Enforcing ‘own motion’ investigations
Background50.2 In addition to the Commissioner’s power to investigate an act or practice when a complaint has been made, the Commissioner also can investigate an act or practice on his or her own motion where the Commissioner considers it desirable that the act or practice be investigated.[1] Own motion investigations are used by the OPC …
Publications
Read moreInjunctions
Background50.26 The Privacy Act contains detailed provisions regarding the granting of injunctions. Section 98 provides that following an application from the Commissioner or another person, the Federal Court or Federal Magistrates Court can grant an injunction restraining a person from engaging in conduct that would constitute a contravention of the Privacy Act and, if the …
Publications
Read moreOther enforcement mechanisms following non-compliance
Enforcement pyramid50.35 As discussed in Chapter 4, Professors Ian Ayres and John Braithwaite have suggested that the ideal regulatory approach to enforcing compliance with regulation is through the adoption of an explicit ‘enforcement pyramid’. Under such a model, regulators use coercive sanctions only when less interventionist measures have failed to produce compliance.[59] Breaches of increasing …
Publications
Read moreInvestigating privacy complaints
Background49.3 The Commissioner’s powers to investigate complaints of a breach of the Information Privacy Principles (IPPs) and the National Privacy Principles (NPPs) are established in separate paragraphs of s 27(1) of the Privacy Act.[1] These powers are activated by a ‘complaint’. The Act confers rights on individuals to complain to the Commissioner about acts or …
Publications
Read moreTransferring complaints to other bodies
Background49.14 The Privacy Act contemplates the use of other bodies to resolve privacy complaints. For example, a privacy code approved under the Act may provide procedures for dealing with complaints under the code. The Privacy Act also vests the Commissioner with discretion to refer complaints to other bodies. Where the Commissioner forms the view that …
Publications
Read moreResolution of privacy complaints
Model under the Privacy Act49.39 The Privacy Act provides two formal ways of resolving a complaint following an investigation. First, the Commissioner can endeavour, by conciliation, to effect a settlement between the complainant and respondent.[46] Secondly, the Commissioner can make a determination either dismissing the complaint or finding the complaint substantiated.[47]Conciliation49.40 The Commissioner is given …
Publications
Read moreAccountability and transparency
Background49.74 A number of stakeholders to this Inquiry submitted that transparency and accountability in complaint handling under the Privacy Act should be improved. Two methods of improving transparency and accountability are merits review of the Commissioner’s determinations and providing more guidance on the OPC’s complaint-handling policies and procedures. Merits reviewBackground49.75 The right to merits review …
Publications
Read moreOther issues in the complaint-handling process
Background49.90 In addition to general issues about investigating and resolving complaints under the Privacy Act, stakeholders raised a number of concerns relating to specific provisions in the Act. These included those provisions dealing with representative complaints, preliminary inquiries and the conduct of investigations. Representative complaints 49.91 The Privacy Act allows for the making of representative …
Publications
Read morePart IIIAA Privacy codes
48.2 When bringing organisations within the ambit of the Privacy Act, Parliament decided to adopt a co-regulatory approach. It established a framework in which organisations are able to develop specialised codes for the handling of personal information which, when approved, replace the National Privacy Principles (NPPs).[1] This approach was ‘designed to allow for flexibility in …
Publications
Read moreBinding codes
48.20 The Commissioner cannot initiate a privacy code and cannot make a code binding on organisations that do not consent to be bound. The issue of binding codes was discussed in detail in the OPC Review. Stakeholders submitted that the Commissioner should have the power to formulate and impose binding codes even where an organisation …
Publications
Read more