Identity Protection and Recovery Act 2025

The disclosure of information between the following persons is a protected disclosure if the disclosure is for the exercise of an identity protection function—

a public sector agency and the Secretary,

a law enforcement agency and the Secretary,

another person and the Secretary.

The following applies to a person referred to in subsection (1) who makes or is involved in a protected disclosure—

the person does not incur civil liability, including liability—

for an action for defamation, or

for breaching a duty of secrecy or confidentiality, or

for breaching another restriction on disclosure applicable to the person, whether or not imposed by this Act or another law, and

the person does not incur criminal liability, including liability for breaching—

a law or code of conduct imposing a duty of secrecy or confidentiality, or

another restriction in relation to the disclosure of information, and

the person is not liable to disciplinary action.

Subsection (2) does not apply to a person if the liability arises in relation to the person—

contravening a provision of this Act, or

breaching a contract or agreement that relates to the exercise of an identity protection function to which the Secretary is a party.