The court confirmed that the scope of Tribunal review under s 55 of the PPIP Act is limited to conduct that was the subject of the application for internal review under s 53, and that a person complaining 'on behalf of' another about disclosure of that other person's information must demonstrate personal prejudice to have standing as a person 'aggrieved'. The court also indicated, obiter, that 'consent' in Health Privacy Principle 11 includes implied consent, consistent with the Privacy Act 1988 (Cth).
The full text is available to signed-in members, including the 2 later cases that cite this judgment.