a related power; or
for information covered by subsection (5)—the person records, discloses or otherwise uses the information in the course of any of the following:
performing a function described in paragraph 9(1)(b), or exercising a related power;
providing information to the Minister or the Department;
(iii) providing information to the Minister administering Competition and Consumer Act 2010 or the Department administered by that Minister;Part IVD of the
providing information to the Australian Competition and Consumer Commission or the Data Recipient Accreditor (within the meaning of that Act); or
the person acquires the information for any other lawful purpose; or
the person to whom the information relates consents to the recording, disclosure or use of the information; or
the person:
records or otherwise uses the information for the purpose of an IGIS official exercising a power, or performing a function or duty, as an IGIS official; or
discloses the information to an IGIS official for the purpose of the IGIS official exercising a power, or performing a function or duty, as an IGIS official.
Note: A defendant bears an evidential burden in relation to the matters in subsection (2) (see subsection 13.3(3) of the Criminal Code).
A person to whom this section applies must not be required to do either of the following unless that disclosure or production is necessary for the purposes of this Act:
disclose to a court information that the person acquired in the course of performing functions or exercising powers under this Act for the purposes of another Act (or an instrument under another Act) that confers an information commissioner function, a freedom of information function or a privacy function;
produce all or part of a document that contains information of that kind to a court.
(4) For the purposes of subsection (3), court includes any tribunal, authority or person having power to require the production of documents or the answering of questions.
This subsection covers information that:
was acquired in the course of performing a function described in paragraph 9(1)(b) (about the consumer data right), or exercising a related power; or
could be relevant to either of the following decisions:
(i) a decision under subsection 56CA(1) (about accreditation for the consumer data right) of the Competition and Consumer Act 2010;
a decision under the consumer data rules (within the meaning of that Act) relating to a person’s accreditation under subsection 56CA(1) of that Act.
In this Act:
IGIS official means:
the Inspector-General of Intelligence and Security; or
(b) any other person covered by subsection 32(1) of the Inspector-General of Intelligence and Security Act 1986.
The annual report prepared by the Information Commissioner and given to the Minister under Public Governance, Performance and Accountability Act 2013 for a period must include:section 46 of the
the freedom of information matters (see section 31); and
the privacy matters (see section 32); and
the consumer data right matters (see section 32A).
(1) The freedom of information matters are as follows:
information about any guidelines mentioned in paragraph 8(e) issued during the year and the matters to which those guidelines relate;
(b) the number of requests under the Freedom of Information Act 1982 to which subsection (2) applies;
(c) the number of applications under Freedom of Information Act 1982 received during the year and particulars of the results of those applications;section 48 of the
particulars of the total charges collected during the year in dealing with requests and other applications whenever received;
(e) the number of applications made under Freedom of Information Act 1982 during the year for the internal review of decisions, and particulars of the results of those reviews;Part VI of the
(f) the number of applications made under Freedom of Information Act 1982 during the year to the Information Commissioner for the review of decisions, and particulars of the results of those reviews;Part VII of the
(g) the number of applications made under Freedom of Information Act 1982 during the year to the Administrative Review Tribunal for the review of decisions, and particulars of the results of those reviews;Part VIIA of the
(h) the number of complaints made under Freedom of Information Act 1982 during the year to the Information Commissioner, and particulars of the results of investigations undertaken as a result of those complaints;Part VIIB of the
(i) a description of any efforts made by the Information Commissioner to assist agencies to comply with the agency’s obligations under the Freedom of Information Act 1982.
This subsection applies to a request if, during the year:
(a) the request was received under Freedom of Information Act 1982; orsection 15 of the
access (other than partial access) to the document (or all of the documents) to which the request relates was given; or
access to the document (or all of the documents) to which the request relates was refused; or
partial access to the document (or documents) to which the request relates was granted.
(3) Without limiting subsection (2), and for the purposes of that subsection, partial access is granted in respect of a request if either or both of the following conditions are satisfied in relation to the request:
(a) access was granted to an edited copy (Freedom of Information Act 1982) of the document (or any of the documents) requested;within the meaning of section 22 of the
the request related to 2 or more documents and access was refused to one or more of the documents.
(1) The privacy matters are as follows:
(a) a statement of the performance during the year of the privacy functions conferred by Privacy Act 1988;section 17 and paragraph 28A(1)(d) of the
(b) a statement about the operation of registered APP codes under the Privacy Act 1988 that contain procedures covered by subsection (2), including details about the number of complaints made during the year under codes, their nature and outcome;
(c) a statement including details about the number of complaints made under Privacy Act 1988 during the year;section 36 of the
(d) a statement including details about the number of complaints made under section 36 of the Privacy Act 1988 in relation to which the Commissioner has decided during the year under section 41 of that Act not to investigate, or not to investigate further, and the relevant grounds for the decision.
This subsection covers procedures for making and dealing with complaints in relation to acts or practices that may be an interference with the privacy of an individual.
The consumer data right matters are a statement of the performance of the functions conferred as described in paragraph 9(1)(b).
The Minister must cause a review of the operation of this Act to be undertaken.
The review must:
start 2 years after the commencement of this section; and
be completed within 6 months.
The Minister must cause a written report about the review to be prepared.
The Minister must cause a copy of the report to be laid before each House of the Parliament within 15 sitting days of that House after the Minister receives the report.
The Office of the Australian Information Commissioner has the privileges and immunities of the Crown.
This section applies to a person if:
the person is an information officer; or
the person is acting under the direction or authority of an information officer.
The person is not liable to an action, suit or proceeding in relation to an act done or omitted to be done in good faith in the exercise or purported exercise of any power or authority conferred for the purposes of an information commissioner function, a freedom of information function or a privacy function.
The Governor-General may make regulations prescribing matters:
required or permitted by this Act to be prescribed; or
necessary or convenient to be prescribed for carrying out or giving effect to this Act.
Endnotes
Endnote 1—About the endnotes
The endnotes provide information about this compilation and the compiled law.
The following endnotes are included in every compilation:
Endnote 1—About the endnotes
Endnote 2—Abbreviation key
Endnote 3—Legislation history
Endnote 4—Amendment history
Abbreviation key—Endnote 2
The abbreviation key sets out abbreviations that may be used in the endnotes.
Legislation history and amendment history—Endnotes 3 and 4
Amending laws are annotated in the legislation history and amendment history.
The legislation history in endnote 3 provides information about each law that has amended (or will amend) the compiled law. The information includes commencement details for amending laws and details of any application, saving or transitional provisions that are not included in this compilation.
The amendment history in endnote 4 provides information about amendments at the provision (generally section or equivalent) level. It also includes information about any provision of the compiled law that has been repealed in accordance with a provision of the law.
Editorial changes
The Legislation Act 2003 authorises First Parliamentary Counsel to make editorial and presentational changes to a compiled law in preparing a compilation of the law for registration. The changes must not change the effect of the law. Editorial changes take effect from the compilation registration date.
If the compilation includes editorial changes, the endnotes include a brief outline of the changes in general terms. Full details of any changes can be obtained from the Office of Parliamentary Counsel.
Misdescribed amendments
A misdescribed amendment is an amendment that does not accurately describe how an amendment is to be made. If, despite the misdescription, the amendment can be given effect as intended, then the misdescribed amendment can be incorporated through an editorial change made under Legislation Act 2003.section 15V of the
If a misdescribed amendment cannot be given effect as intended, the amendment is not incorporated and “(md not incorp)” is added to the amendment history.
Endnote 2—Abbreviation key
Endnote 3—Legislation history
Endnote 4—Amendment history