Australian Crime Commission Act 2002

The CEO may disclose ACC information to a body corporate that is prescribed, or is included in a class of bodies corporate that is prescribed, by the regulations for the purposes of this section if:

the CEO considers it appropriate to do so; and

the CEO considers that disclosing the information to the body is necessary for a permissible purpose; and

the body has undertaken, in writing, not to use or further disclose the information except:

as referred to in subsection (3); or

as required by a law of the Commonwealth, a State or a Territory; and

the body has undertaken, in writing, to comply with any conditions the CEO specifies under subsection (4) or (5); and

disclosing the ACC information would not prejudice:

a person’s safety; or

a person’s fair trial if the person has been charged with an offence or such a charge is imminent; and

disclosing the ACC information would not be contrary to a law of the Commonwealth, a State or Territory that would otherwise apply.

The CEO may disclose ACC information to a body corporate under subsection (1) only if:

for information that is personal information (within the meaning of the Privacy Act 1988)—the CEO considers that disclosing the information is necessary for the purposes of:

preventing criminal offences or activities that might constitute criminal offences (including under a law of a foreign country); or

detecting criminal offences or activities that might constitute criminal offences (including under a law of a foreign country); or

facilitating the collection of criminal information and intelligence in relation to criminal offences or activities that might constitute criminal offences (including under a law of a foreign country); and

in any case—the information is not confidential commercial information relating to another body or person.

In deciding whether to disclose national policing information under subsection (1), the CEO must act in accordance with any policy determined, and any direction given, in writing by the Board.

The CEO must obtain the approval of the Board before disclosing national policing information under subsection (1).

The CEO must specify, in writing, any permissible purpose for which the ACC information may be used or further disclosed.

If the CEO discloses ACC information that is personal information (within the meaning of the Privacy Act 1988) to a body corporate, the CEO must specify, in writing:

one or more conditions that the body corporate must meet in relation to monitoring and controlling any further disclosure of that information by an employee or officer of the body corporate; and

a condition that the information is not to be disclosed to a person who is not an employee or officer of the body corporate, other than in any circumstances specified; and

one or more conditions that the body corporate must meet in order to ensure that the information is not used or disclosed in a way that might prejudice the reputation of a person.

The CEO may specify, in writing, any other conditions that the CEO considers appropriate in relation to ACC information that is disclosed under, or in accordance with, this section (whether in relation to personal information or any other ACC information).

An instrument made under subsection (3), (4) or (5) is not a legislative instrument.

A person commits an offence if:

ACC information is disclosed to the person under, or in accordance with, this section; and

the person (directly or indirectly):

makes a record of the information; or

discloses the information to any other person; and

the record or disclosure referred to in paragraph (b) is not:

for a purpose specified under subsection (3) in relation to the information; or

required by any other law.

A person commits an offence if:

ACC information is disclosed to the person under, or in accordance with, this section; and

the CEO specifies a condition under subsection (4) or (5) in relation to the information; and

the person does an act or omits to do an act in relation to the information; and

the act or omission breaches the condition.

Subsections (7) and (8) do not apply to a person in relation to ACC information if:

the information is in the public domain before the person:

makes the record, or discloses the information (if subsection (7) applies); or

does the act or omits to do the act in relation to the information (if subsection (8) applies); and

the original disclosure of the information into the public domain (before the person does the thing referred to in subparagraph (a)(i) or (ii) of this subsection) was not:

in contravention of section 51 or subsection (7) or (8) of this section; or

in breach of an undertaking given under subsection (1) of this section.

A defendant bears an evidential burden in relation to the matter in subsection (9) (see subsection 13.3(3) of the Criminal Code).