Privacy and Personal Information Protection Act 1998

A person (the applicant) who is aggrieved by the conduct of a public sector agency is entitled to a review of that conduct.

There is no entitlement under this section to the review of the conduct of a Minister (or a Minister’s personal staff) in respect of a contravention of section 15 (Alteration of personal information).

The review is to be undertaken by the public sector agency concerned.

An application for such a review must—

be in writing, and

be addressed to the public sector agency concerned, and

specify an address in Australia to which a notice under subsection (8) may be sent, and

be lodged at an office of the public sector agency within 6 months (or such later date as the agency may allow) from the time the applicant first became aware of the conduct the subject of the application, and

comply with such other requirements as may be prescribed by the regulations.

Except as provided by section 54 (3), the application must be dealt with by an individual within the public sector agency who is directed by the agency to deal with the application. That individual must be, as far as is practicable, a person—

who was not substantially involved in any matter relating to the conduct the subject of the application, and

who is an employee or officer of the agency, and

who is otherwise suitably qualified to deal with the matters raised by the application.

In reviewing the conduct the subject of the application, the individual dealing with the application must consider any relevant material submitted by—

the applicant, and

the Privacy Commissioner.

The review must be completed as soon as is reasonably practicable in the circumstances. However, if the review is not completed within 60 days from the day on which the application was received, the applicant is entitled to make an application under section 55 to the Tribunal for an administrative review of the conduct concerned.

Following the completion of the review, the public sector agency whose conduct was the subject of the application may do any one or more of the following—

take no further action on the matter,

make a formal apology to the applicant,

take such remedial action as it thinks appropriate (eg the payment of monetary compensation to the applicant),

provide undertakings that the conduct will not occur again,

implement administrative measures to ensure that the conduct will not occur again.

A public sector agency may not pay monetary compensation under subsection (7) if—

the applicant is a convicted inmate or former convicted inmate or a spouse, partner (whether of the same or the opposite sex), relative, friend or an associate of a convicted inmate or former convicted inmate, and

the application relates to conduct of a public sector agency in relation to the convicted inmate or former convicted inmate, and

the conduct occurred while the convicted inmate or former convicted inmate was a convicted inmate, or relates to any period during which the convicted inmate or former convicted inmate was a convicted inmate.

As soon as practicable (or in any event within 14 days) after the completion of the review, the public sector agency must notify the applicant in writing of—

the findings of the review (and the reasons for those findings), and

the action proposed to be taken by the agency (and the reasons for taking that action), and

the right of the person to have those findings, and the agency’s proposed action, administratively reviewed by the Tribunal.